ERX

ERX Edge Routers Command Reference Guide
Release 4.1.0
Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net
Part No. 162-00488-00
Juniper Networks is registered in the U.S. Patent and Trademark Office and in other countries as a trademark of Juniper Networks, Inc. Broadband Cable Processor, ERX, ESP, G1, G10, G-series, Internet Processor, JUNOS, JUNOScript, M5, M10, M20, M40, M40e, M160, M-series, NMC-RX, SDX, ServiceGuard, T320, T640, T-series, UMC, and Unison are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. All specifications are subject to change without notice. Products made or sold by Juniper Networks (including the M5, M10, M20, M40, M40e, M160, and T320 routers, T640 routing node, and the JUNOS software) or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,333,650, 6,359,479, and 6,406,312. ERX Edge Routers Command Reference Guide, Release 4.1.0 Copyright 2002, Juniper Networks, Inc. All rights reserved. Printed in USA. Writers: Richard Cochran, Justine Kangas, Helen Shaw, Brian Wesley Simmons, Michael Taillon Editor: Fran Mues Revision History November 2002 Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
SOFTWARE LICENSE AGREEMENT1

JUNIPER NETWORKS, INC. IS WILLING TO LICENSE THE ENCLOSED SOFTWARE AND ACCOMPANYING USER DOCUMENTATION (COLLECTIVELY, THE PROGRAM) TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. PLEASE READ THESE TERMS AND CONDITIONS CAREFULLY BEFORE COPYING OR USING THE ACCOMPANYING SOFTWARE OR INSTALLING THE HARDWARE UNIT WITH PRE-ENABLED SOFTWARE OR USING THE ACCOMPANYING USER DOCUMENTATION. BY USING THE ACCOMPANYING SOFTWARE OR INSTALLING THE HARDWARE UNIT WITH PRE-ENABLED SOFTWARE, YOU AGREE TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. IF YOU DO NOT AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE AGREEMENT, JUNIPER NETWORKS IS UNWILLING TO LICENSE THE PROGRAM TO YOU, IN WHICH EVENT YOU SHOULD PROMPTLY WITHIN TEN (10) DAYS FROM SHIPMENT RETURN THE UNUSED SOFTWARE, USER DOCUMENTATION, AND RELATED EQUIPMENT AND HARDWARE TO THE PLACE OF PURCHASE AND YOU WILL RECEIVE A FULL REFUND OF YOUR LICENSE FEE. THIS LICENSE AGREEMENT REPRESENTS THE ENTIRE AGREEMENT CONCERNING THE PROGRAM BETWEEN YOU AND JUNIPER NETWORKS, AND IT SUPERSEDES ANY PRIOR PROPOSAL, REPRESENTATION OR UNDERSTANDING BETWEEN THE PARTIES. 1. License Grant. Juniper Networks, Inc. (Juniper Networks) and its suppliers and licensors hereby grant to you and you hereby accept a nonexclusive, personal and nontransferable license to use the computer software and/or hardware unit with pre-enabled software, including all patches, error corrections, updates, and revisions thereto in machine-readable, object code form only (the Software), and the accompanying User Documentation on the Juniper Networks product owned by you and only as authorized in this License Agreement. You may make one (1) archival copy of the Software for backup purposes provided you affix to such copy all copyright, confidentiality, and proprietary notices that appear on the original. Except as authorized under this paragraph, no copies of the Program or any portions thereof may be made, in whole or in part, by you or any person under your authority or control. The Software and User Documentation are protected under copyright laws. The title to Software and User Documentation shall remain solely with Juniper Networks and its suppliers. Except as authorized above, you shall not: copy, in whole or in part, the Software or the related User Documentation; modify, reverse assemble, reverse compile, or otherwise translate, dissemble, or obtain source code for the Software or User Documentation, in whole or in part, or permit a third party to do so; rent, lease, distribute, sell, or create derivative works of the Software; pledge, lease, rent, sublicense or share its rights under this License Agreement; or, without Juniper Networks prior written consent, assign or transfer its rights hereunder. 2. Juniper Networks's Rights. You agree that the Software, including the User Documentation, embodies Juniper Networks's and its suppliers' and licensors' confidential and proprietary intellectual property protected under U.S. copyright law and you will use your best efforts to maintain their confidentiality. You further acknowledge and agree that Juniper Networks or its suppliers and licensors own all right, title, and interest in and to the Software, including all intellectual property rights therein. You shall take no action inconsistent with Juniper Networks's or its suppliers' ownership of such Software. You shall not sublicense, assign, or otherwise disclose to any third party the Software or any information about the operation, design, performance, or implementation of the Software and User Documentation without prior written consent of Juniper Networks. You agree to implement reasonable security measures to protect such confidential and proprietary information and copyrighted material. This License Agreement does not convey to you an interest in or to the Program, but only the limited right of use revocable in accordance with the terms of this License Agreement. 3. License Fees. The license fees paid by you are paid in consideration of the license granted under this License Agreement. 4. Term. This license is effective upon opening of the package(s) or use of the hardware containing the Software, and shall continue until terminated. You may terminate this License at any time by returning the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. This License will terminate immediately without notice from Juniper Networks if you breach any term or provision of this License. Upon such termination by Juniper Networks, you
1. If you and Juniper Networks, Inc., have executed another license agreement for the Program which is now in effect, then such agreement (Negotiated Agreement) shall supersede this Software License Agreement and shall exclusively govern the use and license terms of the Program.
must return the Software, including any User Documentation, and all copies or portions thereof to Juniper Networks. Termination of this License Agreement shall not prejudice Juniper Networks' rights to damages or other available remedy. 5. Limited Software Warranty: Juniper Networks warrants, for your benefit alone, that for a period of ninety (90) days from the date of shipment from Juniper Networks that the Software substantially conforms to its published specifications. The limited warranty extends only to you as the original licensee. Your exclusive remedy and the entire liability of Juniper Networks and its suppliers under this limited warranty will be, at Juniper Networks' option, repair or replacement of the Software, or refund of the amounts paid by you under this License Agreement. You agree that this is your sole and exclusive remedy for breach by Juniper Networks, its suppliers or its licensors of any warranties made under this License Agreement. In no event does Juniper Networks warrant that the Software is error free or that you will be able to operate the Software without problems or interruptions. Juniper Networks does not warrant: 1) that the functions contained in the software will meet your requirements; 2) that the Software will operate in the hardware or software combination that you may select; 3) that the operation of the Software will be uninterrupted or error free; or 4) that all defects in the operation of the Software will be corrected. This warranty does not apply if the product: 1) has been altered, except by Juniper Networks; 2) has not been installed, operated, repaired, or maintained in accordance with instruction supplied by Juniper Networks; or 3) has been subjected to or damaged by improper environment, abuse, misuse, accident, or negligence. EXCEPT FOR THE WARRANTIES SET FORTH ABOVE, THE SOFTWARE IS LICENSED AS IS, AND JUNIPER NETWORKS DISCLAIMS ANY AND ALL OTHER REPRESENTATIONS, CONDITIONS, AND WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. ANY AND ALL SUCH WARRANTIES ARE HEREBY EXCLUDED TO THE EXTENT ALLOWED BY APPLICABLE LAW. JUNIPER NETWORKS' SUPPLIERS AND LICENSORS DO NOT MAKE OR PASS ON TO YOU OR ANY THIRD PARTY ANY EXPRESS, IMPLIED, OR STATUTORY WARRANTY OR REPRESENTATION, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR ANY WARRANTIES FOR NONINFRINGEMENT. 6. Proprietary Rights Indemnification. Juniper Networks shall at its expense defend you against and, subject to the limitations set forth elsewhere herein, pay all costs and damages made in settlement or awarded against you resulting from a claim that the Program as supplied by Juniper Networks infringes a United States copyright or a United States patent, or misappropriates a United States trade secret, provided that you: (a) provide prompt written notice of any such claim, (b) allow Juniper Networks to direct the defense and settlement of the claim, and (c) provide Juniper Networks with the authority, information, and assistance that Juniper Networks reasonably deems necessary for the defense and settlement of the claim. You shall not consent to any judgment or decree or do any other act in compromise of any such claim without first obtaining Juniper Networks written consent. In any action based on such a claim, Juniper Networks may, at its sole option, either: (1) obtain for you the right to continue using the Program, (2) replace or modify the Program to avoid the claim, or (3) if neither (1) nor (2) can reasonably be effected by Juniper Networks, terminate the license granted hereunder and give you a pro rata refund of the license fee paid for such Program, calculated on the basis of straight-line depreciation over a five-year useful life. Notwithstanding the preceding sentence, Juniper Networks will have no liability for any infringement or misappropriation claim of any kind if such claim is based on: (i) the use of other than the current unaltered release of the Program and Juniper Networks has provided or offers to provide such release to you for its then current license fee, or (ii) use or combination of the Program with programs or data not supplied or approved by Juniper Networks if such use or combination caused the claim. 7. Limitation of Liability. IN NO EVENT WILL JUNIPER NETWORKS OR ITS SUPPLIERS OR LICENSORS BE LIABLE FOR ANY COST FOR SUBSTITUTE PROCUREMENT; SPECIAL, INDIRECT, INCIDENTAL, PUNITIVE, EXEMPLARY, OR CONSEQUENTIAL DAMAGES; OR ANY DAMAGES RESULTING FROM INACCURATE OR LOST DATA OR LOSS OF USE OR PROFITS ARISING OUT OF OR IN CONNECTION WITH THE PERFORMANCE OF THE SOFTWARE, EVEN IF JUNIPER NETWORKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Juniper Networks' cumulative liability to you or any other party for any loss or damages resulting from any claims, demands, or actions arising out of or relating to this License Agreement shall not exceed the total fees paid to Juniper Networks for the Software. 8. Export Control. Software, including technical data, is subject to U.S. export control laws, including the U.S. Export Administration Act and its associated regulations, and may be subject to
export or import regulations in other countries. You agree to comply strictly with all such regulations and acknowledge that you have the responsibility to obtain licenses to export, re-export, or import Software. 9. Government Licensees: If any Software or associated documentation is acquired by or on behalf of a unit or agency of the United States government, the government agrees that such Software or documentation is a commercial item as that term is defined in 48 C.F.R. 2.101, consisting of commercial computer software or commercial computer software documentation as such terms are used in 48 C.F.R. 12.212 of the Federal Acquisition Regulations and its successors and 48 C.F.R. 227.7202-1 through 227.7202-4 of the DoD FAR Supplement and its successors. The use, duplication, or disclosure by the United States government of technical, data, computer software and documentation is subject to the restrictions set forth in FAR section 12.212(a), FAR section 52.227-14(g)(2), FAR section 52.227-19, DFARS section 252.227-7015(b), DFARS section 227.7202-1(a), and DFARS section 227.7202-3(a), as applicable. All United States government end users acquire the Software with only the rights set forth in this License Agreement. 10. General: This License shall be governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, United States of America, as if performed wholly within the state and without giving effect to the principles of conflict of law. Any dispute arising out of this Agreement shall be referred to an arbitration proceeding in Boston, Massachusetts, in accordance with the commercial arbitration rules of the American Arbitration Association (the AAA). If the parties cannot agree upon an arbitrator, arbitration shall be conducted by a neutral arbitrator selected by the AAA who is knowledgeable in electronics equipment manufacturing and software licensing. The parties shall share the procedural costs of arbitration equally, and each party shall pay its own attorneys' fees and other costs and expenses associated with the arbitration, unless the arbitrator decides otherwise. The arbitrator's award shall be in writing and shall include a statement of reasons, but the arbitrator shall not be permitted to award punitive or indirect damages. The arbitrator's decision and award shall be final and binding and may be entered in any court having jurisdiction. The terms of this section shall not prevent any party from seeking injunctive relief in any court of competent jurisdiction in order to protect its proprietary and confidential information. If any term or provision hereof is found to be void or unenforceable by a court of competent jurisdiction, the remaining provisions of this License Agreement shall remain in full force and effect. This License Agreement constitutes the entire agreement between the parties with respect to the use of the Software and User Documentation and supersedes any and all prior oral or written agreements, discussions, negotiations, commitments, or understandings. No amendment, modification, or waiver of any provision of this License Agreement will be valid unless in writing and signed by the authorized representative of the party against which such amendment, modification, or waiver is sought to be enforced. The waiver by either party of any default or breach of this License Agreement shall not constitute a waiver of any other or subsequent default or breach. This License Agreement shall be binding upon the parties and their respective successors and permitted assigns. Should you have any questions about this agreement, please contact: Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 Attn: Contracts Administrator
About This Guide
This Command Reference Guide provides all the commands available to configure your system. Refer to the Configuration Guides for detailed information on configuring your ERX system.
Note: If the information in the latest Release Notes differs from the information in this guide, follow the Release Notes.
Your ERX system is shipped with the latest system software installed. If you need to install a future release or reinstall the system software, refer to the procedures in ERX Installation and User Guide, Appendix E, Installing ERX System Software.
ERX Edge Routers

Four models of ERX edge router are available: ERX-1440 system ERX-1400 system ERX-705 system ERX-700 system All models use the same software. For information about the differences between the models, see ERX Installation and User Guide, Chapter 1, ERX System Overview. In the ERX documentation, the term ERX-1400 series refers to both the ERX-1440 system and the ERX-1400 system. Similarly, the term ERX-700 series refers to both the ERX-705 system and the ERX-700 system. The terms ERX-1440 system, ERX-1400 system, ERX-705 system, and ERX-700 system refer to the specific models.
viii About This Guide
Audience
This guide is intended for experienced system and network specialists who will configure a Juniper Networks ERX system in an Internet access environment.
Conventions
Table 1, Table 2, and Table 3 list all the conventions used in the ERX documentation. Table 1 defines notice icons. Table 2 shows text conventions used throughout the book, except for command syntax. Table 3 provides command syntax conventions used primarily in the ERX Command Reference Guide. For more information about command syntax, see ERX System Basics Configuration Guide, Chapter 1, Planning Your Network.
Table 1 Notice icons Icon Meaning Informational note Caution Description Indicates important features or instructions. Indicates that you may risk losing data or damaging your hardware.
Warning
Alerts you to the risk of personal injury.
Table 2 Text conventions (except for command syntax) Convention Bold typeface Description Represents commands and keywords in text. Examples Bold Courier typeface Key name in angle brackets Key names linked with a plus sign (+) in angle brackets. Plain Courier typeface Represents text that the user must type. Indicates the name of a key on the keyboard. Indicates that you must press two or more keys simultaneously. Represents information as displayed on your terminals screen. Command example: Issue the clock source command. Keyword example: Specify the keyword exp-msg.
user input Press <Enter>. Press <Ctrl+B>. host1#show ip ospf 2 Routing Process OSPF 2 with Router ID 5.5.0.250 Router is an Area Border Router (ABR)
Conventions ERX Edge Routers
ix
Table 2 Text conventions (except for command syntax) (continued) Convention Italics Description Emphasize words. Identify variables. Identify chapter, appendix, and book names. Examples There are two levels of access, user and privileged. clusterId, ipAddress. Appendix A, System Specifications.
Table 3 Syntax conventions in command reference guide Convention Words in plain text Words in italics Words separated by the | symbol Description Represent keywords. Represent variables. Represent a choice to select one keyword or variable to the left or right of this symbol. (The keyword or variable may be either optional or required.) Represent optional keywords or variables. Represent optional keywords or variables that can be entered more than once. Represent required keywords or variables. Examples terminal length mask, accessListName diagnostic | line
Words enclosed in [ brackets ] Words enclosed in [ brackets ]*
[ internal | external ] [ level1 | level2 | l1 ]*
Words enclosed in { braces }
{ permit | deny } { in | out } { clusterId | ipAddress }
Using the no vs. the default Version of Commands
Most system configuration commands have a no version, which you can use to negate a command (or a portion of it specified by an optional keyword) or restore its default setting. When you use a command without the keyword no, you can reenable a disabled feature or override a default setting. You have the option of using the default keyword whenever the no keyword is also a choice; simply enter the keyword default instead of no. In most cases, when you execute the default version of a command, it produces the exact results as the no version. There are some commands for which the default version yields a different result than the no version. Commands for which the default behavior differs from the no behavior are clearly identified in this guide. Unless otherwise specified, therefore, the default command is identical to the no command and will neither be documented nor discussed. The syntax for each no command is described in this guide. Some commands do not have a no version; this is indicated in the individual
x About This Guide
command descriptions except for the show commands, none of which has a no version. The CLI can act on no versions of commands when you have entered sufficient information to distinguish the command syntactically, and ignores all subsequent input on that line. To be compatible with some non-ERX implementations, the no versions of commands will accept the same options as the affirmative version of the commands. The CLI ignores the optional input if it has no effect on the command behavior. If using the option changes the behavior of the no version, the individual command entry in this guide describes the difference in behavior.
Filtering show Commands
You have access to a variety of show commands that display system and protocol information. You can filter the output of a show command by specifying | (the UNIX pipe symbol), one of the following keywords, and either a case-sensitive text string or a regular expression. begin displays output beginning with the first line that contains the text string or regular expression include displays output lines that contain the text string or regular expression and excludes lines that do not contain the text string or regular expression exclude displays output lines that do not contain the text string or regular expression and excludes lines that do contain the text string or regular expression For a list of regular expressions, see ERX Routing Protocols Configuration Guide, Vol. 1, Chapter 1, Configuring Routing Policy. You can press <Ctrl+C> to interrupt the show command output.
Note: The system does not recognize beginning spaces of the text string. For example, if you enter the include option with IP as the text string on which to filter, the system ignores the space and displays lines that include words such as RIP.
Example
In the following example, the output display consists only of lines that contain the string ip. The system omits all other lines of the output from the display because none of them contain the string ip.
host1#show config include-defaults | include ip ! Configuration script generated on FRI NOV 12 1999 16:56:41 UTC ip address 192.168.1.229 255.255.255.0
xi
ip rip receive version 2 1 ip rip send version 1 ip rip authentication mode md5 17 ip rip authentication key ip route 10.6.0.0 255.255.0.0 192.168.1.1 ip route 10.10.0.0 255.255.0.0 192.168.1.1 ip route 10.10.0.166 255.255.255.255 192.168.1.1 ip debounce-time 0 router rip
Interface Types and Specifiers
Many commands take the variables interfaceType and interfaceSpecifier. Some commands support all types of interfaces, whereas other commands support only certain types of interfaces. The interface specifier depends on the type of interface. Table 4 shows the interface specifiers for each type of interface.
Table 4 Interface types and specifiers Interface Type atm Description ATM interface Interface Specifier slot/port [.subinterface] slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface number of the subinterface in the range 14294967293 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface1 number of the FE subinterface in the range 14294967293; not more than 2 subinterfaces per FE interface.a subinterface2 number of the higher-level subinterface in the range 14294967293; not more than 4094 higher-level subinterfaces per FE subinterfacea Example atm 3/2.6
fastEthernet
IEEE 802.3 Fast Ethernet (FE) interface
slot/port [.subinterface1[.subinterface2]] fastEthernet 3/2.6.20
xii About This Guide
Table 4 Interface types and specifiers (continued) Interface Type gigabitEthernet Description IEEE 802.3 Gigabit Ethernet (GE) interface Interface Specifier slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module subinterface1 number of the GE subinterface in the range 14294967293; not more than 2 subinterfaces per GE interface.a subinterface2 number of the higher-level subinterface in the range 14294967293; not more than 4094 higher-level subinterfaces per GE subinterface.a hssi 3/0 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module loopback 20 integer integer in the range 14294967293 mlframe-relay boston.1 bundle-name name of the bundle subinterface number of the MFR subinterface in the range 14294967293 mlppp chicago null 0 bundle-name name of the bundle Example
slot/port [.subinterface1[.subinterface2]] gigabitEthernet 3/2.6.20
hssi
High-speed serial interface
slot/port
loopback Loopback interface
integer
mlframe-relay
Multilink frame relay interface
bundle-name [.subinterface ]
mlppp null
Multilink PPP interface Null interface, which cannot forward or receive traffic Packet over SONET (POS) interface
bundle-name 0
pos
slot/port slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module
pos 3/2
xiii
Table 4 Interface types and specifiers (continued) Interface Type serial Description CE1, CT1, CT3, E3-FRAME, T3-FRAME, cOCx/STMx interface, or X.21/V.35 interface Interface Specifier Example
Refer to the individual formats listed below.
CE1/CT1
slot/port:channel-group slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module channel-group number of the channel group associated with a range of DS0 timeslots on a CE1 or CT1 module; in the range 131 for a CE1 module, and 124 for a CT1 module
serial 3/2:20
CT3
slot/port:channel/subchannel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module channel - number of a T1 channel on a CT3 module; in the range 128 subchannel number of the channel group associated with a range of DS0 timeslots on a CT3 module; in the range 128
serial 3/2:20/15
E3/T3 FRAME
serial 3/2
xiv About This Guide
Table 4 Interface types and specifiers (continued) Interface Type Description Interface Specifier slot/port:path-channel/path-payload/ tributary-group/tributary-number/ channelNumber slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 path-payload number of the payload within the path tributary-group number of the tributary group within the path tributary-number number of the tributary within the group channelNumber 1 (the system assigns the number one to an unframed E1 channel) serial 3/0:10/1/2/2/1 Example serial 3/0:10/1/2/2/1
cOCx/STMx:
unframed E1
cOCx/STMx:
fractional E1/T1
slot/port:path-channel/path-payload/ tributary-group/tributary-number/ channel-group slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 path-payload number of the payload within the path tributary-group number of the tributary group within the path tributary-number number of the tributary within the group channel-group number of a fractional T1 or E1 line
xv
Table 4 Interface types and specifiers (continued) Interface Type Description Interface Specifier slot/port:path-channel/ ds3-channel-number slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 ds3-channel-number number of a T3 channel serial 3/0:1/1/10/15 Example serial 3/0:1/1
cOCx/STMx:
unchannelized DS3
cOCx/STMx:
DS3 channelized to DS0
slot/port:path-channel/ ds3-channel-number/ ds1-channel-number /subchannel-number slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 ds3-channel-number number of a T3 channel ds1-channel-number number of a T1 channel subchannel-number number of a fractional T1 channel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module
X.21/V.35
slot/port
sonet line layer Line layer of a SONET/SDH interface
sonet 3/0
xvi About This Guide
Table 4 Interface types and specifiers (continued) Interface Type sonet path layer Description Path layer of a SONET/SDH interface Interface Specifier slot/port:path-channel slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module path-channel number of the STS-1or STM-0 line in the range 12147483648 sonet 3/0 slot number of the chassis slot in the range 06 (ERX-700 series) and 013 (ERX-1400 series) port port number on the I/O module tunnel gre:boston tunnel-type type of the tunnel: dvmrp, gre, ipsec, l2tp, or mpls tunnel-name name of the tunnel Example sonet 3/0:2
sonet section layer
Section layer of a SONET/SDH interface
slot/port
tunnel Tunnel interface
tunnel-type:tunnel-name
a.See the interface fastEthernet command and the interface gigabitEthernet command for details on specifying subinterfaces with and without VLANs on Ethernet interfaces.
Documentation
The ERX Installation Quick Start poster is shipped in the box with all new systems. This poster provides the basic procedures to help you get the system up and running quickly. The document set contains the following books and online resources: ERX Installation and User Guide Provides the necessary procedures for getting your system operational, including information on installing, cabling, powering up, configuring your system for management access, and general troubleshooting. ERX System Basics Configuration Guide Describes planning and configuring your network, managing the system, passwords, and security, and configuring the system clock and virtual routers. ERX Physical and Link Layers Configuration Guide Describes configuring physical and link layer interfaces. ERX Routing Protocols Configuration Guide, Vol. 1 Provides information about configuring routing policy and configuring IP, IP routing, and IP security.
Using the Online Documentation CD ERX Edge Routers
xvii
ERX Routing Protocols Configuration Guide, Vol. 2 Describes BGP routing, MPLS, BGP-MPLS VPNs, and encapsulation of layer 2 services. ERX Policy and QoS Configuration Guide - Provides information about configuring policy management and quality of service (QoS). ERX Broadband Access Configuration Guide Provides information about configuring remote access. ERX Command Reference Guide Contains important information about all system commands implemented in the system software. Use to look up command descriptions, command syntax, a commands related mode, or a description of a commands parameters. It is intended to be used in conjunction with the ERX Configuration Guides. ERX Product Overview Guide Gives a thorough overview of the system from a software and hardware perspective. It provides illustrations and configuration examples that present the big picture. ERX Release Notes Contains information about features, changes, known problems, and limitations. Provides final information that did not make it into the documentation. ERX Online Documentation CD Provides an online version of this guide and the documents listed above. The online documents contain numerous links between guides, giving easy access to a vast amount of technical information.
Abbreviations
A complete list of abbreviations used in this document set, along with their spelled-out terms, is provided in the ERX System Basics Configuration Guide, Appendix A, Abbreviations and Acronyms.
Using the Online Documentation CD

To use the Online Documentation CD:
1 2 3
Place the Online Documentation CD in your CD-ROM drive. Follow the instructions located on the inside cover of your CD jewel case to install Acrobat Reader. From the Documentation folder on the CD, open the CDtips.pdf file for information on using Adobe Acrobat Reader.
xviii About This Guide
From the Documentation folder on the CD, open the Welcome.pdf file for access to the documentation set.
Comments About the Documentation

We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation to better meet your needs. Please e-mail your comments to: techpubs-comments@juniper.net Along with your comments, be sure to indicate: Document name Document part number Page number
Contacting Customer Support

For technical support, contact Juniper Networks at support@juniper.net, or at 1-888-314-JTAC (within the United States) or 408-745-2121 (from outside the United States).
List of Commands
aaa accounting acct-stop on-aaa-failure

Description: Configures AAA to send an Acct-Stop message if a user fails AAA, but RADIUS grants access. The no version returns the parameter to the default of enable. aaa accounting acct-stop on-aaa-failure { enable | disable } no aaa accounting acct-stop on-aaa-failure Mode(s): Global Configuration
Syntax:
aaa accounting acct-stop on-access-deny

Description: Syntax: Issues an Acct-Stop message if RADIUS denies access. The no version returns the parameter to the default of disable. aaa accounting acct-stop on-access-deny { enable | disable } no aaa accounting acct-stop on-access-deny Mode(s): Global Configuration
aaa accounting duplication

Description: Syntax: Sends duplicate accounting records to the accounting server of a different virtual router. The no version disables the feature. aaa accounting duplication routerName no aaa accounting duplication Mode(s): routerName virtual router name
Global Configuration
aaa accounting interval
aaa accounting interval

Description: Syntax: Specifies the accounting interval. The no version sets the value to 0, which turns off interim accounting. aaa accounting interval period no aaa accounting interval Mode(s): period accounting interval in minutes in the range 101080, which sets the time period between accounting updates
aaa accounting ppp default

Description: Syntax: Specifies the default accounting protocol for PPP. The no version produces the same result as specifying the radius value. aaa accounting ppp default accountor [ accountors ]* no aaa accounting ppp default accountor specifies the accounting method:
radius uses RADIUS for the accounting method none disables accounting
Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
aaa authentication enable default ERX Edge Routers
aaa authentication enable default

Description: Allows privilege determination to be authenticated through the authenticator(s) you specify. This authentication is applied to vty users. The no version removes the authentication settings. aaa authentication enable default [ authenticator ] [ authenticators ] * no aaa authentication enable default authenticator specifies the authentication method authenticators
Syntax:
radius use RADIUS authentication line use the line password tacacs+ use TACACS+ authentication none use no authentication enable use the enable password * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Global Configuration
aaa authentication login

Description: Syntax: Creates an authentication list and the criteria for login. This authentication is applied to vty users. aaa authentication login authListName authenticator [ authenticators ]* no aaa authentication login authListName authListName specifies an existing authentication list name (created using the login authentication command); a string of 132 characters authenticator specifies the authentication method authenticators
line use the line password for authentication none use no authentication radius use RADIUS authentication tacacs+ use TACACS+ authentication
aaa authentication ppp default
aaa authentication ppp default

Description: Syntax: Specifies the default authentication protocol for PPP and DHCP clients. The no version produces the same result as specifying the radius value. aaa authentication ppp default authenticator [ authenticators ]* no aaa authentication ppp default authenticator authentication method:
radius uses RADIUS for authentication none means authentication is off, allowing all users access
aaa delimiter
Description: Specifies delimiters for the domain and realm names. You can specify up to eight delimiters each for domain and realm names. The no version restores the default value. aaa delimiter { domainName | realmName } delimiters no aaa delimiter { domainName | realmName } domainName allows you to set delimiters for the domain name realmName allows you to set delimiters for the realm name delimiters either the domain or realm delimiter(s). You can specify up to eight characters.
Syntax:
The default domain name delimiter is @. The default realm name delimiter is NULL (no character). In this case,
realm parsing is disabled (having no delimiter disables realm parsing). Mode(s): Global Configuration
aaa dns ERX Edge Routers
aaa dns
Description: Syntax: Specifies the IP address of the primary DNS name server. The no version sets the corresponding address to 0. aaa dns { primary | secondary } ipAddress no aaa dns { primary | secondary } Mode(s): primary specifies the primary DNS name server secondary specifies the secondary DNS name server ipAddress IP address of the name server
aaa domain-map
Description: Maps a user domain name to a virtual router. When you specify only the domain name, the command sets the mode to Domain Map Configuration. The no version deletes the map entry. aaa domain-map domainName [ routerName [ loopback interfaceNumber ] ] no aaa domain-map domainName Mode(s): domainName a user domain name; specify the domain name none to assign users without domains to a specific virtual router. routerName a router name associated with the domain name loopback specifies the loopback interface interfaceNumber interface number in the range 032000
Syntax:
aaa duplicate-address-check
Description: Syntax: Allows you to enable or disable routing table address lookup or duplicate address check. There is no no version. aaa duplicate-address-check { enable | disable } Note: To use this command, you must have a B-RAS license. Run the license b-ras command and enter your password. Mode(s): Global Configuration
aaa new-model
aaa new-model
Description: Syntax: Mode(s): Specifies AAA authentication for Telnet sessions. The no version restores simple authentication (login and password). [ no ] aaa new-model Global Configuration
aaa parse-order
Description: Specifies the order in which the system searches for a domain name. It either searches for realm and then domain, or it searches for domain and then realm. The no version returns the parse order to the default of searching for realm first. aaa parse-order { domain-first | realm-first } no aaa parse-order domain-first causes the system to search for a domain name starting with the right-most character. When the system reaches a delimiter, it uses anything to the right of the delimiter as the domain name. realm-first causes the system to search for a domain name starting with the left-most character. When the system reaches a delimiter, it uses anything to the left of the delimiter as the domain name.
Syntax:
Mode(s):
aaa profile
Description: Syntax: Creates a new AAA profile to allow mapping to AAA services. aaa profile profileName Mode(s): profileName profile name of up to 32 characters
AAA Profile Configuration
aaa subscriber limit per-port ERX Edge Routers
aaa subscriber limit per-port

Description: Syntax: Sets the maximum number of active subscribers permitted on the specified port. The no version returns the limit to the default, 0 (zero). aaa subscriber limit per-port interfaceValue limitValue no aaa subscriber limit per-port interfaceValue Mode(s): interfaceValue location of the interface in the slot/port format limitValue maximum number of subscribers. The default is 0 (zero), which means there is no limit on the number of subscribers.
aaa subscriber limit per-vr

Description: Syntax: Sets the maximum number of active subscribers permitted on the virtual router. The no version returns the limit to the default, 0 (zero). aaa subscriber limit per-vr limitValue no aaa subscriber limit per-vr Mode(s): limitValue maximum number of subscribers. The default is 0 (zero), which means there is no limit on the number of subscribers.
aaa timeout
Description: Syntax: Sets either the default idle or session timeout for B-RAS PPP users. The no version deletes either the idle or session timeout. aaa timeout { idle idleTimeout | session sessionTimeout } no aaa timeout { idle | session } Mode(s): idleTimeout in seconds: 300, 7200 sessionTimeout in seconds: 602678400 (that is, a minimum of 1 minute to a maximum of 31 days)
aaa tunnel assignment-id-format
aaa tunnel assignment-id-format

Description: Syntax: Sets the format for the tunnel assignment ID. aaa tunnel assignment-id-format { assignmentId | client-server-id } Mode(s): assignmentId configures the format to be assignmentId only client-server-id configures the format to be a combination of clientAuthId + serverAuthId + assignmentId
aaa tunnel client-name

Description: Specifies the default tunnel client name. If the tunnel client name is not included in the tunnel attributes that are returned from the domain map or authentication server, the system uses the default name. The no version deletes the client name. aaa tunnel client-name name no aaa tunnel client-name Mode(s): name default tunnel client name; a string of up to 32 characters
Syntax:
aaa tunnel ignore

Description: Specifies whether or not the tunnel peers NAS-Port [5] and NAS-Port-Type [61] attributes should be used. The no version negates the command or restores the default of enable. aaa tunnel ignore { nas-port | nas-port-type } { enable | disable } no aaa tunnel ignore { nas-port | nas-port-type } Mode(s): nas-port configures the tunnel peers supplied nas-port value nas-port-type configures the tunnel peers supplied nas-port-type value
Syntax:
aaa tunnel password ERX Edge Routers
aaa tunnel password

Description: Specifies the default tunnel password. If the tunnel password is not included in the tunnel attributes that are returned from the domain map or authentication server, the system uses the default password. The no version deletes the password. aaa tunnel password name no aaa tunnel password Mode(s): name default tunnel password; a string of up to 32 characters
Syntax:
aaa wins
Description: Syntax: Specifies the IP address of the WINS name server. The no version sets the corresponding address to 0. aaa wins { primary | secondary } ipAddress no aaa wins { primary | secondary } Mode(s): primary specifies the primary WINS name server secondary specifies the secondary WINS name server ipAddress IP address of the name server
access-class in
Description: Syntax: Restricts incoming connections between a particular virtual terminal line and the addresses in an access list. The no version removes access restrictions. access-class listName in no access-class [ listName ] in Mode(s): listName name of the access list
Line Configuration
10
access-list
access-list
Description: Defines a standard or extended IP access list. The extended access list enables you to specify a destination address or host, precedence, and type of service. Imposes an implicit last rule of deny ip any any to deny all routes that do not match previous rules in the access list. The no version removes the IP access list, the specified entry in an access list, or the log for a specified entry. Standard IP access list: access-list accessListName { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] no access-list accessListName [ { permit | deny } { srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] ] Extended IP access list: access-list accessListName { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ precedence preced ] [ tos typeOServ ] [ log ] no access-list accessListName [ { permit | deny } ip { srcIP srcWildIp | host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ] ] Mode(s): accessListName string of up to 32 alphanumeric characters permit permits access if the conditions are matched deny denies access if the conditions are matched srcIP source IP address from which the packet is being sent srcWildIp wildcard mask IP address srcIPHost source host IP address; assumes a wildcard mask of 0 any creates an address of 0.0.0.0 with a wildcard mask of 255.255.255.255 dstIP destination IP address dstWildIp wildcard mask IP address for destination dstIPHost destination host IP address to which the packet is being sent preced number from 1 to the access list maximum that indicates the precedence level to which packets are filtered typeOServ number from 1 to the access list maximum that indicates the type of service to which packets are filtered log logs an Info event into the ipAccessList log whenever the access-list rule is matched
Syntax:
address ERX Edge Routers
11
address
Description: From Domain Map Tunnel Configuration mode, sets the tunnel endpoint address of an L2TP or L2F tunnel. The no version removes the address of the tunnel. From Interface Configuration or Subinterface Configuration mode, configures RIP to run on the interface specified by the IP address or on an unnumbered interface. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface. Use the address commands to configure RIP attributes on the network. To set the tunnel endpoint address: address serverAddress no address serverAddress the IP address of the LNS or home gateway endpoint
Syntax:
To configure RIP: [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface
interfaceType interface type; see Interface Types and Specifiers in

About This Guide
interfaceSpecifier particular interface; format varies according to

interface type; see Interface Types and Specifiers in About This Guide Mode(s): Interface Configuration (RIP), Subinterface Configuration (RIP), Domain Map Tunnel Configuration
12
address area
address area
Description: Creates an interface on which OSPF runs in the specified area, on top of the IP interface at the specified IP address. Uses the default values. The no version deletes OSPF interfaces. If the OSPF network was previously specified with the network area command, the OSPF interface already exists, and you do not need to use this command, unless you want to change the area of the OSPF interface to an area different from the one specified by the network area command. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } area { areaId | areaIdInt } ipAddress IP address of the interface on which OSPF will be run unnumbered configures OSPF on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 14294967295
Syntax:
Note: Before you issue this command, you must first configure an interface with the IP address specified by ipAddress or an interface configured as unnumbered. Note: You must issue this command before issuing any other OSPF address command. Mode(s): Router Configuration
address authentication key ERX Edge Routers
13
address authentication key

Description: Specifies the password for text authentication and the key for MD5 authentication. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default. address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication key [ 0 | 8 ] authkey no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] authentication key ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 0 indicates the authKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the authKey is entered in encrypted form (ciphertext) authkey password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this interface.
Syntax:
Mode(s):
Interface Configuration, Subinterface Configuration
14
address authentication-key
address authentication-key
Description: Syntax: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-key [ 0 | 8 ] authKey ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 0 indicates the authKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the authKey is entered in encrypted form (ciphertext) authKey password, a continuous string of characters up to 8 characters in length
Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
address authentication message-digest ERX Edge Routers
15
address authentication message-digest

Description: Specifies that MD5 authentication is used for the OSPF interface. The no version sets authentication for the interface to none, but leaves any configured MD5 key intact. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication message-digest ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
16
address authentication mode
address authentication mode

Description: Specifies the type of authentication used on this interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default. address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication mode { text | md5 keyID } no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] authentication mode Mode(s): ipAddress address of IP interface where RIP will be run unnumbered specifies RIP will be run on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide text simple text password is sent with each RIP message. If the password is not possessed by neighbors, the message is rejected. md5 MD5 message-digest algorithms are used to encrypt and compress the RIP message. keyID number identifying the MD5 key. Neighbors must share the MD5 key to decrypt the message and encrypt the response.
Syntax:
address authentication-none ERX Edge Routers
17
address authentication-none
Description: Syntax: Specifies that no authentication is to be used for the OSPF interface. The no version has no effect. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } authentication-none ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
address cost
Description: Syntax: Specifies a cost metric for an OSPF interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } cost intfCost ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide intfCost link state metric cost; a number in the range 065535; default value is 10
18
address dead-interval
address dead-interval
Description: Sets the time period that the systems neighbors should wait without seeing hello packets from the system before they declare the router to be down. The no version resets the dead interval to its default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } dead-interval deadInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide deadInterval number in the range 165535 seconds; default value is 40 seconds
Syntax:
address-family ERX Edge Routers
19
address-family
Description: For BGP, configures the router or a specific VRF to exchange IPv4 addresses in unicast, multicast, or VPN mode by creating the specified address family. The no version removes the address family. For RIP, configures RIP in a specific VRF to exchange IPv4 addresses. The no version removes the address family. For BGP: [ no ] address-family { ipv4 [ multicast | unicast | unicast vrf vrfName | vrf vrfName ] | vpnv4 [ unicast ] } For RIP: [ no ] address-family ipv4 [ unicast ] vrf vrfName Mode(s): ipv4 sessions that carry standard IPv4 address prefixes (default) multicast specifies multicast prefixes unicast specifies unicast prefixes (default) vrfName name of the VRF; string of 132 alphanumeric characters vpnv4 sessions that carry customer VPN-IPv4 prefixes, each of which has been made globally unique by adding an 8-byte route distinguisher
Syntax:
Router Configuration
address hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } hello-interval helloInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide helloInterval number in the range 165535 seconds; default value is 10 seconds
20
address message-digest-key md5
address message-digest-key md5

Description: Syntax: Enables OSPF MD5 authentication and configures the MD5 key. The no version deletes an MD5 key. address { ipAddress | unnumbered interfaceType interfaceSpecifier } message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey no address { ipAddress | unnumbered interfaceType interfaceSpecifier } message-digest-key keyID ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide keyID key identifier in the range 1255 md5 specifies use of the MD5 algorithm 0 indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates that the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey OSPF password; a continuous string of up to 16 alphanumeric characters.
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the interface, use the address authentication-none command. Note: You must issue the address area command before issuing this command. Mode(s): Router Configuration
address network ERX Edge Routers
21
address network
Description: Configures the OSPF network type for the specified interface to something other than the default for the network medium. The no version restores the default value for the medium. address { ipAddress | unnumbered interfaceType interfaceSpecifier } network { broadcast | non-broadcast | point-to-point } no address { ipAddress | unnumbered interfaceType interfaceSpecifier } network ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide broadcast sets network type to broadcast non-broadcast sets network type to NBMA point-to-point sets network type to point-to-point
Syntax:
22
address passive-interface
address passive-interface
Description: Disables the transmission of routing updates on an interface. OSPF routing information is neither sent nor received through the specified router interface. The specified interface address appears as a stub network in the OSPF domain. The no version reenables the transmission of routing updates. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } passive-interface ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
address-pool-name
Description: Syntax: Specifies an address pool name to associate with the domain name being configured. The no version removes the pool name. address-pool-name poolName no address-pool-name Mode(s): poolName name of the pool to associate with the domain name
Domain Map Configuration
address priority ERX Edge Routers
23
address priority
Description: Sets the router priority. Used in determining the designated router for the particular network. This designation only applies to multi-access networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } priority intfPriority ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide intfPriority priority value, an 8-bit number in the range 1255; default value is 1
Syntax:
24
address receive version
address receive version

Description: Restricts the RIP version that the system can receive on an interface. The no version sets the interface back to the default value, receiving both RIP version 1 and version 2. address { ipAddress | unnumbered interfaceType interfaceSpecifier } receive version { 1 | 2 | 1 2 | 2 1 | off } no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] receive version Mode(s): ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 1 specifies RIP version 1 only 2 specifies RIP version 2 only 1 2 specifies RIP version 1 and version 2; the default value 2 1 specifies RIP version 2 and version 1 off turns reception off
Syntax:
address retransmit-interval ERX Edge Routers
25
address retransmit-interval
Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } retransmit-interval retransInterval ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide retransInterval number in the range 03600 seconds; default value is 5 seconds
Syntax:
26
address send version
address send version

Description: Restricts the RIP version that the system can send on an interface. The no version sets the interface back to the default value, sending only RIP version 1. address { ipAddress | unnumbered interfaceType interfaceSpecifier } send version {1 | 2 | 1 2 | 2 1 | off } no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] send version Mode(s): ipAddress address of IP interface where RIP will be run unnumbered specifies that RIP will be run on an unnumbered interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide 1 specifies RIP version 1 only 2 specifies RIP version 2 only 1 2 specifies RIP version 1 and version 2 2 1 specifies RIP version 2 and version 1 off turns reception off
Syntax:
address transmit-delay ERX Edge Routers
27
address transmit-delay
Description: Syntax: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value. [ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } transmit-delay transmDelay ipAddress OSPF interface address previously specified with the address command unnumbered indicates that OSPF is running on an unnumbered interface previously specified with the address command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide transmDelay link state transmit delay, a number in the range 03600 seconds; default value is 1 second
28
aggregate-address
aggregate-address
Description: Syntax: Creates an aggregate entry in a BGP routing table. The no version removes the aggregate. [ no ] aggregate-address address mask [ as-set | summary-only | attribute-map attributeMapTag | advertise-map advertiseMapTag | suppress-map suppressMapName ]* address aggregate IP address mask aggregate IP mask as-set if the as-set option is not specified, the path attributes of the aggregate route are set in the same way as locally originated routes, except that the atomic_aggregate and aggregator attributes are added. If the as-set option is used, the path attributes of the aggregate route are determined by combining the path attributes of the aggregated routes as described in RFC 1771. If the as-set option is used, the path attributes of the aggregate route may change whenever one of the aggregated routes changes, causing the aggregate route to be readvertised. summary-only filters all more specific routes from updates. summary-only not only creates the aggregate route but also suppresses advertisements of more-specific routes to all neighbors. If you only want to suppress advertisements to certain neighbors, you may use the neighbor distribute-list command, with caution. If a more-specific route leaks out, all BGP speakers will prefer that route over the less-specific aggregate you are generating (using longest-match routing). Alternatively, you can use the suppress-map keyword to suppress specific routes attributeMapTag string of up to 32 characters that identifies the route map used to set the attributes of the aggregate route advertiseMapTag string of up to 32 characters that identifies the route map used to set the routes to create AS-SET origin communities in the range suppressMapName string of up to 32 characters that identifies a route map that filters routes to be suppressed * indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s):
Address Family Configuration, Router Configuration
aggressive-mode
Description: Syntax: Mode(s): Allows aggressive mode negotiation for the tunnel. The no version restores the default, main mode. [ no ] aggressive-mode ISAKMP Policy Configuration
allow ERX Edge Routers
29
allow
Description: Syntax: Specifies the domain names that are to be allowed access to AAA authentication. The no version negates the command. [ no ] allow domainName Mode(s): domainName name of the domain; maximum of 64 characters
append-after
Description: Add a next hop after a particular index in the MPLS explicit path. The sequence numbers for existing hops after the index adjust automatically. There is no no version. append-after indexNumber next-address ipAddress [ mask ipMask ] [ loose ] index number of a node in an ordered set of abstract nodes ipAddress address of the next hop ipMask [ not currently used] mask for the next adjacent address loose indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Syntax:
Mode(s):
Explicit Path Configuration
aps force
Description: Forces the specified interface to be replaced by the inactive interface in an APS/MSP group. The no version allows the specified interface to resume operation. aps force channelNumber no aps force [ channelNumber ] channelNumber number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1. Mode(s): Controller Configuration
Syntax:
30
aps group
aps group
Description: Syntax: Assigns an interface to an APS/MSP group. aps group groupName no aps group Mode(s): groupName name of the APS/MSP group to which the active and standby interfaces belong; up to 32 characters in length
Controller Configuration
aps lockout
Description: Prevents the working interface from switching to the protect interface. The no version restores the default situation, in which the working interface can switch to the protect interface. aps lockout [ channelNumber ] no aps lockout channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration
Syntax:
aps manual
Description: Forces the working interface to switch to the protect interface, unless a request of equal or higher priority exists. The no version allows the specified working interface to resume the active role. aps manual channelNumber no aps manual [ channelNumber ] channelNumber number that identifies the working or protect interface.The number of the working interface is the same as the number of the corresponding active port on the I/O module. If there are n active ports on the I/O module, working interfaces are identified by the numbers 0 to n-1. Protect interfaces are identified by the numbers of the corresponding working interfaces plus n. For example, if the working interface has the number 0, and there is one active port on the I/O module, the corresponding protect interface has the number 1. Syntax: Controller Configuration
Syntax:
aps protect ERX Edge Routers
31
aps protect
Description: Syntax: Configures an interface as a protect interface. The no version removes the relationship between the protect interface and the active interface. aps protect [ channelNumber ] no aps protect channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration
aps revert
Description: Syntax: Configures the APS/MSP group to operate in revertive mode. The no version restores the default setting, non-revertive mode. aps revert minutes no aps revert Mode(s): minutes number of minutes in the range 512 at which the interface resumes the active role after that interface becomes available
aps unidirectional
Description: Configures the APS/MSP group to operate in unidirectional mode, the default setting. The no version configures the APS/MSP group to operate in bidirectional mode. aps unidirectional no aps unidirectional Mode(s): Controller Configuration
Syntax:
32
aps working
aps working
Description: Syntax: Configures an interface as a working interface. The no version removes the configuration. aps working [ channelNumber ] no aps working channelNumber number that identifies the working interface. The number of the working interface is the same as the number of the corresponding active port on the I/O module. Mode(s): Controller Configuration
area
Description: This command has only a no version. See the no area command for a complete description and syntax.
area-authentication-key
Description: Syntax: Assigns a password used by neighboring routers for authentication of IS-IS level 1 LSPs, CSNPs, and PSNPs. The no version deletes the password. [ no ] area-authentication-key [ 0 | 8 ] authKey no area-authentication-key Mode(s): 0 indicates the authKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the authKey is entered in encrypted form (ciphertext) authKey password, a continuous string of characters up to 8 characters in length
area default-cost ERX Edge Routers
33
area default-cost
Description: Specifies a cost for the default summary route sent into a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry external routes. You cannot configure virtual links across a stub area. Stub areas cannot contain an ASBR. The no version removes the configured default route cost. area { areaId | areaIdInt } default-cost defaultCost no area { areaId | areaIdInt } default-cost Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295 defaultCost stub areas advertised external route cost (cost metric); an integer in the range 016777215
Syntax:
34
area-message-digest-key
area-message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 1 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for area routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. area-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] no area-message-digest-key keyId keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. 0 indicates key is entered in unencrypted form (plaintext); default option 8 indicates the key is entered in encrypted form (ciphertext) key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[:SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[:SS ]. never indicates the system never stops accepting or generating packets; overrides previously specified stop times and keeps using the authentication key in sending and receiving PDUs with the corresponding authentication indefinitely
Syntax:
area nssa ERX Edge Routers
35
stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[:SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[:SS ].
Mode(s):
area nssa
Description: Configures an area as an NSSA and controls generation of type 7 default LSAs. NSSAs are similar to stub areas but have the additional capability of importing AS external routes in a limited fashion. The no version removes the specified option for default-information-originate, removes default-information-originate, or removes the NSSA designation from the area. [ no ] area { areaId | areaIdInt } nssa [ default-information-originate [ always | metric absoluteValue | metric-type 1 | metric-type 2 | route-map mapTag ]* ] Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 default-information-originate causes the generation of a type 7 default LSA if a default route exists in the routing table. always creates the default route if it doesnt exist absoluteValue metric applied to the generated type 7 default LSAs; ranges from 0429496729 metric-type 1 cost of the external routes is equal to the sum of all internal costs and the external cost metric-type 2 cost of the external routes is equal to the external cost alone; this is the OSPF default mapTag string of up to 32 alphanumeric characters that specifies a route map applied to the generated type 7 default LSAs * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
36
area range
area range
Description: Aggregates the routes at an area boundary. By default, the range of configured networks is advertised in type 3 (summary) LSAs. The no version disables this function. [ no ] area { areaId | areaIdInt } range ipAddress mask [ do-not-advertise ] Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address to match mask IP address mask do-not-advertise specifies that the range of configured networks is not advertised
Syntax:
area stub
Description: Defines an area as a stub area. A stub area is an OSPF area that carries a default route, intra-area routes, and interarea routes, but does not carry AS external routes. This reduces the size of the area's OSPF database and decreases memory usage for external routers in the stub area. The no version disables this function. [ no ] area { areaId | areaIdInt } stub Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295
Syntax:
area virtual-link
Description: Syntax: Defines an OSPF virtual link. The no version removes the virtual link. [ no ] area { areaId | areaIdInt } virtual-link ipAddress Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address associated with the virtual link neighbor
area virtual-link authentication-key ERX Edge Routers
37
area virtual-link authentication-key

Description: Syntax: Configures simple password (type 1) authentication for OSPF virtual links. The no version removes the password. [ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication-key [ 0 | 8 ] line areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor 0 indicates that the line is entered in unencrypted form (plaintext); this is the default option 8 indicates that the line is entered in encrypted form (ciphertext) line password to be used by neighbors. All neighboring routers on the same network must have the same password. The password can be a continuous string of up to 16 alphanumeric characters.
Mode(s):
area virtual-link authentication message-digest

Description: Specifies that MD5 authentication is used for the virtual link. The no version sets the authentication for the virtual link to none, but leaves any configured MD5 key intact. [ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication message-digest Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor
Syntax:
area virtual-link authentication-none

Description: Syntax: Specifies that no authentication is to be used for the virtual link. The no version has no effect. [ no ] area { areaId | areaIdInt } virtual-link ipAddress authentication-none Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor
38
area virtual-link dead-interval
area virtual-link dead-interval

Description: Syntax: Defines an OSPF virtual link and the time interval allowed for detecting a dead router. The no version removes the virtual links dead interval. [ no ] area { areaID | areaIdInt } virtual link ipAddress dead-interval deadInterval Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor deadInterval integer in the range 18192 seconds
area virtual-link hello-interval

Description: Defines an OSPF virtual link and the time between the hello packets. The hello interval value must be the same for both ends of the virtual link. The no version removes the virtual links hello interval. [ no ] area { areaId | areaIdInt } virtual-link ipAddress hello-interval helloInterval Mode(s): areaId OSPF area ID in IP address format. areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address associated with the virtual link neighbor helloInterval integer in the range 18192 seconds
Syntax:
area virtual-link message-digest-key md5 ERX Edge Routers
39
area virtual-link message-digest-key md5

Description: Syntax: Enables MD5 authentication and configures MD5 keys for virtual links. The no version deletes MD5 keys. area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId md5 [ 0 | 8 ] msgDigestKey no area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor md5KeyId key identifier in the range 1255 0 indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates that the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey password to be used by neighbors. All neighboring routers on the same network must have the same password. The password can be a continuous string of up to 16 alphanumeric characters.
Note: If you delete all the MD5 keys, the authentication type for the virtual link is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the virtual link, use the area
virtual-link authentication-none command. Mode(s): Router Configuration
area virtual-link retransmit-interval

Description: Defines an OSPF virtual link and the time between link state advertisement retransmissions for the adjacency belonging to the virtual link. The no version removes the virtual links retransmit interval. [ no ] area { areaId | areaIdInt } virtual-link ipAddress retransmit-interval retransmInterval Mode(s): areaId OSPF area ID in IP address format. areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address of the virtual link neighbor retransmInterval LSA retransmit interval; an integer in the range 18192 seconds
Syntax:
40
area virtual-link transmit-delay
area virtual-link transmit-delay

Description: Defines an OSPF virtual link and the estimated time it takes to transmit a link state update packet on the virtual link. The no version removes the virtual links transmit delay. [ no ] area { areaId | areaIdInt } virtual-link ipAddress transmit-delay transmDelay Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295 ipAddress IP address associated with the virtual link neighbor transmDelay LSA transmit delay; an integer in the range 18192 seconds
Syntax:
arp
Description: Adds a permanent entry in the ARP cache. The no version removes an entry from the ARP cache. This command applies only on an Ethernet or bridged Ethernet interface. [ no ] arp [ vrf vrfName ] ipAddress { interfaceType interfaceSpecifier [ macAddress [ validate ] ] | macAddress } Mode(s): vrfName name of the VRF to which the command applies; string of 132 alphanumeric characters ipAddress IP address in 32-bit dotted-decimal format corresponding to the local data link address interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide macAddress MAC address of the interface validate allows the inclusion of MAC validation entries
Syntax:
arp timeout ERX Edge Routers
41
arp timeout
Description: Specifies how long an entry remains in the ARP cache. You can set the ARP timeout only on bridged Ethernet and Fast Ethernet interfaces on the FE-2 module. You cannot set the timeout on the SRP module. The default value is 21600 seconds (6 hours). Use the show config command to display the current value. The no version restores the default value. arp timeout timeoutVal no arp timeout Mode(s): timeoutVal time in seconds that an entry remains in the ARP cache
Syntax:
Interface Configuration
atm
Description: The system supports the configuration of traffic-shaping parameters for PPPoA via domain-based parameters and RADIUS. The no version removes the ATM traffic-shaping configuration. atm { ubr | ubrpcr pcr | nrtvbr pcr scr mbs | cbr pcr } no atm Mode(s): ubr sets the traffic category to unspecified bit rate ubrpcr sets the traffic category to unspecified bit rate with peak cell rate pcr peak cell rate nrtvbr sets the traffic category to nonreal time variable bit rate scr sustained cell rate mbs maximum burst size cbr sets the traffic category to constant bit rate
Syntax:
atm aal5 description

Description: Assigns a text description or alias to an ATM AAL5 interface. The no version removes the text description or alias. Use the show atm subinterface command to display the text description.The atm description is pushed out to RADIUS during authentication/accounting. atm aal5 description name no atm aal5 description Mode(s): name alias for the AAL5 interface; up to 32 characters
Syntax:
42
atm aal5 shutdown
atm aal5 shutdown

Description: Syntax: Mode(s): Sets the administrative state of an ATM AAL5 interface to disabled. The no version enables a disabled interface. [ no ] atm aal5 shutdown Interface Configuration
atm aal5 snmp trap link-status

Description: Syntax: Mode(s): Enables SNMP link status traps on the AAL5 layer on a per-interface basis. The no version disables the traps. [ no ] atm aal5 snmp trap link-status Interface Configuration
atm atm1483 description

Description: Assigns a text description or alias to an ATM 1483 interface. The no version removes the text description or alias. Use the show atm aal5 interface to display the text description. The atm description is pushed out to RADIUS during authentication/accounting. atm atm1483 description name no atm atm1483 description Mode(s): name alias for the atm atm1483 interface; up to 15 characters
Syntax:
Subinterface Configuration
atm atm1483 mtu

Description: Syntax: Sets the MTU size for an ATM 1483 subinterface. The no version restores the default MTU size of 9180. atm atm1483 mtu size no atm atm1483 mtu Mode(s): size maximum number of packet transmissions permitted on an ATM 1483 subinterface; the valid range is 2569180. The default is 9180.
atm atm1483 shutdown ERX Edge Routers
43
atm atm1483 shutdown

Description: Syntax: Mode(s): Sets the administrative state of an ATM 1483 subinterface to disabled. The no version enables a disabled subinterface. [ no ] atm atm1483 shutdown Subinterface Configuration
atm atm1483 snmp trap link-status

Description: Syntax: Mode(s): Enables SNMP link status traps on the ATM1483 layer. The no version disables the traps. [ no ] atm atm1483 snmp trap link-status Subinterface Configuration
atm auto-configuration
Description: Enables auto configuration of ILMI. Auto configuration is enabled by default. The no version disables auto configuration and sets the ILMI parameters to the UNI version configured using the atm uni-version command, which has a default value of UNI 4.0. Entering the atm auto-configuration command overrides any previous configuration of the atm uni-version command. [ no ] atm auto-configuration Interface Configuration
Syntax: Mode(s):
atm cac
Description: Enables CAC on the ATM interface. If the subscription limit or UBR weight parameters are set to zero, the system uses the effective port bandwidth as the subscription bandwidth. The effective bandwidth varies according to line module. The no version disables CAC on the interface. [ no ] atm cac [ subscriptionBandwidth ] [ ubr ubrWeight ] subscriptionBandwidth maximum allowable bandwidth on this port in the range 02147482647 kbps; the default value is 0 ubrWeight bandwidth associated with UBR and UBR-PCR connections in the range is 02147482647 kbps; the default value is 0
Syntax:
Note: If you modify one of these parameters after CAC is enabled, you must modify both parameters. Otherwise, the parameter not specified reverts to its default value. Mode(s): Interface Configuration
44
atm clock internal
atm clock internal

Description: Causes the ATM interface to generate the transmit clock internally. The no version causes ATM interfaces to recover the clock from the received signal. If the internal clock is chosen and no internal source is specified, then the internal clock source is taken from the line module. [ no ] atm clock internal [ internalSource ] internalSource one of the following:
Syntax:
module specify that the internal clock is from the line module chassis specify that the internal clock is from the configured system
clock Mode(s): Interface Configuration
atm description
Description: Assigns a text description or alias to the interface. The no version removes the text description or alias. The show atm interface command displays the text description.The description is pushed out to RADIUS during authentication/accounting. atm description name no atm description Mode(s): name alias for the atm interface; up to 32 characters
Syntax:
atm esi-address
Description: Syntax: Specifies an ATM ESI address for the subinterface. The no version removes the ESI address. atm esi-address esiAddress no atm esi-address Mode(s): esiAddress end system ID portion of the ATM NSAP address in the format xxxxxxxxxxxx.xx
atm framing ERX Edge Routers
45
atm framing
Description: Configures T3 or E3 framing on an ATM interface. The no version returns framing to the default. For a T3 interface, the default is cbitplcp. For an E3 interface, the default is g751plcp. atm framing framingType no atm framing framingType one of the following:
Syntax:
cbitadm c-bit with ATM direct mapping for a DS3 (T3) interface cbitplcp c-bit with PLCP framing for a DS3 (T3) interface (default for
T3)
g832adm G.832 ATM direct mapping for an E3 interface g751adm G.751 ATM direct mapping for an E3 interface g751plcp G.751 PLCP mapping for an E3 interface (default for E3) m23adm M23 ATM direct mapping for a DS3 (T3) interface m23plcp M23 with PLCP framing for a DS3 (T3)
Mode(s): Interface Configuration
atm ilmi-enable
Description: Syntax: Mode(s): Enables ILMI on the interface. The no version removes the ILMI PVC. [ no ] atm ilmi-enable Interface Configuration
atm ilmi-keepalive
Description: Enables generation of ILMI keepalive messages on the system. The no version disables the generation of keepalive messages. Enabling generation of keepalive messages has an effect on the operational state of the ATM interface. [ no ] atm ilmi-keepalive [ seconds ] Mode(s): seconds number in the range 04294967295; the interval in seconds between two consecutive ILMI keepalive requests
Syntax:
46
atm lbo
atm lbo
Description: Specifies the cable length (line build-out) for the ATM T3 or E3 interface. The length of cable determines power requirements. The no version restores the default value. atm lbo { long | short } no atm lbo Mode(s): short a cable length in the range 0225 feet (the default) long a cable length in the range 255450 feet
Syntax:
atm oam
Description: Syntax: Configures F4 OAM on an interface or circuit. The no version deletes F4 OAM circuits. atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] [ cc { source | sink | both } ] ] no atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] ] Note: If you do not specify any options, both end-to-end and segment loopback are enabled on all VPIs on the interface. vpi VPI on which you want to enable F4 OAM. If you do not specify a VPI, F4 OAM flow is enabled on all VPIs on the interface. seg-loopback enables F4 segment OAM end-loopback enables F4 end-to-end OAM loopback-timer to generate F4 loopback cells on the VPI, you must configure the loopback timer; you can set the loopback timer only for end-to-end loopback time time interval in the range 0600 seconds between transmissions of F4 loopback cells. This value is a multiple of 20 and is based on the number of circuits with VC integrity enabled. The values are 20 seconds for 11999 circuits, 40 seconds for 20003999 circuits, 60 seconds for 40005999 circuits, and so on. These values are used regardless of the setting of this parameter. cc enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits sink enables this VC as a sink point (cell receiver) source enables this VC as the source point (cell generator) both enables this VC as both a sink point and a source point
Mode(s):
atm oam flush ERX Edge Routers
47
atm oam flush

Description: Indicates that all OAM cells received on an interface should be ignored. OAM performs fault management and performance management functions on an ATM interface. The no version disables the feature. [ no ] atm oam flush [ alarm-cells ] Mode(s): alarm-cells causes the system to ignore only AIS and RDI cells and to accept all other OAM cells
Syntax:
atm oam loopback-location

Description: Syntax: Sets the location ID of the ATM interface. The no version returns the loopback location to the default setting of all 1s (ones). atm oam loopback-location locationID [ no ] atm oam loopback-location Mode(s): locationID value of the four-octet long location ID of the ATM interface
48
atm pvc
atm pvc
Description: Syntax: Creates a PVC on an ATM interface. The no version removes the specified PVC. atm pvc vcd vpi vci { encapsulation } [ { cbr cbr } | { peak [ average burst [ rt ] ] } ] [ oam [ seconds | cc [ segment | end-to-end ] { source | sink | both } ] ] [ inArp [ minutes ] ] no atm pvc vcd vcd virtual circuit descriptor that is an identifier for the VC in other commands; the range is 12147483647 vpi virtual path identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0. vci virtual circuit identifier of this PVC. The allowable numeric range depends on the line module capabilities and current configuration. The VPI and VCI cannot both be set to 0; if one is 0, the other cannot be 0. encapsulation one of the following:
aal5snap LLC encapsulated circuit; LLC/SNAP precedes the protocol

datagram
aal5mux ip VC-based multiplexed circuit used for IP only aal5autoconfig enables autodetection of the 1483 encapsulation
(LLC/SNAP or VC multiplexed)
ilmi integrated local management interface encapsulation qsaal Q.2931 signalling

peak PCR in Kbps average average rate in Kbps; also referred to as SCR burst length in cells of the burst.; also referred to as MBS rt selects VBR-RT as the service type; the default type is VBR-NRT. You can select rt only if you set the peak, average, and burst parameters. cbr constant bit rate in Kbps oam enable generation of OAM F5 loopback cells on this circuit. This option enables VC integrity features that have an effect on the operational state of the ATM PVC. seconds - time interval in seconds between transmissions of OAM F5 end-to-end loopback cells for VC connectivity verification. This value is a multiple of 20 and is based on the number of circuits with VC integrity
atm shutdown ERX Edge Routers
49
enabled. The values are: 20 seconds for 11999 circuits, 40 seconds for 20003999 circuits, 60 seconds for 40005999 circuits, and so on. These values are used regardless of the setting of this parameter. inarp enables Inverse ARP minutes InARP refresh rate in minutes; 15 minutes is the default
Note: The optional peak, average, and burst parameters configure traffic-shaping parameters for the circuit. The allowable traffic-shaping features and range specifications depend on the line module capabilities. Mode(s): cc enables CC cells on the PVC; you can enable CC cells only on data circuits, not on control circuits, such as ILMI or signaling circuits segment opens an OAM CC segment cell flow end-to-end opens an OAM CC end-to-end cell flow sink enables this VC as a sink point (cell receiver) source enables this VC as the source point (cell generator) both enables this VC as both a sink point and a source point
atm shutdown
Description: Syntax: Mode(s): Administratively disables an ATM interface. The no version enables a disabled interface. [ no ] atm shutdown Interface Configuration
atm snmp trap link-status

Description: Syntax: Mode(s): Enables SNMP link status traps on the ATM layer on a per-interface basis. The no version disables the traps. [ no ] atm snmp trap link-status Interface Configuration
atm sonet stm-1

Description: Syntax: Mode(s): Sets the mode of operation on the physical interface to SDH STM-1. The no version restores the default value, SONET STS-3c operation. [ no ] atm sonet stm-1 Interface Configuration
50
atm svc
atm svc
Description: Defines an SVC on an ATM subinterface. The system will attempt to set up an SVC to the destination address with the requested traffic parameters and encapsulation. The no version removes the specified SVC definition. atm svc nsap nsapAddress [ { encapsulation } [ { cbr cbr } | peak [ average burst [ rt ] ] ] ] no [ atm ] svc [ nsap nsapAddress ] nsapAddress destination address in the format 12 { { 2 xx xxxxxxxxxxxxxxxxxxxxxxx 2 24 xxxxxxxxxxxx xx
Syntax:
encapsulation one of the following:
aal5snap LLC encapsulated circuit; LLC/SNAP precedes the protocol

datagram
aal5mux ip VC-based multiplexed circuit used for IP only

Mode(s): cbr constant bit rate in Kbps peak PCR in Kbps average average rate in Kbps; also referred to as SCR burst length in cells of the burst.; also referred to as MBS rt selects VBR-RT as the service type
atm uni-version
Description: Syntax: Specifies the UNI version the interface should use. There is no no version. atm uni-version versionNumber Mode(s): versionNumber UNI version number: 3.0, 3.1, or 4.0
atm vc-per-vp ERX Edge Routers
51
atm vc-per-vp
Description: Configures the number of virtual circuits per virtual path. This command controls the VPI and VCI range on the ATM interface. The allowable configuration range depends on the line module. The system will not execute the command if any virtual circuits are open on the interface. The no version restores the default. Note: The minimum number of VCs per VP is 4096 for 0C3-4 modules and 1024 for UT3a modules. If you enter a value that is below the minimum, the system uses the minimum value. Syntax: atm vc-per-vp [ vcCount ] no atm vc-per-vp Mode(s): vcCount number of virtual circuits per virtual path
atm vp-tunnel
Description: Syntax: Defines a virtual path tunnel and configures the rate of traffic flow within the tunnel. The no version removes the restriction. atm vp-tunnel vpi [ cbr ] kbps no atm vp-tunnel vpi vpi number in the range 0255; virtual path identifier of this PVC cbr specifies the service class as constant bit rate kbps tunnel rate for a virtual path. The aggregate to this traffic from all circuits configured in the tunnel is held to the specified rate. Certain line modules may have minimum rates for VP tunnels.
Mode(s):
authentication
Description: Syntax: Specifies the authentication method to use in the IKE policy. The no version restores the default, preshared keys. authentication { pre-share } no authentication Mode(s): pre-share specifies preshared keys as the authentication method
ISAKMP Policy Configuration
52
authentication key
authentication key
Description: Specifies the password for text authentication and the key for MD5 authentication for RIP remote-neighbor interface. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default. authentication key [ 0 | 8 ] authkey no authentication key 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authkey specifies the password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this remote-neighbor interface.
Syntax:
Mode(s):
Remote Neighbor Configuration
authentication-key
Description: Syntax: Enables simple password authentication and assigns a password used by OSPF remote neighbors. The no version deletes the password. authentication-key [ 0 | 8 ] authKey no authentication-key Mode(s): 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authKey a password, a continuous string of characters up to 8 characters in length
authentication message-digest
Description: Syntax: Mode(s): Specifies that MD5 authentication is used for the OSPF remote-neighbor interface. There is no no version. authentication message-digest Remote Neighbor Configuration
authentication mode ERX Edge Routers
53
authentication mode
Description: Specifies the type of authentication used on the RIP remote-neighbor interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default. authentication mode { text | md5 keyID } no authentication mode text a simple text password is sent with each RIP message. If the password is not possessed by remote neighbors, the message is rejected. md5 MD5 message-digest algorithms are used to encrypt and compress the RIP message. keyID number identifying the MD5 key in the range 1255. Remote neighbors must share the MD5 key to decrypt the message and encrypt the response.
Syntax:
Mode(s):
authentication-none
Description: Syntax: Mode(s): Specifies that no authentication is to be used for the OSPF remote-neighbor interface. There is no no version. authentication-none Remote Neighbor Configuration
auto-configure
Description: Specifies the type(s) of dynamic encapsulations that will be accepted or detected by the static ATM 1483 interface.The command may be entered repeatedly in ATM subinterface mode. [ no ] auto-configure upperInterfaceType Mode(s): upperInterfaceType dynamic encapsulation type: bridgedEthernet, ip, ppp, pppoe
Syntax:
automatic-virtual-link
Description: Syntax: Mode(s): Enables or disables automatic virtual link configuration. The no version disables an automatic virtual link. [ no ] automatic-virtual-link Router Configuration
54
auto-summary
auto-summary
Description: Reenables the automatic summarization of routes redistributed into BGP to their natural network masks. Automatic summarization is enabled by default. The no version disables automatic summarization. [ no ] auto-summary Address Family Configuration, Router Configuration
Syntax: Mode(s):
bandwidth ERX Edge Routers
55
bandwidth
Description: Specifies the total bandwidth available on the interface. The no version removes the admission control configuration from the interface. For total reservable bandwidth, see the mpls bandwidth command. bandwidth bandwidth no bandwidth Mode(s): bandwidth available bandwidth in kilobits per second, a value from 110,000,000
Syntax:
bandwidth oversubscription
Description: Syntax: Mode(s): Allows the line modules to operate below line rate performance. The no version forces the line modules to operate at line rate performance. [ no ] bandwidth oversubscription Privileged Exec
banner
Description: Configures message-of-the-day, login, or exec banners to be displayed by the CLI. If you do not specify an option, the behavior is the same as if you specified the motd option. The no version deletes the banner. banner [ motd | login | exec ] bannerText no banner [ motd | login | exec ] motd displays the banner when a console or vty connection is initiated login displays the banner before any user authentication (line or RADIUS authentication); the banner is also displayed if user authentication is not configured exec displays the banner after user authentication (if any) and before the first prompt of a CLI session bannerText alphanumeric string truncated at 1024 characters; delimited by the first character of the string, which must be repeated at the end of the string and must not occur anywhere else in the string
Syntax:
Mode(s):
56
baseline aaa
baseline aaa
Description: Sets a statistics baseline for authentication and authorization statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline aaa Privileged Exec
Syntax: Mode(s):
baseline cbf interface

Description: Sets a statistics baseline for CBF interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline cbf interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier see Interface Types and Specifiers in About This Guide.
Syntax:
Privileged Exec
baseline clns
Description: Sets a statistics baseline for CLNS. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline clns [ interfaceType interfaceSpecifier ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Privileged Exec
baseline dhcp ERX Edge Routers
57
baseline dhcp
Description: Sets a statistics baseline for DHCP relay statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline dhcp { server | relay } Mode(s): server sets baseline for DHCP proxy server statistics relay sets baseline for DHCP relay statistics
Syntax:
Privileged Exec
baseline frame-relay interface

Description: Sets a statistics baseline for Frame Relay and MFR interfaces, subinterfaces, and circuits. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline frame-relay interface interfaceType interfaceSpecifier [ dlci ] interfaceType one of the following interface types:
Syntax:
hssi limits baseline for HSSI interface mlframe-relay limits baseline for an MFR bundle or subinterface pos limits baseline for POS interface serial limits baseline for serial interface tunnel limits baseline for GRE tunnel interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide dlci DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 161007
Privileged Exec
58
baseline frame-relay multilinkinterface
baseline frame-relay multilinkinterface

Description: Sets a statistics baseline for MFR links. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline frame-relay multilinkinterface interfaceType interfaceSpecifier interfaceType one of the following interface types:
Syntax:
serial limits baseline for serial interface pos limits baseline for POS interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Privileged Exec
baseline hdlc interface

Description: Sets a statistics baseline for Cisco HDLC interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline hdlc interface type interfaceSpecifier type one of the following interface types:
Syntax:
serial limits baseline to serial interface hssi limits baseline to HSSI interface
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Privileged Exec
baseline interface ERX Edge Routers
59
baseline interface
Description: Sets a statistics baseline for an interface or a specific ATM virtual circuit. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline interface interfaceType interfaceSpecifier [ vcd ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vcd virtual circuit descriptor; number in the range 14294967295; an identifier for the VC in other commands (ATM interfaces only)
Syntax:
Privileged Exec
baseline ip
Description: Syntax: Sets the baseline on general IP traffic statistics as the current value. baseline ip [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters
Privileged Exec
baseline ip bgp
Description: Syntax: Mode(s): Sets the baseline on all BGP statistics as the current value. baseline ip bgp Privileged Exec
baseline ip dhcp-local
Description: Sets a baseline for DHCP local server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip dhcp-local Privileged Exec
Syntax: Mode(s):
60
baseline ip dvmrp
baseline ip dvmrp
Description: Sets a baseline for DVMRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip dvmrp Privileged Exec
Syntax: Mode(s):
baseline ip http
Description: Sets a baseline for HTTP server statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip http Privileged Exec
Syntax: Mode(s):
baseline ip igmp
Description: Sets a baseline for IGMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline ip igmp Privileged Exec
Syntax: Mode(s):
baseline ip igmp-proxy interface

Description: Sets the baseline on all IGMP statistics by setting the counters for the numbers of queries received and reports sent on the upstream interface to zero. There is no no version. baseline ip igmp-proxy interface Privileged Exec
Syntax: Mode(s):
baseline ip interface ERX Edge Routers
61
baseline ip interface
Description: Syntax: Sets a baseline for IP interface statistics. baseline ip interface [ vrf vrfName ] interfaceType interfaceSpecifier Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Privileged Exec
baseline ip ospf
Description: Syntax: Mode(s): Sets a baseline for OSPF statistics and counters. baseline ip ospf Privileged Exec
baseline ip rip
Description: Sets a statistics baseline for RIP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip rip Privileged Exec
Syntax: Mode(s):
62
baseline ip tcp
baseline ip tcp
Description: Sets a statistics baseline for TCP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip tcp [ vrf vrfName ] [ localAddress localPort remoteAddress remotePort ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters localAddress local IP address on the system localPort local TCP port number on the system remoteAddress IP address of remote system remotePort TCP port number on remote system
Syntax:
Privileged Exec
baseline ip udp
Description: Sets a statistics baseline for UDP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip udp [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters
Syntax:
Privileged Exec
baseline ip vrrp
Description: Sets a statistics baseline for VRRP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ip vrrp Privileged Exec
Syntax: Mode(s):
baseline line interface sonet ERX Edge Routers
63
baseline line interface sonet

Description: Sets a statistics baseline for SONET/SDH statistics at the line layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline line interface sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Privileged Exec
baseline local pool

Description: Sets a statistics baseline for the system local address pool statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline local pool Privileged Exec
Syntax: Mode(s):
baseline log
Description: Sets a baseline for logging events. Only log messages timestamped after the baseline will appear when you enter the show log data delta command. To use the current system time, do not enter any options. baseline log [ last-reset | time [ utc ] month day year ] last-reset causes the system to display log messages generated since the last time the system was reset time causes the system to display messages that are timestamped after the time and date that you set. To set the time, use the following syntax:
Hour:Minute[:Second] current time in 24-hour format; seconds are optional
Syntax:
utc indicates that the time entered is UTC (GMT) time; if you do not include this keyword, the system considers the time entered to be local time month name of the month in English day number of the day in the range 131 year four-digit number of the year
Mode(s):
Privileged Exec
64
baseline path interface sonet
baseline path interface sonet

Description: Sets a statistics baseline for SONET/SDH statistics at the path layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline path interface sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Privileged Exec
baseline ppp interface

Description: Sets a statistics baseline for PPP interfaces. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline ppp interface { atm | mlppp | pos | serial | hssi } interfaceSpecifier Mode(s): atm specifies an ATM interface mlppp specifies an MLPPP interface pos specifies a POS interface serial specifies a serial interface hssi specifies a HSSI interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Privileged Exec
baseline pppoe interface ERX Edge Routers
65
baseline pppoe interface

Description: Sets a statistics baseline for PPPoE interfaces, subinterfaces, and/or circuits. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline pppoe interface { serial | atm | fastEthernet | gigabitEthernet } interfaceSpecifier Mode(s): serial specifies a serial interface; however, PPPoE is not currently supported on serial interfaces atm specifies an ATM interface fastEthernet specifies a Fast Ethernet interface gigabitEthernet specifies a Gigabit Ethernet interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Privileged Exec
baseline radius
Description: Sets a statistics baseline for RADIUS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline radius Privileged Exec
Syntax: Mode(s):
baseline section interface sonet

Description: Sets a statistics baseline for SONET/SDH statistics at the section layer. The system implements the baseline by reading and storing the MIB statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline section interface sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Privileged Exec
66
baseline show-delta-counts
baseline show-delta-counts
Description: Syntax: Mode(s): Configures the system to always display the statistics relative to the most recent appropriate baseline. [ no ] baseline show-delta-counts Global Configuration
baseline smds interface

Description: Sets a baseline for SMDS statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. There is no no version. baseline smds interface interfaceType interfaceSpecifier Mode(s): interfaceType hssi, tunnel interfaceSpecifier see Interface Types and Specifiers in About This Guide.
Syntax:
Privileged Exec
baseline snmp
Description: Sets a baseline for SNMP statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved. baseline snmp Privileged Exec
Syntax: Mode(s):
baseline tacacs
Description: Sets a baseline for TACACS+ statistics. The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrived. baseline tacacs Privileged Exec
Syntax: Mode(s):
bert ERX Edge Routers
67
bert
Description: Enables bit error rate tests using the specified pattern on an E1 line on a CE1 line module and on a T1 line on a CT1 line module. The no version stops the test that is running. bert pattern pattern interval time [ unframed ] no bert pattern one of the following test patterns
Syntax:
0s repetitive test pattern of all zeros, 00000... 1s repetitive test pattern of all ones, 11111... 2^11 pseudorandom test pattern, 2,048 bits in length 2^15 pseudorandom 0.151 test pattern, 32,768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1,048,575 bits in length 2^20-QRSS pseudorandom QRSS 0.151 test pattern, 1,048,575 bits
in length
2^23- pseudorandom 0.151 test pattern, 8,388,607 bits in length alt-0-1 repetitive alternating test pattern of zeros and ones,
01010101... time interval between test patterns, ranging from 114400 minutes unframed the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only the payload bits.
Mode(s):
bgp advertise-inactive
Description: Enables the advertisement of inactive BGP received routesroutes that are considered by BGP to be best routes and therefore are present in the IP forwarding table, but that are not being used for forwarding. The no version restores the default state of normal route advertisement, whereby BGP advertises received routes only if they are in the IP forwarding table and are being used to forward traffic, or if synchronization is enabled. [ no ] bgp advertise-inactive Router Configuration
Syntax: Mode(s):
68
bgp always-compare-med
bgp always-compare-med
Description: Syntax: Mode(s): Enables the comparison of the MED for paths from neighbors in different ASs. The no version disables the feature. [ no ] bgp always-compare-med Router Configuration
bgp bestpath med confed

Description: Specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The no version restores the default state, where the MED attribute is not considered. [ no ] bgp bestpath med confed Router Configuration
Syntax: Mode(s):
bgp bestpath missing-as-worst

Description: Specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The no version restores the default state, where the missing MED attribute is considered to have a value of zero. [ no ] bgp bestpath missing-as-worst Router Configuration
Syntax: Mode(s):
bgp client-to-client reflection

Description: Restores route reflection from a BGP route reflector to clients. The no version disables client-to-client reflection. By default, BGP reflects routes received from any route reflector client to all other route reflector clients. This command can be used to disable or restore this behavior. [ no ] bgp client-to-client reflection Router Configuration
Syntax: Mode(s):
bgp cluster-id ERX Edge Routers
69
bgp cluster-id
Description: Syntax: Configures a cluster ID if the BGP cluster has more than one route reflector. The no version causes BGP to use the router ID as the cluster ID. bgp cluster-id { clusterId | ipAddress } no bgp cluster-id [ clusterId | ipAddress ] Mode(s): clusterId a number in the range 04294967295; the cluster ID of this router acting as a route reflector ipAddress the cluster ID of this router acting as a route reflector specified as an IP address
bgp confederation identifier

Description: Syntax: Configures a BGP confederation identifier. The no version removes a BGP confederation identifier. bgp confederation identifier autonomousSystem no bgp confederation identifier [ autonomousSystem ] Mode(s): autonomousSystem number in the range 14294967295; the confederation identifier
bgp confederation peers

Description: Specifies the sub-ASs that belong to a confederation by listing individual AS numbers or by reference to an AS-path access list (the filter list). If the remote AS of a peer appears in the list of sub-AS numbers or in the filter list, then the peer is considered to be in the same confederation. The no version removes individually specified sub-ASs, all sub-ASs specified by the filter list, or all sub-ASs from the confederation. bgp confederation peers { autonomousSystem [ autonomousSystem ]* | filter-list filterListName } no bgp confederation peers [ autonomousSystem [ autonomousSystem ]* | filter-list filterListName ] Mode(s): autonomousSystem AS number in the range 1 4294967295 * indicates that one or more parameters can be repeated multiple times in a list in the command line filterListName name of an AS-path access list; a string of up to 32 characters
Syntax:
70
bgp dampening
bgp dampening
Description: Enables BGP route dampening. The system assesses a penalty of 1000 each time a route flaps and adds this to any previously accumulated penalty value. Penalties are cumulative. The no version disables route flap dampening. [ no ] bgp dampening [ halfLife [ reuse suppress maxSuppressTime [ halfLifeUnreachable ] ] ] [ route-map mapTag ] halfLife half-life period in minutes in the range 145. The default is 15. When a BGP route has been assigned a penalty, the penalty is decreased by half after the half-life period. reuse reuse limit in the range 120000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding. suppress suppress limit in the range 120000. A route is suppressed when its penalty exceeds this limit. The default value is 2000. maxSuppressTime maximum suppression time in minutes in the range 1255. This value is the maximum amount of time a route can be suppressed. The default value is four times the half-life value. halfLifeUnreachable alternate half-life period in minutes for unreachable routes; a number in the range 145. If this value is not specified, the same half-life period is used for both reachable and unreachable routes. route-map specifies that dampening can be applied to routes according to the route map behavior. If the route map permits a route, the route is subject to dampening. If the route map denies a route, the route is not subject to dampening. The route map can contain a no dampening clause that determines dampening characteristics.
Syntax:
mapTag name of the route map; a string of up to 32 alphanumeric

characters. Mode(s): Address Family Configuration, Router Configuration
bgp default ipv4-unicast

Description: Causes all neighbors subsequently created with the neighbor remote-as or neighbor peer-group commands to be automatically activated in the IPv4 unicast address family. The no version disables the IPv4 unicast address family on all neighbors. [ no ] bgp default ipv4-unicast Address Family Configuration, Router Configuration
Syntax: Mode(s):
bgp default local-preference ERX Edge Routers
71
bgp default local-preference

Description: Changes the default local preference value. Generally, the default value of 100 allows you to easily define a particular path as less preferable than paths with no local preference attribute. The preference is sent to all routers in the local AS. The preferred path is the one with the highest preference value.The no version restores the default setting. bgp default local-preference value no bgp default local-preference [ value ] Mode(s): value the local preference number in the range 04294967295
Syntax:
bgp default route-target filter

Description: Controls whether incoming BGP routes are filtered according to membership in route-target communities. Automatic filtering is enabled by default. The no version disables automatic filtering. [ no ] bgp default route-target filter Router Configuration
Syntax: Mode(s):
bgp enforce-first-as
Description: Forces BGP to compare the configured remote AS number of an external peer with the first AS in the AS path of routes received from the peer. If the AS numbers do not match, BGP sends the peer an error message. The no version restores the default condition, which does not perform the AS comparison. [ no ] bgp enforce-first-as Router Configuration
Syntax: Mode(s):
bgp fast-external-fallover
Description: Automatically brings down a BGP session to any adjacent external peer immediately after the link fails (as opposed to waiting for the TCP connection to fail or the hold timer to expire). The no version disables automatic session termination. [ no ] bgp fast-external-fallover Router Configuration
Syntax: Mode(s):
72
bgp log-neighbor-changes
bgp log-neighbor-changes
Description: Causes BGP to log a message of severity notice to the bgpNeighborChanges log whenever a peer enters or leaves the Established state for any reason. No other messages are logged to the bgpNeighborChanges log.The no version disables this log. [ no ] bgp log-neighbor-changes Router Configuration
Syntax: Mode(s):
bgp maxas-limit
Description: Causes BGP to check the length of AS paths received in update messages and to not forward routes whose AS paths are greater than the specified length. The no version halts checking of the AS path length. bgp maxas-limit limit no bgp maxas-limit [ limit ] Mode(s): limit maximum acceptable length of a received AS path; number in the range 11000
Syntax:
bgp redistribute-internal
Description: Authorizes redistribution of internal BGP routes (in addition to external BGP routes) into protocols that have BGP route redistribution enabled. This command is not required for IBGP routes within a VRF, for which redistribution is always enabled. The no version restores the default, redistributing only external BGP routes. [ no ] bgp redistribute-internal Router Configuration
Syntax: Mode(s):
bgp router-id
Description: Syntax: Sets the BGP identifier. The no version restores the system router ID as the identifier. bgp router-id ipAddress no bgp router-id [ ipAddress ] Mode(s): ipAddress IP address to be used as the BGP identifier; ignored if present in the no version
bgp shutdown ERX Edge Routers
73
bgp shutdown
Description: Syntax: Mode(s): Administratively disables BGP. The no version reenables BGP. [ no ] bgp shutdown Router Configuration
boot backup
Description: Sets the release and the configuration to be used the next (and every subsequent) time the boot logic chooses backup mode. The no version removes the setting. boot backup relFilename { cnfFilename | scrFilename | factory-defaults } no boot backup Mode(s): relFilename system software file cnfFilename name of an existing configuration file (.cnf) scrFilename name of an existing script file (.scr) factory-defaults the system reverts to factory default configuration when rebooted
Syntax:
74
boot config
boot config
Description: Specifies how the system obtains its startup configuration. The no version clears a previous request to reboot in a specified manner; the next reboot uses the configuration saved in nonvolatile storage. boot config { cnfFilename [ once ] | scrFilename | running-configuration | startup-configuration | factory-defaults } no boot config cnfFilename name of an existing startup configuration file (.cnf) to be used on all subsequent reboots once restores a configuration from the specified configuration file only on the next reboot. Subsequent reboots revert to the running-configuration settings. scrFilename name of an existing script file (.scr) running-configuration specifies that the running configuration is to be used for reboot; only available if the system is in Automatic Commit mode startup-configuration specifies that the running configuration is to be used for reboot; only available if the system is in Manual Commit mode factory-defaults specifies that the factory default configuration is to be used for the next reboot. Subsequent reboots revert to the running-configuration settings.
Syntax:
Caution: All boot config commands except for boot config running-configuration and boot config startup-configuration erase the existing running configuration when you reboot the system. Before executing this command, you might want to save the current configuration to a .cnf file using the copy running-configuration command. Mode(s): Global Configuration
boot force-backup
Description: Forces the system to use the backup software release file or system configuration file on the next boot. The no version sets the system to use the default release or configuration file on the next boot. [ no ] boot force-backup Note: Once the system has used the backup settings, the no boot force-backup command is the only way to get the system to use the default settings again. Mode(s): Global Configuration
Syntax:
boot revert-tolerance ERX Edge Routers
75
boot revert-tolerance
Description: Sets the reversion tolerances that the boot logic uses to determine whether the system should use the normal or backup settings. The no version restores the default reversion tolerance settings. The default settings are 3 crashes in 30 minutes. boot revert-tolerance count time no boot revert-tolerance Mode(s): count number of times the operational SRP software crashes; the range is 04294967295; the default setting is 3 time time (in seconds) in which the set number (count) of crashes occurs; the range is 04294967295; the default setting is 1800
Syntax:
boot revert-tolerance never

Description: Syntax: Mode(s): Sets the boot logic to never revert to the backup release or configuration. There is no no version. boot revert-tolerance never Global Configuration
boot slot
Description: Configures the module in the selected slot to use the specified software release the next time the module is booted. The no version clears the override for the slot if a slot number is provided; if no slot number is provided, all slot overrides are cleared. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command. boot [ backup ] slot slotNum relFileName no boot [ backup ] slot [ slotNum ] Mode(s): backup configures a backup setting slotNum number of the selected slot in the system chassis relFileName release (.rel) filename
Syntax:
76
boot subsystem
boot subsystem
Description: Configures the selected subsystem to use the specified release the next time the subsystem is booted. The no version disables the subsystem. The backup option enables you to specify a backup release for the module in the specified slot in case the module reboots more times than allowed within the period specified by the boot revert-tolerance command. boot [ backup ] subsystem subsysName relFileName no boot [ backup ] subsystem [ subsysName ] Mode(s): backup configure a backup setting subsysName name of the subsystem to be configured relFileName name of system software file to use
Syntax:
boot system
Description: Syntax: Specifies the software release (.rel) file to use on reboot. There is no no version. boot system relFileName Mode(s): relFileName name of the software release file (.rel) that contains the software release
buffer-weight
Description: Syntax: Sets the buffer weight of the queue. The no version returns the queue to its default buffer weight. buffer-weight bufferWeight no buffer-weight Mode(s): bufferWeight range 163; default is 8
Queue Profile Configuration
bulkstats collector ERX Edge Routers
77
bulkstats collector
Description: Creates and configures a collector of bulk statistical data to collect MIB-2 ifTable MIB objects. You can configure up to six collectors. The no version restores the default value for specified options; if no options are specified the no version deletes the collector. bulkstats collector collectorIndex [ collect-mode { auto-xfer | on-file-full | manual-xfer } | description descrip | interval intrvl | max-size maxSize | primary-receiver primRecvIndex | secondary-receiver secRecvIndex | single-interval ] no bulkstats collector collectorIndex [ collect-mode | description | interval | max-size | primary-receiver | secondary-receiver | single-interval ]* collectorIndex a number in the range 165535 that identifies the particular data collector collect-mode specifies one of the following collection modes:
Syntax:
auto-xfer agent automatically transfers file when interval expires on-file-full agent automatically transfers file when it is full manual-xfer system- or user-initiated transfers; default collection mode
descrip descriptive information to insert into the bulkstats file intrvl time period in the range 300 86400 seconds for which the collector transfers data from the system to the receivers; default interval is 360 seconds maxSize maximum size of the file in the range 1024020971520 bytes; default file size is 2,621,440 bytes primRecvIndex number in the range 165535 that identifies the primary receiver to which the system transfers the data; by default the primary receiver is cleared secRecvIndex number in the range 165535 that identifies the secondary (backup) receiver to which the system transfers the data; by default the secondary receiver is cleared single-interval specifies that the collector retrieves the bulk statistics data only once; by default, the collector receives the data periodically * indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s):
78
bulkstats file-format endOfLine-Lf
bulkstats file-format endOfLine-Lf

Description:
Removes the carriage return (CR) and leaves only a line feed (LF) at the end of each line in the bulkstats file. The no version returns the end of line format to the default, CR and LF.
[no] bulkstats file-format endOfLine-LF Global Configuration
Syntax: Mode(s):
bulkstats interfaces description-format common

Description: Enables the conventional industry method of encoding the SNMP ifDescr object that the bulkstats application reports. The no version returns the encoding method to a proprietary encoding scheme. [ no ] bulkstats interfaces description-format common Global Configuration
Syntax: Mode(s):
bulkstats interfaces rfc1213

Description: Syntax: Mode(s): Enables RFC 1213 interface numbering mode on bulkstats. The no version disables RFC 1213 interface numbering mode on bulkstats. [ no ] bulkstats interfaces rfc1213 Global Configuration
bulkstats interface-type
Description: Syntax: Configures the interface type on which you want to collect statistics. The no version deletes the interface type from bulkstats collection. bulkstats interface-type interfaceType [ collector collectorIndex ] no bulkstats interface-type interfaceType [ collector collectorIndex ] interfaceType type of interface to collect statistics on: ATM, ATM 1483, Ethernet, Frame Relay, Frame Relay subinterface, Cisco HDLC, IP, PPP collectorIndex number in the range 165535 that identifies the particular data collector. Always specify this option if you defined more than one collector.
Mode(s):
bulkstats receiver remote-name ERX Edge Routers
79
bulkstats receiver remote-name

Description: Syntax: Configures the bulk statistics receiver parameters. The no version deletes the receiver. bulkstats receiver receiver-index remote-name remote-name.sts [ receiverAttrib [ receiverAttrib ]* ] no bulkstats receiver receiverIndex [ remote-name remoteName ] receiverIndex number in the range 165535 that identifies the receiver of the data remoteName composed of the remote host, path, filename, and formatters; include a .sts filename extension receiverAttrib one of the following dynamic attributes
sysName inserts the system name into the stored remote filename sysUpTime inserts the system up time into the stored remote filename collectorSequence inserts a sequence number into the stored remote
filename Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
bulkstats schema
Description: Syntax: Configures the schema for collecting bulk statistics. The no version removes the schema. bulkstats schema schemaIndex [ collector collectorIndex ] no bulkstats schema schemaIndex Mode(s): schemaIndex identifier for the schema in the range 165535 collectorIndex identifier for the collector in the range 165535
80
bulkstats schema subtree
bulkstats schema subtree

Description: Syntax: Configures the schema for collecting if-stack, if-stats, or system data. The no version removes the schema. bulkstats schema schemaIndex subtree { if-stack | if-stats [ subtreelist ifstatsList [ ifstatsList ]* ] | system } no bulkstats schema schemaIndex schemaIndex identifier for the schema in the range 165535 if-stack retrieves ifStackTable if-stats retrieves ifTable/ifXTable counters ifstatsList type of statistics and time-offset keyword, which includes the offset from the master interval at which the record was collected in each bulkstats interface record system retrieves sysUpTime and nvsUtilPct global statistics; retrieves slotDescr, the cpuUtilPct, and memUtilPct per-slot statistics * indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s):
bulkstats schema subtree policy

Description: Configures the schema to collect statistics on a specific policy, a type of policy, or based on color-coded tags applied by a policy. The no version removes the schema. bulkstats schema schemaIndex subtree policy [ policy-name policyName ] [ policy-type policyType ] [ policy-subtreelist policylist [ policylist ]* ] no bulkstats schema schemaIndex schemaIndex identifier for the schema in the range 165535 policyName name of policy for which you want to collect statistics policyType select one of the following types:
Syntax:
input collect data on input policies localInput collect data on local input policies output collect data on output policies
Mode(s): policyList retrieves statistics based on color-coded tags applied by a policy
bulkstats traps ERX Edge Routers
81
bulkstats traps
Description: Syntax: Configures the bulkstats traps. The no version disables the trap. bulkstats traps { nearly-full [ threshold ] | full } no bulkstats traps { nearly-full | full } Mode(s): nearly-full a percentage less than 100% threshold a percentage less than 100%; if not specified, defaults to 99% full 100%
82
cablelength
cablelength
Description: Syntax: Specifies the length of the cable, which determines power requirements. The no version uses the default value, 0 feet. cablelength length no cablelength Mode(s): length a cable length in the range 0450
cablelength short
Description: Specifies the cable length (line build-out) for a CT1 interface. The length of cable determines power requirements. The no version restores the default value, 0. cablelength short length no cablelength short Mode(s): length a cable length in the range 0660 feet
Syntax:
cbf
Description: Syntax: Mode(s): Creates a connection-based forwarding interface over the interface you are configuring. The no version removes the CBF interface. [ no ] cbf Interface Configuration
cbf connection ERX Edge Routers
83
cbf connection
Description: Creates a CBF connection between two CBF interfaces. The CBF connection is a bidirectional connection consisting of a symmetrical pair of unidirectional connections, one from interface1 to interface2 and a second from interface2 to interface1. The no version removes an existing connection. [ no ] cbf connection interface1Type interface1Specifier interface2Type interface2Specifier Mode(s): interface1Type interface type; see Interface Types and Specifiers in About This Guide interface1Specifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide interface2Type interface type; see Interface Types and Specifiers in About This Guide interface2Specifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
cbf shutdown
Description: Syntax: Mode(s): Administratively disables a CBF interface. The no version enables a CBF interface. (Newly created CBF interfaces are enabled by default.) [ no ] cbf shutdown Interface Configuration
channel-group shutdown
Description: Disables a CT1 channel group on a CT1 module or an E1 fractional interface on a CE1 module. The no version restarts a disabled channel group or fractional interface. [ no ] channel-group subchan shutdown Mode(s): subchan fractional T1 interface in the range 124 or fractional E1 interface in the range 131
Syntax:
84
channel-group snmp trap link-status
channel-group snmp trap link-status

Description: Enables processing of SNMP link status information on a CT1 channel group on a CT1 module or on an E1 fractional interface on an CE1 module. The no version disables the processing of SNMP link status information. [ no ] channel-group subchan snmp trap link-status Mode(s): subchan fractional T1 interface in the range 124 or fractional E1 interface in the range 131
Syntax:
channel-group timeslots
Description: Syntax: Configures the timeslots and data rate used on each CE1 channel on the CE1 module or on each CT1 channel on the CT1 module. channel-group subchan timeslots range [ speed { 56 | 64 } ] no channel-group subchan subchan fractional E1 interface in the range 131 or fractional T1 interface in the range 124 range timeslots assigned to the CE1 channel in the range 131 or to the CT1 channel in the range 124. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 110 and 1518. speed specifies the data rate for the CE1 or CT1 channel as one of the following values:
56 Kbps 64 Kbps (default)

Mode(s): Controller Configuration
channelized
Description: Configures a port on the CT3/T3-F0 line module and associated I/O module to support channelized T3 operation. The no version configures the port for unchannelized operation. [ no ] channelized Controller Configuration
Syntax: Mode(s):
check-disk ERX Edge Routers
85
check-disk
Description: Syntax: Mode(s): Finds and repairs structural inconsistencies and damage in the DOS file system in NVS on the primary SRP module. There is no no version. check-disk [ repair ] Boot To access the BOOT mode from the local console:
1 2 At the Privileged Exec prompt, type the reload command. Information on the reloading process appears. When the countdown begins, press the <M+B> key combination.
This puts the CLI in Boot mode (:boot## prompt). If you do not press the <M+B> key combination, the reloading process continues and returns the CLI to the normal User Exec mode.
86
classifier-list
classifier-list
Description: Creates or modifies a classifier control list. Use the not variables to deny traffic for a specific protocol, source address, or destination address. The no version removes the classifier control list. [ ip ] classifier-list classifierName [ traffic-class trafficClassName ] [ color { green | yellow | red } ] [ user-packet-class ] [ notProtocol ] { protocolNumber | protocolName } [ notSrcIpAddr ] { srcIp srcWildIp | hostSrcIpAddr srcIpHost | anySrcIpAddr } [ sourceQualifier ] [ notDestIpAddr ] { anyDestIpAddr | destIp destWildIp | hostDestIpAddr dstIpHost } [ destinationQualifier ] [ tcpQualifier ] [ ip-flags ipFlags ] [ ip-frag-offset { eq fragEqValue | gt 1 } ] [ precedence precNum | dsField dsFieldNum | tos tosNum ] no classifier-list classifierName [ classifierNumber ] classifierName name of the classifier control list entry trafficClassName name of the traffic class to match color match the color notProtocol variable matches any but the immediately following protocol argument protocolNumber protocol number matched by this classifier control list in the range 0255 protocolName protocol name matched by this classifier control list notSrcIPAddr variable matches any but the immediately following source address argument srcIp source address to match srcWildIp wild-card mask to apply to the source address hostSrcIpAddr source address as a host srcIPHost source host address to match anySrcIpAddr matches any source address sourceQualifier one of the following protocol-specific classifier parameters for source ports for UDP or TCP protocols only. See ERX Policy and QoS Configuration Guide, Chapter 1, Configuring Policy Management, for details.
Syntax:
portOperator one of the following boolean operator keywords: lt (less

than), gt (greater than), eq (equal to), or ne (not equal), or range (range of port numbers)
fromPort single port number or the beginning of a range of port

numbers
classifier-list ERX Edge Routers
87
toPort end of a range of port numbers

notDestIpAddr variable matches any but the immediately following destination address argument anyDestIpAddr matches any destination address destIp destination address to match destWildIp wild-card mask to apply to the destination address hostDestIpAddr destination host address to match destIpHost destination host address to match destinationQualifier one of the following protocol-specific classifier parameters for destination TCP or UDP ports, ICMP code and type, or IGMP type. The portOperator, fromPort, and toPort arguments are used with TCP and UDP. The icmpType, icmpCode, and igmpType arguments are used with ICMP and IGMP.
portOperator one of the following boolean operator keywords: lt (less

than), gt (greater than), eq (equal to), or ne (not equal), or range (range of port numbers) (TCP and UDP only)
fromPort single port number or the beginning of a range of port

numbers (TCP and UDP only)
toPort end of a range of port numbers (TCP and UDP only) icmpType ICMP message type (ICMP only) icmpCode ICMP message code (ICMP only) igmpType IGMP message type (IGMP only)
tcpQualifier TCP flags classification parameters tcpFlag for TCP only; a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:
ack 0x10 fin 0x01 push 0x08 rst 0x04 syn 0x02 urgent 0x20
ipFlags a logic equation that specifies flag bit values; ! means logical NOT and & means logical AND; use any of the following flag names:
dont-fragment 0x02 more-fragments 0x01 reserved 0x04
88
cleanup-timeout-factor
ipFragOffset matches the specified IP fragmentation offset; use any of the following:
eq 0 equals 0 eq 1 equals 1 gt 1 greater than 1

Mode(s): precNum upper three bits of the ToS byte; range is 07 dsfieldNum upper six bits of the ToS byte; range is 063 tosNum whole eight bits of the ToS byte; range is 0255
cleanup-timeout-factor
Description: Syntax: Specifies the number of refresh messages that can be lost before the PATH or RESV state is ended. The no version restores the default value of 3. cleanup-timeout-factor lostRefreshes no cleanup-timeout-factor Mode(s): lostRefreshes number of lost refresh messages
RSVP Profile Configuration
clear access-list
Description: Syntax: Clears counters for entries in IP access lists. There is no no version. clear access-list [ accessListName ] Mode(s): accessListName name of the access list; a string of up to 32 characters
Privileged Exec
clear arp ERX Edge Routers
89
clear arp
Description: Syntax: Clears entries from the ARP cache. There is no no version. clear [ ip ] arp [ vrf vrfName ] { ipAddress interfaceType interfaceSpecifier | * } Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ipAddress IP address in 32-bit dotted-decimal format of the entry to be cleared interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide * clears all dynamic ARP entries
Privileged Exec
clear cbf interface

Description: Syntax: Clears statistics on CBF interfaces. There is no no version. clear cbf interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier see Interface Types and Specifiers in About This Guide.
Privileged Exec
clear egress-queue
Description: Syntax: Clears egress queue statistics for the specified interface and traffic class. There is no no version. clear egress-queue interfaceType interfaceSpecifier [ stacked ] [ traffic-class trafficClassName ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier see Interface Types and Specifiers in About This Guide. stacked clears queue statistics for all interfaces stacked above the specified interface
Privileged Exec
90
clear fabric-queue
clear fabric-queue
Description: Clears fabric queue statistics for the specified traffic-class and egress-slot. The default is that statistics for all traffic classes and all slots are cleared. There is no no version. clear fabric-queue [ traffic-class trafficClassName ] [ egress-slot egressSlot ] [ filter ] Mode(s): traffic-class clear fabric-queue statistics for a traffic class egress-slot clear fabric-queue statistics for an egress-slot
Syntax:
Privileged Exec
clear ip bgp
Description: If the soft option is not used, brings down the underlying TCP connection and then brings it back up again, causing both peers to resend their complete BGP routing table. If the soft out option is used, the BGP speaker reapplies outbound policy and resends all routes to the specified peer(s). If the soft in option is used, the BGP speaker reapplies inbound policy to the routes received from the specified peer(s). This is possible only if soft reconfiguration inbound has been enabled for the peer or the peer supports the route-refresh capability. There is no no version. clear ip bgp [ { ipAddress | peer-group peerGroupName | * } ] [ vrf vrfName ] [ ipv4 { unicast | multicast } | vpnv4 unicast ] [ soft [ in [ prefix-filter ] | out ] ] ipAddress IP address of identified BGP neighbor to clear peerGroupName name of a BGP peer group to clear * clears all connections vrfName name of a virtual routing and forwarding instance to clear ipv4 unicast clears the IPv4 unicast routing table; the default option ipv4 multicast clears the IPv4 multicast routing table vpnv4 unicast clears the VPNv4 unicast routing and forwarding table soft soft reconfiguration
Syntax:
in triggers inbound soft reconfiguration prefix-filter pushes out prefix list and Cisco-proprietary prefix list
outbound route filters and triggers inbound soft reconfiguration
out triggers outbound soft reconfiguration

Mode(s): Privileged Exec
clear ip bgp dampening ERX Edge Routers
91
clear ip bgp dampening

Description: Clears route flap dampening information and reinstates the suppressed routes. The dampening keyword and the flap-statistics keyword both have the same effect. There is no no version. clear ip bgp [ vrf vrfName ] [ ipv4 { unicast | multicast } | vpnv4 unicast ] { dampening | flap-statistics } [ ipAddress [ addressMask ] ] Mode(s): vrfName name of a virtual routing and forwarding instance to clear ipv4 unicast clears the IPv4 unicast routing table; the default option ipv4 multicast clears the IPv4 multicast routing table vpnv4 unicast clears the VPNv4 unicast routing and forwarding table ipAddress IP address of the BGP neighbor to clear ipMask address mask to be applied to the network IP address
Syntax:
Privileged Exec
clear ip bgp redistribution

Description: Syntax: Mode(s): Reapplies policy to routes that have been redistributed into BGP. There is no no version. clear ip bgp redistribution User Exec, Privileged Exec
clear ip dvmrp routes

Description: Syntax: Clears DVMRP routes from the routing table. There is no no version. clear ip dvmrp routes [ ipAddress [ addressMask ] ] Mode(s): ipAddress clears the longest match to this IP address addressMask clears route that matches exactly to this subnet mask
Privileged Exec
92
clear ip interface
clear ip interface
Description: Syntax: Clears the counters on the specified IP interface. The default is all interface types and all interfaces. There is no no version. clear ip interface [ vrf vrfName ] interfaceType interfaceSpecifier Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Privileged Exec
clear ip isis redistribution

Description: Clears all the routes that have previously been redistributed into IS-IS and redistributes them using the current policy configuration. There is no no version. clear ip isis redistribution Privileged Exec
Syntax: Mode(s):
clear ip mroute
Description: Syntax: Clears all or the specified multicast forwarding entries. There is no no version. clear ip mroute { * | grpAddress [ sourceAddress ] } Mode(s): * clear all IP multicast forwarding entries grpAddress address of the multicast group for which forwarding entries should be cleared sourceAddress address of the multicast source for which forwarding entries should be cleared
User Exec, Privileged Exec
clear ip ospf redistribution

Description: Syntax: Mode(s): Clears all the routes that have previously been redistributed into OSPF. There is no no version. clear ip ospf redistribution Privileged Exec
clear ip pim auto-rp ERX Edge Routers
93
clear ip pim auto-rp

Description: Syntax: Clears the group-to-RP router mappings the system learned via autoRP. There is no no version. clear ip pim auto-rp [ ipAddress ] Mode(s): ipAddress IP address of the system designated as an RP router
clear ip pim interface count

Description: Syntax: Clears the counters for multicast packet statistics on all interfaces or the specified interface. There is no no version. clear ip pim interface [ interfaceType interfaceSpecifier ] count Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
clear ip pim remote-neighbor count

Description: Syntax: Clears the counters for multicast packet statistics on all interfaces or the specified interface. There is no no version. clear ip pim remote-neighbor [ ipAddress ] count Mode(s): ipAddress IP address of the interface
clear ip prefix-list
Description: Syntax: Clears all hit counts in the prefix lists, the specified prefix list, or the specified entry from the specified prefix list. There is no no version. clear ip prefix-list [ listName [ network/length] ] Mode(s): listName name of the prefix list; a character string up to 32 characters in length network base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0 length length of the network prefix; number of bits masking base address to produce address to be matched
94
clear ip prefix-tree
clear ip prefix-tree
Description: Syntax: Clears all prefix trees, the specified prefix tree, or the specified entry from the specified prefix tree. There is no no version. clear ip prefix-tree [ treeName [ network/length ] ] Mode(s): treeName name of the prefix list; a character string up to 32 characters in length network base address of the network route to be filtered; for example, 192.168.32.0 or 10.10.0.0 length length of the network prefix; number of bits masking base address to produce address to be matched
clear ip rip redistribution

Description: Syntax: Mode(s): Clears all the routes that have previously been redistributed into RIP. There is no no version. clear ip rip redistribution User Exec, Privileged Exec
clear ip routes
Description: Syntax: Clears a specified route or all dynamic routes from the routing table of a specified VRF or all VRFs. There is no no version. clear ip routes [ vrf vrfName ] { * | ipAddress [ ipMask ] } Mode(s): vrfName name of the VRF context from which routes are to be cleared * clears all dynamic routes ipAddress IP address prefix for routes that are cleared; in 32-bit dotted-decimal format ipMask mask of the IP address prefix for routes that are cleared; in 32-bit dotted-decimal format
Privileged Exec
clear isis adjacency ERX Edge Routers
95
clear isis adjacency

Description: Syntax: Clears all entries from the adjacency database, or clears only adjacencies with a specified neighbor. There is no no version. clear isis adjacency [ systemId | hostname ] Mode(s): systemID system ID of an IS-IS neighbor hostname hostname of an IS-IS neighbor
Privileged Exec
clear isis database

Description: Syntax: Clears all entries from the IS-IS link state database, or clears only entries associated with a specified neighbor. There is no no version. clear isis database [ systemId | hostname ] Mode(s): systemID system ID of an IS-IS neighbor hostname hostname of an IS-IS neighbor
Privileged Exec
clear line
Description: Syntax: Removes any services on a vty line and closes any files opened as a result of services on that line. There is no no version. clear line lineNumber Mode(s): lineNumber number of the vty line
User Exec
clear mpls ldp

Description: Removes and reestablishes all existing LDP LSPs, thereby forcing the reapplication of all policies on every configured topology-driven LDP LSP. There is no no version. clear mpls ldp Privileged Exec
Syntax: Mode(s):
96
client-name
client-name
Description: Sets a hostname for a tunnel. For L2TP, specifies the hostname used by the LAC when communicating with the LNS about the tunnel. For L2F, specifies the hostname used by the NAS when communicating with the home gateway. The no version removes the hostname from the tunnel. Note: This command has replaced the hostname command for Domain Map Tunnel Configuration mode only. Syntax: client-name clientname no client-name Mode(s): clientname string of up to 64 characters (no spaces)
Domain Map Tunnel Configuration
clns configuration-time
Description: Syntax: Specifies the rate at which ES hellos and IS hellos are sent. The no version restores the default value of 10 seconds. clns configuration-time configTime no clns configuration-time Mode(s): configTime number in the range 165535; rate in seconds at which ES and IS hello packets are sent; the default is 10 seconds
clns holding-time
Description: Allows the sender of an ES hello or IS hello to specify the length of time you consider the information in the hello packets to be valid. The no version restores the default value, 30 seconds. clns holding-time holdTime no clns holding-time Mode(s): holdTime number in the range 165535; length of time in seconds during which the information in the hello packets is considered valid
Syntax:
clns host ERX Edge Routers
97
clns host
Description: Use to define a name-to-NSAP mapping that can then be used with commands requiring NSAPs. The no version restores the default of no mapping defined. Enables dynamic resolution of hostnames to system IDs (within the NSAP address). The hostname mapping is sent in the LSPs within the dynamic hostname TLV tuple. Display the TLV by issuing the show isis database detail command. Use the show hosts command to display the mapping. clns host name nsap no clns host name Mode(s): name name for the NSAP; first character can be either a letter or a number. If a number is used, the operations you can perform are limited. nsap the NSAP to which that name maps
Syntax:
clock rate
Description: Sets the rate of the internal clock in MHz for HSSI and X.21/V.35 interfaces. The no version restores the default value; for HSSI the default is 44.736 MHz, for X.21/V.35, the default is 2048000 Hz. The syntax depends on the type of interface. HSSI Interfaces: clock rate { 34 | 44 } no clock rate 34 specifies a rate of 34.368 MHz 44 specifies a rate of 44.736 MHz
Syntax:
X.21/V.35 Interfaces: [ no ] clock rate rate no clock rate rate speed of the clock in Hz; one of the following values: 1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 50000 | 64000 | 128000 | 1024000 | 2048000 | 3072000 | 4096000 | 4915200 | 6144000 | 6192000
Mode(s):
98
clock set
clock set
Description: Syntax: Allows you to manually set the system clock. There is no no version. clock set time { month day | day month } year Mode(s): time current time (in 24-hour format HH:MM:SS) month name of the month (January, February, ) day day of the month (131) year year (2000, 2001, )
Privileged Exec
clock source
Description: Syntax: Determines how an interfaces obtains clocking signals. The no version restores the default value, line. clock source { line | internal { module | chassis } } no clock source line interface clocks data from a clock recovered from the lines receive data stream; the default. internal internal clock source transmits data from its internal clock. You must specify one of the following for internal clocking:
module internal clock is from the line module itself chassis internal clock is from the configured system clock
Mode(s): Controller Configuration, Interface Configuration (POS only)
clock summer-time date ERX Edge Routers
99
clock summer-time date

Description: Sets the system to automatically switch to summer time (Daylight Saving Time DST). It should start on the first specific date listed in the command and end on the second specific date in the command. The no version configures the software so that it does not automatically switch to summer time. clock summer-time name date { startDay startMonth | startMonth startDay } startYear startTime { stopDay stopMonth | stopMonth stopDay } stopYear stopTime [ dstOffset ] no clock summer-time name name of the time zone (for example, PDT) to be displayed when daylight saving (summer) time is in effect date indicates that summer time should start on the first specific date listed in the command and end on the second specific date in the command startDay DST start day (131) startMonth DST start month (January, February, ) startYear DST start year (2000, 2001, ) startTime DST start time (24-hour format) in hours and minutes (hh:mm) stopDay DST stop day stopMonth DST stop month stopYear DST stop year stopTime DST stop time (24-hour format) dstOffset number of minutes to add during summer time in the range 11440; default = 60
Syntax:
Mode(s):
100
clock summer-time recurring
clock summer-time recurring

Description: Sets the system to automatically switch to summer time (Daylight Saving Time) on the specified dates every year. The no version configures the software not to automatically switch to summer time. clock summer-time name recurring [ { startWeekNumber | startWeekEnum } startDay startMonth startTime { stopWeekNumber | stopWeekEnum } stopDay stopMonth stopTime [ dstOffset ] ] no clock summer-time name name of the time zone (for example, EDT for Eastern Daylight Savings Time) to be displayed when daylight saving (summer) time is in effect recurring indicates that summer time should start and end on the specified days every year startWeekNumber DST start week of the month (15) startWeekEnum first week in month (first); or last week in month (last) startDay DST start day of the week (Sunday, Monday, ) startMonth DST start month (January, February, ) startTime DST start time (24-hour format) in hours and minutes (hh:mm) stopWeekNumber DST stop week of the month (15) stopWeekEnum first week in month (first); or last week in month (last) stopDay DST stop day of the week stopMonth DST stop month stopTime DST stop time in hours and minutes (hh:mm) dstOffset number of minutes to add during summer time in the range 11440; default = 60
Syntax:
Mode(s):
clock timezone
Description: Syntax: Sets the time zone for display. The no version sets the time zone to UTC. clock timezone name hours [ minutes ] no clock timezone Mode(s): name name of the time zone to be displayed when Standard time is in effect, such as EST or PST. hours hours offset from UTC (-23, -22 23) minutes minutes offset from UTC (059)
color ERX Edge Routers
101
color
Description: Defines a policy rule that assigns a color to packets in the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with the policy list for this rule. Use the suspend keyword to temporarily suspend color assignment. The no version removes the rule from the policy list; the suspend version temporarily suspends the policy rule; the no suspend version resumes application of a suspended rule. [ no ] [ suspend ] color { green | yellow | red } [ classifier-group claclName ] [ precedence precValue ] color one of the following colors assigned to packets:
Syntax:
green highest precedence yellow intermediate precedence red lowest precedence

Mode(s): claclName classifier control list used to classify packets for this coloring service precValue precedence value in the range 032768
Policy Configuration
committed-action
Description: Sets the action for packets conforming to the committed rate and committed burst size and conforming to the exceed rate and exceed burst size for a rate limit profile. The no version restores the value to the default value, drop. [ no ] committed-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet mark mark the packet markVal mark value in the range 0255
Syntax:
Rate Limit Profile Configuration
committed-burst
Description: Syntax: Sets the committed burst for a rate limit profile. The no version restores the default value, 8192. [ no ] committed-burst size Mode(s): size size in bytes in the range 81924294967295
102
committed-length
committed-length
Description: Syntax: Sets minimum and maximum constraints for the queues committed lengths. The no version removes constraints on the queues committed length. committed-length minimumCommittedLength [ maximumCommittedLength ] no committed-length Mode(s): minimumCommittedLength range 01073741824 maximumCommittedLength range 01073741824
committed-rate
Description: Syntax: Sets the committed rate for a rate limit profile. The no version restores the default value, 0. [ no ] committed-rate rate Mode(s): rate rate in bits per second in the range 04294967295
configure
Description: Syntax: Enters the Global Configuration mode. To enter Global Configuration commands, you must be in the Privileged Exec mode. There is no no version. configure [ terminal | file [ fileName ] [ verbose | show-progress [ dotPeriod ] ] ] Mode(s): terminal configure from a terminal file configure from a script file fileName script file to execute verbose echo each command as the script is executed show-progress display a . during script execution dotPeriod displays a . after this number of commands; default is 100
Privileged Exec
confirmations explicit ERX Edge Routers
103
confirmations explicit
Description: Requires the user to enter y, ye, or yes to confirm a prompt, and to enter n or no to deny a prompt. The no version restores the default state, which permits pressing <Enter> or <y> to confirm a prompt and entering any other characters to deny a prompt. [ no ] confirmations explicit Global Configuration
Syntax: Mode(s):
conformed-action
Description: Sets the action for packets not conforming to the committed rate and committed burst size, but conforming to the peak rate and peak burst size for a rate limit profile. The no version restores the value to the default value, drop. [ no ] conformed-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet mark mark the packet markVal mark value in the range 0255
Syntax:
conformed-fraction
Description: Sets the percentage of the total queue that can be occupied before dropping conformed packets. The no version returns the conformed fraction to its default setting. conformed-fraction conformedFraction no conformed-fraction Mode(s): conformedFraction percentage range 0100; default is 50%
Syntax:
104
conformed-length
conformed-length
Description: Syntax: Sets minimum and maximum constraints for the queues conformed lengths. The no version removes constraints on the queues conformed length. conformed-length minimumConformedLength [ maximumConformedLength ] no conformed-length Mode(s): minimumConformedLength range 01073741824 maximumConformedLength range 01073741824
controller e1
Description: Syntax: Accesses Controller Configuration mode so that you can configure a CE1 controller. There is no no version. controller e1 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
controller e3
Description: Syntax: Accesses Controller Configuration mode so that you can configure an E3 controller. There is no no version. controller e3 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
controller sonet
Description: Syntax: Selects an interface on which you want to configure SONET or SDH. There is no no version. controller sonet interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
controller t1 ERX Edge Routers
105
controller t1
Description: Syntax: Accesses Controller Configuration mode so that you can configure a CT1 controller. There is no no version. controller t1 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
controller t3
Description: Syntax: Accesses Controller Configuration mode so that you can configure a T3 controller. There is no no version. controller t3 interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
106
copy
copy
Description: Copies a local or network file. There is no no version. Note: You cannot change the extension of a file, for example, .scr.
Note: You can only copy software release (.rel) files to the system (download); you cannot copy them from the system (upload). Syntax: copy sourcePath:sourceFilename destinationPath:destinationFilename [force] sourcePath path to the source in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory
networkPath path to the network host incoming specifies the ERX systems incoming FTP directory subdirectory name of a subdirectory on the ERX systems FTP server.
If the subdirectory does not exist, the system creates it.
outgoing specifies the ERX systems outgoing FTP directory

source_filename name of source file destinationPath path to the destination in the format: networkPath | /incoming/subdirectory | /outgoing/subdirectory
networkPath path to the network host incoming specifies the incoming ERX systems FTP directory subdirectory name of a subdirectory on the ERX systems FTP server.
If the subdirectory does not exist, the system creates it.
outgoing specifies the ERX systems outgoing FTP directory

Mode(s): destinationFilename name of destination file force forces a copy, even if the destination file already exists
Privileged Exec
copy running-configuration
Description: Saves the configuration currently running on the system to a local or remote (network) system configuration file (.cnf). Available only if the system is in Automatic Commit mode. There is no no version. copy running-configuration destination [ force ] Mode(s): destination destination filename (*.cnf) force creates a copy even if the destination file already exists
Syntax:
Privileged Exec
copy running-configuration startup-configuration ERX Edge Routers
107
copy running-configuration startup-configuration

Description: Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an exact alias of the write memory command. Available if the system is in either Automatic Commit mode or Manual Commit mode. If issued while in Automatic Commit mode, the CLI notifies you that the command is not necessary, but allows you to proceed. There is no no version. copy running-configuration startup-configuration Privileged Exec
Syntax: Mode(s):
copy startup-configuration
Description: Copies the previously saved startup configuration to a local or remote (network) system configuration (*.cnf) file. Available only if the system is in Manual Commit mode. If you have made but not saved any configuration changes, those changes are not in the startup configuration. There is no no version. copy startup-configuration destination [ force ] Mode(s): destination destination filename (*.cnf) force creates a copy even if the destination file already exists
Syntax:
Privileged Exec
cost
Description: Syntax: Specifies a cost metric for an OSPF remote-neighbor interface. Used in the calculation of the SPF routing table. The no version restores the default value. cost intfCost no cost intfCost link state metric cost; a number in the range 165535; default value is 10 if there is no route to the remote neighbor; otherwise, the default is calculated based on the bandwidth of the physical interface used to reach the remote neighbor and the OSPF auto-cost reference bandwidth
Mode(s):
108
crc
crc
Description: Sets the size of the cyclic redundancy check. CRC is an error-checking technique that uses a calculated numeric value to detect errors in transmitted data. 16 and 32 indicate the number of check digits per frame that are used to calculate the FCS. Both the sender and receiver must use the same setting. The default is 16. The no version restores the value to the default. crc { 16 | 32 | none } no crc Mode(s): 16 specifies CRC-16, which transmits streams of 8-bit characters and generates 16-bit check bits per frame 32 specifies CRC-32, which transmits longer streams at faster rates and therefore provides better ongoing error detection none disables CRC checking
Syntax:
cr-ldp
Description: Specifies that the traffic-engineering extensions to LDP are in effect on this interface. CR-LDP is enabled by default. The no version disables CR-LDP in the profile. [ no ] cr-ldp LDP Profile Configuration
Syntax: Mode(s):
crypto key dss

Description: Controls SSH server daemon and creation/deletion of SSH server host key. This command is not displayed by the show config command. There is no no version. crypto key { generate | zeroize } dss generate creates the SSH server host key and enables the daemon zeroize deletes the SSH server host key and stops the SSH daemon if it is running. Issuing this command terminates any active client sessions. The next time the system boots after this command is issued, the SSH server daemon is not started.
Syntax:
Mode(s):
data-character-bits ERX Edge Routers
109
data-character-bits
Description: Syntax: Sets the number of data bits available for characters for all sessions on the specified vty lines. There is no no version. data-character bits { 7 | 8 } Mode(s): 7 7 data bits per character; this setting supports only characters in the standard ASCII set 8 8 data bits per character; default setting, supports the full set of 8-bit international characters
Line Configuration
dead-interval
Description: Sets the time period that the OSPF router waits without seeing hello packets from a remote neighbor before declaring the neighbor to be down. The no version restores the default value. dead-interval deadInterval no dead-interval Mode(s): deadInterval number in the range 165535 seconds; default value is 40 seconds
Syntax:
deadtime
Description: Use to configure the amount of time (in minutes) that a server is marked as unavailable if a request times out for the configured retry count. If a server fails to answer a request, it is marked unavailable by the system. The system does not send requests to the server for the configured time. The no version restores the default value, 0, turning off the deadtime mechanism. deadtime recovery no deadtime Mode(s): recovery amount of time that a server is marked as unavailable in the range 030 (minutes). The default is 0.
Syntax:
Radius Configuration
110
debounce-time
debounce-time
Description: Syntax: Sets the interval to wait before bringing up a RIP interface that was brought down. The no version restores the default value, 10. debounce-time interval no debounce-time Mode(s): interval seconds in the range 060
debug ip bgp
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] [ secondary ] no debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:
dampening BGP dampening event; route is suppressed or no longer

suppressed by route-flap dampening
events BGP finite state machine events and transitions keepalives BGP keepalive message events updates BGP routing table update events vpnv4 BGP VPNv4 NLRI events
import displays BGP import processing events; appears only if you specify the vpnv4 keyword
debug ip bgp ERX Edge Routers
111
routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output severity specifies the minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07; the lower the number, the higher the priority:
emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message debug or 7 debug message
verbosityLevel verbosity of the log categorys messages; can be any of the following:
low terse medium moderate detail high verbose

secondary indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified
Mode(s):
Privileged Exec
112
debug ip mbgp
debug ip mbgp
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] [ secondary ] no debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:

import displays BGP import processing events; appears only if you specify the vpnv4 keyword routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command.
debug ip ospf ERX Edge Routers
113
verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command. secondary indicates that the specified filter conditions for the log are imposed in addition to any that were previously specified; if omitted, the specified filter conditions replace any that were previously specified
Mode(s):
Privileged Exec
debug ip ospf
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip ospf ospfLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug ip ospf ospfLog ospfLog OSPF log of interest; one of the following options:
adj OSPF adjacency events elect-dr OSPF designated router election events OSPF general events lsa OSPF link state advertisements events neighbor OSPF neighbor state machine packets-rcvd OSPF packets received packets-sent OSPF packets sent route OSPF route events spf all OSPF shortest path first calculation events spf-ext OSPF shortest path first external route calculation events spf-inter OSPF shortest path first interarea route calculation events spf-intra OSPF shortest path first intra-area route calculation events
Mode(s): severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command.
Privileged Exec
114
debug ip pim
debug ip pim
Description: Syntax: Shows information on the selected variable. The no version disables the display. The syntax differs for PIM Dense Mode and PIm Sparse Mode. PIM Dense Mode: debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] | switchState groupAddress sourceAddress | dense-mode { on | off } } PIM Sparse Mode: debug ip pim { pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] | switchState groupAddress sourceAddress | sparse-mode { on | off | sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] } } no debug ip pim pimLog pimLog PIM log of interest; one of the following options:
autoRp-rcvd autoRP packets received autoRP-sent autoRP packets sent engineering PIM engineering hellos-rcvd PIM hello messages received hellos-sent PIM hello messages sent packets PIM packets received and sent packets-rcvd PIM packets received packets-sent PIM packets sent
severity specifies the minimum severity of the log messages displayed for the selected category. See the debug ip bgp command. verbosityLevel verbosity of the log categorys messages. See the debug ip bgp command. switchState switches from one type of tree to another
rpt-switch switch from a shortest path tree to a shared path tree spt-switch switch from a shared path tree to a shortest path tree
groupAddress IP address of the multicast group sourceAddress IP address of the multicast source on turns on the specified PIM mode on all virtual routers
debug ip rip ERX Edge Routers
115
off turns off the specified PIM mode on all virtual routers sg-state displays information about the relationship between a source, multicast group, and RP router rp displays information about the relationships between sources, groups, and the specified RP router rpAddress address of the RP router count displays one of the following
(with no optional keywords) number of relationships between a source,

multicast group, and RP router
(with the group keyword) number of sources associated with the

multicast group for PIM SM
(with the source and group keywords) number of source-group pairs for
PIM SM
(with the rp keyword) number of source-group pairs associated with the

RP router for PIM SM Mode(s): Privileged Exec
debug ip rip
Description: Syntax: Shows information on the selected variable. The no version disables the display. debug ip rip ripLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug ip rip ripLog ripLog RIP log of interest; one of the following options:
events general RIP events, such as removing RIP from an interface or

creating the RIP process
route events associated with two RIP routers exchanging routes

Privileged Exec
116
debug isis
debug isis
Description: Displays debug-related information about selected IS-IS log parameters. This command manipulates the same log as the Global Configuration log commands. The no version disables debugging display. debug isis isisLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no debug isis isisLog isisLog IS-IS log of interest; one of the following options:
Syntax:
adj-packets IS-IS adjacency-related packets, such as hello packets

sent and IS-IS received adjacencies going up and down
mpls traffic-eng advertisements MPLS traffic-engineering agent

advertisements
mpls traffic-eng agents MPLS traffic-engineering agents snp-packets IS-IS CSNPs/PSNPs spf-events shortest path first events spf-statistics SPF timing and statistic data spf-triggers SPF triggering events update-packets update-related packets
Privileged Exec
default-fields peer ERX Edge Routers
117
default-fields peer
Description: Syntax: Specifies the fields that will appear by default in the output of a subsequently issued show ip bgp summary command. [ no ] default-fields peer fieldOptions fieldOptions field(s) to be displayed, in the format all | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]*
all all available information; not recommended, as this information for

each network does not fit on a single line and is difficult to read
intro introductory information about the state of various BGP attributes;

this information is displayed only if you specify this keyword
last-reset-reason reason for most recent reset messages-received total number of messages received from the peer messages-sent total number of messages sent to the peer peer-type type of BGP peer: internal, external, or confederation prefixes-received number of unique prefixes received from the peer remote-as the remote AS number of the peer state state of the BGP session times-up number of times the session has been established up-down-time how long the session has been up or down updates-received number of update messages received from the peer updates-sent number of update messages sent to the peer * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Router Configuration
118
default-fields route
default-fields route
Description: Specifies the fields that will appear by default in the output of any subsequently issued show ip bgp command that displays routes (except for the show ip bgp summary command). [ no ] default-fields route fieldOptions fieldOptions field(s) to be displayed, in the format all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*
Syntax:

afi address family identifier aggregator AS number and IP address of aggregator as-path AS path through which this route bas been advertised atomic-aggregate whether the atomic aggregate attribute is present best whether this is the best route for the prefix clusters list of cluster IDs through which the route has been advertised communities community number associated with the route extended-communities extended community imported whether the route was imported intro introductory information about the state of various BGP attributes;
in-label MPLS label for the route; the label received with incoming
MPLS frames
loc-pref local preference for the route med multiexit discriminator for the route next-hop IP address of the next router that is used when forwarding a
packet to the destination network
next-hop-cost whether the indirect next hop of the route is

unreachable, if not, displays IGP cost to the indirect next hop
out-label MPLS label for the route; the label with outgoing MPLS
frames
peer IP address of BGP peer from which route was learned peer-type type of BGP peer: internal, external, or confederation origin origin of the route
default-fields route ERX Edge Routers
119
originator-id router ID of the router in the local AS that originated the

route
rd route distinguisher safi subsequent address family identifier unknown-types attribute codes for unknown path attributes weight weight of the route * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): Router Configuration
120
default-information originate
default-information originate
Description: Enables BGP to advertise a default route (0.0.0.0/0) if the default route exists in the IP routing table. If the default route does not exist, you must configure it using the ip route command. For IS-IS, OSPF, and RIP, configures a default route for the distribution of default information into the respective routing domain. IS-IS creates the default route (0.0.0.0/0) if it does not exist in the IP routing table. OSPF and RIP do not create the default route unless you use the always option. For all protocols, the no version disables advertisement of the default route. The syntax varies with the protocol. For BGP: [ no ] default-information originate For IS-IS: [ no ] default-information originate [ route-map mapTag ] For RIP: [ no ] default-information originate [ always | route-map mapTag ] For OSPF: [ no ] default-information originate [ always | metric metricValue | metric-type 1 | metric-type 2 | route-map mapTag ]* Mode(s): mapTag name of route map used to import the default route; string of up to 32 characters always creates the default route, so that it is always advertised metricValue sets the metric for the default route; a value ranging from 04294967295 metric-type 1 sets the default routes metric type to OSPF external type 1 metric-type 2 sets the default routes metric type to OSPF external type 2 * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
default-metric ERX Edge Routers
121
default-metric
Description: Syntax: Configures RIP to use this metric when advertising routes on all subsequently created interfaces. The no version restores the default value, 0. [ no ] default-metric metricValue [ interfaceType interfaceSpecifier ] Mode(s): metricValue metric to apply to routes, a value ranging from 116 interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
default-router
Description: Specifies the IP address of the router that the subscribers computer will use for traffic destined for locations beyond the local subnet. The no version removes the association between the address pool and the router. default-router ipAddressPrimary [ ipAddressSecondary ] no default-router Mode(s): ipAddressPrimary IP address of preferred router ipAddressSecondary IP address of secondary router
Syntax:
Pool Configuration
delete
Description: Syntax: Deletes a directory or file in nonvolatile storage. There is no no version. delete filename | directory directoryName [ force ] Mode(s): filename name of the local file you are deleting (for example, system1.cnf) directoryName path of a directory force forces deletion of directory even if it is not empty
Boot, User Exec, Privileged Exec
122
deny
deny
Description: Syntax: Specifies the domain name(s) that are to be denied access to AAA authentication. The no version negates the command. [ no ] deny domainName Mode(s): domainName name of the domain; maximum of 64 characters
description
Description: In Interface Configuration mode, adds a text description to an IP interface. In VRF Configuration mode, adds a text description to the VRF. The no version removes the description from the interface or VRF. description name no description Mode(s): name string of up to 256 characters in Interface Configuration mode; string of up to 80 characters in VRF Configuration mode
Syntax:
Interface Configuration, VRF Configuration
dir
Description: Syntax: Displays information about the files in nonvolatile storage, including name, size, date created, and whether they are in use. There is no no version. dir [ path ] [ short ] Mode(s): path path to a specific directory short limits display to file name and creation date
disable ERX Edge Routers
123
disable
Description: When used from Privileged Exec mode, exits Privileged Exec mode and returns to User Exec mode. When used from Router Configuration or Interface Configuration mode in the context of a DVMRP configuration, disables DVMRP on the virtual router or interface. The no version reenables DVMRP on the virtual router or interface. When used from Router Configuration mode in the context of a RIP configuration, disables RIP on the virtual router. The no version enables RIP processing on the virtual router. To return to User Exec mode: disable [ level ] level one of the following privilege levels; the default is 10
Syntax:
0 allows the user to execute the help, enable, disable, and exit
commands
1 allows the user to execute commands in User Exec mode plus

commands at level 0
5 allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0
10 allows the user to execute all commands except support

commands, which may be provided by Juniper Networks Customer Service
15 allows the user to execute support commands

DVMRP, RIP: [ no ] disable Mode(s): Privileged Exec, Router Configuration (DVMRP or RIP), Interface Configuration (DVMRP only)
disable-autosync
Description: Halts automatic synchronization between the primary and standby SRP modules. The no version restores the default situation, in which automatic synchronization runs as a background process every 5 minutes. [ no ] disable-autosync Global Configuration
Syntax: Mode(s):
124
disable-dynamic-redistribute
disable-dynamic-redistribute
Description: Halts the dynamic redistribution of routes that are initiated by changes to a route map. Supported by DVMRP, BGP, IS-IS, OSPF, and RIP. The no version reenables dynamic redistribution of routes. [ no ] disable-dynamic-redistribute Address Family Configuration, Router Configuration
Syntax: Mode(s):
disable proxy lcp

Description: Syntax: Mode(s): Disables the proxy LCP parameter for the remote host. The no version enables the proxy LCP parameter for the remote host. [ no ] disable proxy lcp L2TP Destination Profile Host Configuration
disable-switch-on-error
Description: Prevents the redundant SRP module from taking over if the primary SRP module experiences a software failure or if you push the reset button on the primary SRP module. Issue the sync command immediately before you issue this command. The no version restores the default situation, in which the redundant SRP module takes over if the primary SRP module experiences a failure. [ no ] disable-switch-on-error Global Configuration
Syntax: Mode(s):
disconnect ssh
Description: Terminates an active SSH session. Use the show ip ssh command to determine the session identifier for the session to terminate. There is no no version. disconnect ssh { vty vtyId | sessionId } Mode(s): vtyId virtual terminal identifier for VTY where the SSH session resides; use the show users command to determine the identifier sessionId identifier for the session to be terminated
Syntax:
Privileged Exec
distance ERX Edge Routers
125
distance
Description: Defines an administrative distance for RIP or OSPF routes. A distance of 255 prevents the route from being installed in the routing table. The no version either negates a command or restores the commands defaults. The options available vary depending on your routing protocol context; that is, on whether you are configuring OSPF or RIP. OSPF: [ no ] distance { weight | ospf { external distExt | inter-area disInter | intra-area disIntra } [ external distExt | inter-area distInter | intra-area distIntra ]* } distance weight applied to OSPF routes weight value assigned to OSPF routes that are added to the IP routing table; a number in the range 1255 ospf OSPF routes distExt distance for external type 5 and type 7 routes; a number in the range 1255 disInter distance for interarea routes; a number in the range 1255 disIntra distance for intra-area routes; a number in the range 1255 * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
RIP: [ no ] distance weight Mode(s): weight administrative distance assigned to RIP routes added to the IP routing table in the range 0255; the default is 120
126
distance bgp
distance bgp
Description: Sets the administrative distances for BGP routes. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default values. distance bgp externalDistance internalDistance localDistance no distance bgp [ externalDistance [ internalDistance [ localDistance ] ] ] Mode(s): externalDistance administrative distance for routes external to the AS in the range 1255; the default is 20 internalDistance administrative distance for routes internal to the AS in the range 1255; the default is 200 localDistance administrative distance for local (redistributed) routes in the range 1255; the default is 200
Syntax:
distance ip
Description: Sets the administrative distance for IS-IS routes that are inserted into the IP routing table. A distance of 255 prevents the route from being installed in the routing table. The no version restores the default value of 115. [ no ] distance weight ip Mode(s): weight administrative distance assigned to IS-IS routes added to the IP routing table in the range 1255
Syntax:
distribute-domain-wide
Description: Increases the granularity of routing information within an IS-IS domain by allowing routes to be distributed from level 2 to level 1. This results in more accurate routing between level 1 areas. The no version disables command. [ no ] distribute-domain-wide Router Configuration
Syntax: Mode(s):
distribute-list ERX Edge Routers
127
distribute-list
Description: Specifies the distribute list, an access list applied to incoming or outgoing RIP route updates. In Remote Neighbor Configuration mode, applies only to a RIP remote-neighbor interface. The no version removes the distribute list. An IP access list acts as a filter; refer to the access-list command for details. In Router Configuration mode: [ no ] distribute-list accessListNumber { in | out } [ interfaceType interfaceSpecifier ] In Remote Neighbor Configuration mode: [ no ] distribute-list accessListName { in | out } Mode(s): accessListName name of the access list in applies the access list to incoming route updates out applies the access list to outgoing route updates interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Router Configuration, Remote Neighbor Configuration
dns-server
Description: Syntax: Assigns a DNS server to an address pool. The no version removes the association between the address pool and the DNS server. dns-server ipAddressPrimary [ ipAddressSecondary ] no dns-server Mode(s): ipAddressPrimary IP address of preferred DNS server ipAddressSecondary IP address of secondary DNS server
Pool Configuration
128
domain-authentication-key
domain-authentication-key
Description: Syntax: Assigns a password for authentication of IS-IS level 2 LSPs, CSNPs, and PSNPs. The no version deletes the password. domain-authentication-key [ 0 | 8 ] authKey no domain-authentication-key Mode(s): 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authKey a password, a continuous string of characters up to 8 characters in length
domain-id
Description: Syntax: Sets the OSPF domain ID for an OSPF VRF on a PE. The no version restores the default value. domain-id domainIdAddress | domainId no domain-id Mode(s): domainIdAddress OSPF domain ID in IP address format; default is the IP address of the OSPF router configured in the VRF domainId OSPF domain ID as an integer value in the range 04294967295; default is 0
domain-message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of each IS-IS level 2 packet (LSPs, CSNPs, and PSNPs). The digest is inserted into the packet from which it is created. Using this algorithm for domain routers protects against unauthorized routers injecting false routing information into your network. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. domain-message-digest-key keyId hmac-md5 [ 0 | 8 ] key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ]
Syntax:
domain-name ERX Edge Routers
129
[ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] no domain-message-digest-key keyId keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. 0 the key is entered in unencrypted form (plaintext); this is the default option 8 the key is entered in encrypted form (ciphertext) key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest. startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ]. never the system never stops accepting or generating packets; overrides previously specified stop times. stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ].
Mode(s):
domain-name
Description: Specifies a domain name that can be returned to the subscriber of an address pool if requested. The no version removes the association between the address pool and the domain name. domain-name domainName no domain-name Mode(s): domainName name of the domain
Syntax:
Pool Configuration
130
domain-tag
domain-tag
Description: Syntax: Sets the VPN route tag for an OSPF VRF on a PE to prevent routing loops back into the VPN. The no version restores the default value. domain-tag routeTag no domain-tag Mode(s): routeTag number identifying the VPN route tag in the range 04294967295
ds3-scramble
Description: Enables scrambling of the ATM cell payload on a T3 interface. DS3 scrambling assists clock recovery on the receiving end of the interface.The no version disables cell scrambling. [ no ] ds3-scramble Controller Configuration
Syntax: Mode(s):
dsr-detect
Description: Requires that a DSR signal be detected on the line for a user to log into the console. DSR is carried on pin 6 of the SRP modules RS-232 (DB-9) connector. The DSR input must be connected to the DSR output of a modem or the DTR output of another DTE device, such as a terminal server, that supports this signal. If a session is in progress and the DSR signal is lost, the user is logged out automatically. The no version restores the default of no DSR required. [ no ] dsr-detect Privileged Exec
Syntax: Mode(s):
dsu bandwidth ERX Edge Routers
131
dsu bandwidth
Description: Sets the speed for the fractional T3 lines. The no version clears the bandwidth. If you issue this command, be sure to issue the dsu mode and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu mode and no scramble commands; otherwise, the interface may drop packets unexpectedly. dsu bandwidth bandwidthValue no dsu bandwidth bandwidth sets a fractional bandwidth bandwidthValue value of the fractional bandwidth in the range 2244210 Kbps. The system offers a set of speeds in increments that depend on the DSU mode you specify. The actual speed of the fractional T3 lines will be the value closest to the fractional bandwidth you specify.
Syntax:
Mode(s):
dsu mode
Description: Sets the DSU mode for the lines. The no version clears the dsu mode. If you issue this command, be sure to issue the dsu bandwidth and scramble commands. Similarly, if you issue the no version, be sure to issue the no dsu bandwidth and no scramble commands; otherwise, the interface may drop packets unexpectedly. dsu mode 0 | 2 no dsu mode Mode(s): 0 Digital Link mode 2 Larscom mode
Syntax:
132
duplex
duplex
Description: Specifies the duplex mode for an Ethernet interface. The no version specifies the default value, automatically negotiate. This command works in conjunction with the speed command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module. duplex duplexMode no duplex duplexMode one of the following the duplex options
Syntax:
automatically negotiate specifies that the system negotiates duplex

mode with the remote device
full specifies that the system uses full duplex on an FE or GE interface half specifies that the system uses half duplex on an FE interface; this
value is not valid for GE interfaces Mode(s): Interface Configuration
e3-scramble ERX Edge Routers
133
e3-scramble
Description: Enables scrambling of the ATM cell payload on an E3 interface. E3 scrambling assists clock recovery on the receiving end of the interface.The no version disables scrambling. [ no ] e3-scramble Controller Configuration
Syntax: Mode(s):
enable
Description: Syntax: Enters Privileged Exec mode at the specified privilege level. There is no no version. enable [ level ] level one of the following privilege levels; the default is 10
commands

commands at level 0
5 allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0


Mode(s): User Exec
134
enable password
enable password
Description: Syntax: Sets a password to control access to certain types of commands. The no version removes the password requirement. enable password [ level securityLevel ] [ passwordType ] passwordText no enable password [ level securityLevel ] securityLevel the security level for which you want to set the password; the default is 5
commands

commands at level 0
5 allows the user to execute Privileged Exec show commands plus

the commands at levels 1 and 0; this is the default level


passwordType:
0 specifies that an unencrypted password follows; this is the default 7 specifies that an encrypted password follows
passwordText password, either encrypted or unencrypted, depending on the password type
Note: On your system, all passwords are stored as encrypted passwords. Mode(s): Global Configuration
enable proxy authenticate

Description: Syntax: Mode(s): Configures proxy authenticate for a remote host. The no version removes proxy authenticate configuration from the remote host. [ no ] enable proxy authenticate L2TP Destination Profile Host Configuration
enable secret ERX Edge Routers
135
enable secret
Description: Syntax: Sets a secret to control access to certain types of commands. The no version removes the secret requirement. enable secret [ level securityLevel ] [ secretType ] secretText no enable secret [ securityLevel ] securityLevel the security level for which you want to set the secret; the default is 5
commands

commands at level 0
5 allows the user to execute Privileged Exec show commands plus

the commands at levels 1 and 0; this is the default level


secretType:
0 specifies that an unencrypted secret follows; this is the default 7 specifies that an encrypted secret follows
secretText secret, either encrypted or unencrypted, depending on the secret type
Note: On your system, all secrets are stored as encrypted secrets. Mode(s): Global Configuration
encapsulation bridge1483
Description: Configures bridged Ethernet as the encapsulation method on an interface. The no version removes bridged Ethernet as the encapsulation method on the interface. [ no ] encapsulation bridge1483 Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
136
encapsulation hdlc
encapsulation hdlc
Description: Syntax: Mode(s): Enables Cisco HDLC encapsulation. The no version disables Cisco HDLC on an interface. [ no ] encapsulation hdlc Interface Configuration, Subinterface Configuration
encapsulation ietf
Description: Enables Frame Relay or Multilink Frame Relay encapsulation. The no version removes Frame Relay or Multilink Frame Relay configuration from an interface. encapsulation { frame-relay | mlframe-relay } ietf no encapsulation { frame-relay | mlframe-relay } Mode(s): Interface Configuration
Syntax:
encapsulation mlppp
Description: Configures MLPPP as the encapsulation method on an individual interface. Creates an MLPPP link interface, also known as an MLPPP bundle member. The no version disables MLPPP on an interface. [ no ] encapsulation mlppp Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
encapsulation ppp
Description: Syntax: Mode(s): Configures PPP as the encapsulation method for the interface. The no version disables PPP on an interface. [ no ] encapsulation ppp Interface Configuration, Subinterface Configuration
encapsulation pppoe
Description: Syntax: Configures PPPoE as the encapsulation method for the interface. The no version disables PPPoE on an interface. [ no ] encapsulation pppoe Mode(s): encapsulation configure pppoe encapsulation
encapsulation smds-trunk ERX Edge Routers
137
encapsulation smds-trunk
Description: Configures SMDS trunk as the encapsulation method for the interface. SMDS trunk encapsulation allows SMDS traffic to be sent over a GRE tunnel or a HSSI interface. The no version disables SMDS trunk encapsulation on an interface. [ no ] encapsulation smds-trunk Interface Configuration
Syntax: Mode(s):
encapsulation vlan
Description: Syntax: Mode(s): Configures VLAN as the encapsulation method for the interface. The no version disables VLAN on an interface. [ no ] encapsulation vlan Interface Configuration, Subinterface Configuration
encryption
Description: Syntax: Sets the encryption algorithm to use in the IKE policy. The no version restores the default, 3DES. encryption des | 3des no encryption Mode(s): des specifies 56-bit DES-CBC as the encryption algorithm 3des specifies 168-bit 3DES-CBC as the encryption algorithm
end
Description: Syntax: Mode(s): Exits Global Configuration mode or any of the Configuration submodes and returns to the User Exec mode. There is no no version. end Global Configuration
138
erase secrets
erase secrets
Description: Removes all CLI passwords or secrets. Execute before pressing the NMI button on the SRP module. There is no no version. Note: If you enter the service unattended password-recovery command, the behavior of the erase secrets command changes. The erase secrets command will not take any parameters and will not be available through a vty session until you enter no service unattended password-recovery. Syntax: erase secrets seconds Mode(s): seconds number of seconds in the range 160 to allow for the operation
User Exec
ethernet description
Description: Syntax: Adds a text description to a non-SRP Fast Ethernet or Gigabit Ethernet interface. The no version removes the description from the interface. ethernet description name no ethernet description Mode(s): name string of up to 15 characters
exceeded-action
Description: Sets the action for packets not conforming to the committed rate and committed burst size, and not conforming to the peak rate and peak burst size. The no version restores the default value, drop. [ no ] exceeded-action { drop | transmit | mark markVal } Mode(s): drop drop the packet transmit transmit the packet markVal mark value for the packet in the range 0255
Syntax:
exceeded-fraction ERX Edge Routers
139
exceeded-fraction
Description: Sets the percentage of the total queue length that can be occupied before dropping exceeded packets. The no version returns the exceeded fraction to its default setting. exceeded-fraction exceededFraction no exceeded-fraction Mode(s): exceededFraction percentage range 0100; default is 25
Syntax:
exceeded-length
Description: Syntax: Sets minimum and maximum constraints for the queues exceeded lengths. The no version removes constraints on the queues exceeded length. exceeded-length minimumExceededLength [ maximumExceededLength ] no exceeded-length Mode(s): minimumExceededLength range 01073741824 maximumExceededLength range 01073741824
exception dump
Description: Syntax: Specifies the location from and to which the system should transfer a core dump file. The no version disables the command. exception dump { except-srp | srp-only } { local | ipAddress [ directoryName ] } no exception dump Mode(s): except-srp generates core dump for all non-SRP modules srp-only generates core dump for only the SRP modules local nonvolatile storage memory ipAddress IP address of the server to which the system will transfer the core dump file directoryName name of the directory on the server to which the system will transfer the core dump file
140
exception gateway
exception gateway
Description: Syntax: Specifies the gateway through which the system sends the core dump file to the remote FTP server. There is no no version. exception gateway ipAddress Mode(s): ipAddress IP address of the gateway
exception protocol ftp

Description: Syntax: Specifies the username and password for FTP access to a host where you transferred a core dump file. The no version restores the defaults. exception protocol ftp [ [ algorithmType ] userName [ [ algorithmType ] password ] ] no exception protocol algorithmType type of user name or password
0 unencrypted password, the default. 8 encrypted password

Mode(s): userName username required to access the FTP server; the default username is anonymous password password required to access the FTP server; the default is no password
exception source
Description: Specifies the IP address and mask of the system interface over which you want to send the core dump file to the remote FTP server. There is no no version. exception source ipAddress ipAddressMask Mode(s): ipAddress IP address of the interface ipAddressMask optionally add the IP address mask of the interface
Syntax:
excess-burst ERX Edge Routers
141
excess-burst
Description: Syntax: Sets amount of bandwidth allocated to accommodate a packet in progress when the rate is in excess of the burst. [ no ] excess-burst [ size ] Mode(s): size the amount of bandwidth allocated; in the range 04294967295
exclude-subsystem
Description: Excludes subsystem files from being copied when you copy a software release to the system. The no version removes the exclusion for a specified subsystem file or all subsystem files. exclude-subsystem subsystemName no exclude-subsystem [ subsystemName ] Mode(s): subsystemName name of the subsystem file to be excluded
Syntax:
exec-banner
Description: Controls display of an exec banner (configured with the banner command) on a particular line after user authentication (if any) and before the first prompt of a CLI session. The no version disables the banner. [ no ] exec-banner Line Configuration
Syntax: Mode(s):
exec-timeout
Description: Syntax: Sets the time interval that the console or vty line waits for expected user input. The no version restores the default value, which is no time limit. exec-timeout minutes [ seconds ] no exec-timeout Mode(s): minutes number of minutes for the time limit seconds number of seconds in addition to the minutes for the time limit
Line Configuration
142
exit
exit
Description: Syntax: Mode(s): Exits the current command mode. There is no no version. exit All modes
exit-address-family
Description: Syntax: Mode(s): Exits from Address Family Configuration mode and returns to Router Configuration mode. There is no no version. exit-address-family Address Family Configuration
exit-remote-neighbor
Description: Syntax: Mode(s): Exits from Remote Neighbor Configuration mode and returns to Router Configuration mode. There is no no version. exit-remote-neighbor Remote Neighbor Configuration
export map
Description: Syntax: Associates a route map with a VRF to filter routes exported by the VRF. The no version disables the application of the route map to exported routes. [ no ] export map routeMap Mode(s): routeMap name of a route map
VRF Configuration
fabric-strict-priority
Description: Syntax: Mode(s): Specifies strict priority scheduling for queues in the traffic class in the fabric. The no version deletes the strict priority setting. [ no ] fabric-strict-priority Traffic Class Configuration
fabric-weight ERX Edge Routers
143
fabric-weight
Description: Syntax: Specifies the relative weight for queues in the traffic class in the fabric. The no version sets the fabric weight to the default value. fabric-weight weight no fabric-weight Mode(s): weight range 163; default is 8
Traffic Class Configuration
fdl
Description: Syntax: Specifies the facility data link standard used by a CT1 interface. The no version restores the default, none. fdl { ansi | att | all | none } no fdl [ ansi | att | all ] Mode(s): ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings
fdl carrier
Description: Specifies that an CT1 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] fdl carrier Controller Configuration
Syntax: Mode(s):
144
fdl string
fdl string
Description: Defines an FDL message on a T1 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value. pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value. portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value. generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value.
Syntax:
fdl transmit
Description: Configures the system to send the specified type of FDL message on the T1 interface. The no version stops the system from sending the specified type of FDL message or all FDL messages. [ no ] fdl transmit { path-id | idle-sIgnal | test-signal } no fdl transmit Mode(s): path-id transmits a path identification message every second idle-sIgnal transmits an idle signal every 10 seconds test-signal transmits a test signal every 10 seconds
Syntax:
filter ERX Edge Routers
145
filter
Description: Defines a policy rule that drops all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes the rule from the policy list. [ no ] [ suspend ] filter [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend the policy rule claclName classifier control list used to classify packets for this filter policy precValue precedence of this rule in relation to other rules within this set
Syntax:
flash-disk duplicate
Description: Syntax: Mode(s): Copies the contents of NVS on the primary SRP module to another NVS card. There is no no version. flash-disk duplicate Boot To access the Boot mode from the local console:
flash-disk initialize
Description: Syntax: Performs a low-level format of NVS. There is no no version. flash-disk initialize [ no-format ] Mode(s): no-format erases all files but does not format NVS
Boot To access the Boot mode from the local console:

146
flash-disk scan
flash-disk scan
Description: Scans NVS on the primary SRP module to detect corrupt sectors, deletes files and directories that contain corrupt sectors, fixes errors associated with unused sectors. There is no no version. flash-disk scan [ repair ] Boot To access the Boot mode from the local console:
Syntax: Mode(s):
forward
Description: Defines a rule that forwards all packets conforming to the specified classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a forward rule temporarily. The no version removes the rule from the policy list. [ no ] [ suspend ] forward [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule claclName classifier control list used to classify packets for this filter policy precValue precedence of this rule in relation to other rules within this set
Syntax:
frame-relay class
Description: Syntax: Associates a map class with a subinterface. The no version removes the association between the map class and the subinterface. [ no ] frame-relay class mapName Mode(s): mapName name of the map class; use up to 64 characters
frame-relay description ERX Edge Routers
147
frame-relay description
Description: Syntax: Assigns a text description or alias to a Frame Relay major interface or subinterface. The no version removes the description or alias. frame-relay description name no frame-relay description Mode(s): name text description or alias for the Frame Relay interface or subinterface; up to 64 characters
frame-relay fragment
Description: Configures fragmentation and reassembly for the map class created with the map-class frame-relay command. The no version stops fragmentation and/or reassembly on the subinterface. frame-relay fragment [ [ fragmentSize ] [ fragmentation-only ] | reassembly-only ] no frame-relay fragment Mode(s): fragmentSize maximum payload size of a fragment in bytes; a number in the range 168188; default value is 52 fragmentation-only specifies fragmentation only reassembly-only specifies reassembly only
Syntax:
Map Class Configuration
frame-relay interface-dlci ietf

Description: Assigns a data-link connection identifier to a specified Frame Relay subinterface on the router or access server. The DLCI number identifies a virtual circuit. The no version removes this assignment. frame-relay interface-dlci dlci ietf no frame-relay interface-dlci dlci Mode(s): dlci DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 161007
Syntax:
148
frame-relay intf-type
frame-relay intf-type
Description: Syntax: Configures a Frame Relay interface type. The no version restores the default value, DTE. frame-relay intf-type type no frame-relay intf-type type one of the following interface types:
dce router is connected to user DTE equipment dte router is connected to a Frame Relay network; the default nni router connects two Frame Relay networks
frame-relay keepalive
Description: Enables the LMI mechanism for serial lines using Frame Relay encapsulation. The no version disables this capability. The keepalive command is similar to the frame-relay lmi-t391dte command. frame-relay keepalive [ seconds ] no frame-relay keepalive seconds number in the range 530; default is 10 seconds; defines the keepalive interval; the interval must be set, and the value on the DTE should be less than the value set on the DCE
Syntax:
Mode(s):
frame-relay lmi-n391dte
Description: Syntax: Sets the full-status polling counter (N391) on a DTE interface. The no version restores the default value, assuming an LMI has been configured. frame-relay lmi-n391dte keepExchanges no frame-relay lmi-n391dte keepExchanges number in the range 1 255; default is 6; number of keep exchanges to be done before requesting a full-status message. If you specify a value of 1, you receive full-status messages only.
Mode(s):
frame-relay lmi-n392dce ERX Edge Routers
149
frame-relay lmi-n392dce
Description: Syntax: Sets the error threshold counter (N392) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-n392dce threshold no frame-relay lmi-n392dce Mode(s): threshold positive number in the range 1 10; number of errors that will place the interface in an operationally down state; the default is 2 errors
Description: Syntax: Sets the error threshold counter (N392) on a DTE interface. The no version removes current setting and sets the default. frame-relay lmi-n392dte threshold no frame-relay lmi-n392dte Mode(s): threshold positive number in the range 110; number of errors that will place the interface in an operationally down state; the default is 3 errors
frame-relay lmi-n393dce
Description: Syntax: Sets the monitored events count (N393) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-n393dce events no frame-relay lmi-n393dce events number in the range 110 events; specifies the diagnostic window used to verify link integrity; the default is 2 events (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state.)
Mode(s):
150
Description: Syntax: Sets the monitored event count (N393) on a DTE interface. The no version removes current setting and sets the default. frame-relay lmi-n393dte events no frame-relay lmi-n393dte events number in the range 110 events; the default is 4 events; specifies the diagnostic window used to verify link integrity (The detection of N392 errors within the window of N393 samples places the interface in an operationally down state)
Mode(s):
frame-relay lmi-t391dte
Description: Syntax: Sets the link integrity verification polling timer (T391) on a DTE interface. The no version removes the current setting and sets the default. frame-relay lmi-t391dte seconds no frame-relay lmi-t391dte seconds number in the range 530 seconds; specifies the interval in seconds between status inquiries issued by the DTE; the default is 10 seconds
Mode(s):
frame-relay lmi-t392dce
Description: Syntax: Sets the polling verification timer (T392) on a DCE interface. The no version removes current setting and sets the default. frame-relay lmi-t392dce seconds no frame-relay lmi-t392dce seconds number in the range 530 seconds; specifies the expected interval in seconds between status inquiries issued by the DTE equipment; the default is 15 seconds
Mode(s):
frame-relay lmi-type ERX Edge Routers
151
frame-relay lmi-type
Description: Syntax: Selects the LMI type. The no version restores the default value. frame-relay lmi-type type no frame-relay lmi-type type one of the following types:
ansi ANSI T1.617 Annex D cisco original Group of Four specification developed by DEC, Northern
Telecom, Stratacom, and Cisco
q933a ITU-T Q.933 Annex A none no management interface is used

152
framing
framing
Description: Specifies the framing mode used by a CE1, CT1, E3, or T3 interfaces. Available modes vary by the type of interface. The no version restores the default for that interface. framing framingType no framing framingType one of the following framing types: CE1 module
Syntax:
crc4 default; CRC4 frame no-crc4 disables CRC4 framing

CT1 module
esf default; extended superframe; sets the HDLC idle code to 0x7E sf superframe; sets the HDLC idle code to 0xFF
E3-FRAME module
g751 default; G.751 compliant frame g832 G.832 compliant frame

E3-ATM module
g751adm G.751 ATM direct mapping g751plcp default; G.751 PLCP mapping g832adm G.832 ATM direct mapping
T3 module
c-bit default; specifies c-bit parity framing m23 specifies M23 multiplexer framing
frequency
Description: Syntax: Sets the time interval between RTR operations. The no version restores the default value. frequency frequencyValue no frequency Mode(s): frequencyValue number of seconds between RTR operations; for both types (echo and pathEcho), the default is 60 seconds
RTR Configuration
ftp-server enable ERX Edge Routers
153
ftp-server enable
Description: Enables the FTP server and monitors the FTP port for attempts to connect to the FTP server. The no version terminates the current FTP sessions and disables the FTP server. [ no ] ftp-server enable Global Configuration
Syntax: Mode(s):
group
Description: From QoS Profile Configuration mode, specifies that a group scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile. From ISAKMP Policy Configuration mode, assigns a Diffie-Hellman group to the IKE policy. The no version restores the default, 1024-bit Diffie-Hellman group. To specify a group scheduler node for QoS: [ no ] interfaceType group groupName scheduler-profile schedulerProfileName interfaceType one of the following interface types for which groups should be configured: atm, ethernet, serial, server-port groupName name of the traffic class group schedulerProfileName name of the scheduler profile
Syntax:
To Specify a Diffie-Hellman group: group { 1 | 2 | 5 } no group Mode(s): 1 specifies the 768-bit group 2 specifies the 1024-bit group 5 specifies the 1536-bit group
QoS Profile Configuration, ISAKMP Policy Configuration
154
halt
halt
Description: Stops operation on both SRP modules or on the specified SRP module. There is no no version.
Caution: To prevent corruption of NVS, issue this command before you remove or power down an SRP module. Syntax: The syntax of the command depends on whether you enter it in Boot mode or Privileged Exec mode. Boot Mode: halt Privileged Exec Mode: halt [ force | primary [ force ] | standby [ force ] ] force prompts the user to confirm that the system should stop operation if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS. primary stop operation on primary SRP module only standby stop operation on standby SRP module only
Mode(s):
Boot, Privileged Exec To access the Boot mode from the local console:
hash
Description: Syntax: Sets the hash algorithm in an IKE policy. The no version restores the default, SHA-1. hash sha | md5 no hash Mode(s): sha specifies SHA-1 (HMAC variant) as the hash algorithm md5 specifies MD5 (HMAC variant) as the hash algorithm
hdlc down-when-looped ERX Edge Routers
155
hdlc down-when-looped
Description: Syntax: Mode(s): Enables loopback detection on a Cisco HDLC interface. Loopback detection is disabled by default. The no version disables loopback detection. [ no ] hdlc down-when-looped Interface Configuration, Subinterface Configuration
hdlc keepalive
Description: Syntax: Specifies a keepalive value. The keepalive mechanism tracks the health of the connection. The no version turns off the keepalive feature. hdlc keepalive [ seconds ] no hdlc keepalive Mode(s): seconds keepalive timeout period in the range 06553 seconds. The default is 10. A value of zero (0) turns off the keepalive feature.
hdlc shutdown
Description: Syntax: Mode(s): Stops or restarts a Cisco HDLC session. The no version restarts a Cisco HDLC session. [ no ] hdlc shutdown Interface Configuration, Subinterface Configuration
hello hold-time
Description: Configures the MPLS hold time, the period that a sending LSR maintains a record of hello messages from the receiving LSR without receipt of another hello from that LSR. The no version restores the default value of 0. hello hold-time holdTime no hello hold-time holdTime a number in the range 065535; a value of 0 indicates 15 seconds for link hellos and 45 seconds for targeted hellos; a value of 65535 indicates an infinite hold time
Syntax:
Mode(s):
LDP Profile Configuration
156
hello-interval
hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the OSPF remote-neighbor interface. The no version restores the default value. hello-interval helloInterval no hello-interval Mode(s): helloInterval a number in the range 165535 seconds; default value is 10 seconds
help
Description: Syntax: Mode(s): Displays basic information on the Help system. There is no no version. help All modes
hops-of-statistics-kept
Description: Syntax: Sets the number of hops to keep statistics for an entry. The no version restores the default value. hops-of-statistics-kept [ hopsKeptValue ] no hops-of-statistics-kept hopsKeptValue number of hops for which statistics are collected for a particular pathEcho type; the default is 16 for a pathEcho entry and 1 for an echo entry; if you omit this option, all hops found are recorded
Note: The only types your system supports are the pathEcho and the echo. Mode(s): RTR Configuration
host ERX Edge Routers
157
host
Description: Syntax: Adds or modifies an entry to the host table. The no version removes the specified host. host hostname ipAddress [ ftp [ [ algorithmType ] userName [ [ algorithmType ] password ] ] ] no host hostname hostname hostname to add or modify; up to 20 characters ipAddress IP address of the host ftp specifies that the host is an FTP server algorithmType type of username or password
0 unencrypted password, the default. 8 encrypted password

Mode(s): userName username used to access an FTP server (but not an NFS server); defaults to anonymous password password used to access an FTP server (but not an NFS server); defaults to null
hostname
Description: Sets the name for the system in Global Configuration mode; this hostname subsequently appears in the system CLI prompt. The no version removes the hostname from the system. Note: In Domain Map Tunnel Configuration mode, this command has been deprecated in favor of the client-name command. See the client-name command. Syntax: hostname hostname no hostname Mode(s): hostname string of up to 64 characters (no spaces)
Global Configuration, Domain Map Tunnel Configuration (deprecated)
158
hssi force-dte-acknowledge
hssi force-dte-acknowledge
Description: Provides compatibility with DCE devices that wait for the DTE side to set the acknowledge bit first. Issue this command if the HSSI interface is configured as DTE, both sides of the connection are correctly configured, and the link does not come up. The no version prevents the HSSI interface from sending acknowledgment signals when in DTE mode. [ no ] hssi force-dte-acknowledge Interface Configuration
Syntax: Mode(s):
hssi internal-clock
Description: Syntax: Mode(s): Enable the internal clock for DCE mode on a HSSI interface. The no version disables the internal clock for DCE mode on a HSSI interface. [ no ] hssi internal-clock Interface Configuration
identification ERX Edge Routers
159
identification
Description: Specifies the assignment ID of an L2TP or L2F tunnel in Domain Map Tunnel Configuration mode. The no version removes the assignment ID from the tunnel. identification serverId no identification Mode(s): serverId L2TP or L2F tunnel assignment ID up to 32 characters
Syntax:
igmp disable
Description: Syntax: Mode(s): Disables IGMP on a virtual router.The no version reenables IGMP on a virtual router. [ no ] igmp disable Router Configuration
igmp promiscuous
Description: Allows all IGMP interfaces on the router to accept IGMP reports from hosts on any subnet. The no version allows IGMP interfaces on the router to accept IGMP reports only from hosts on their associated subnets. [ no ] igmp promiscuous Router Configuration
Syntax: Mode(s):
ignore dcd
Description: Prevents the system from using the DTD signal when determining whether the interface is working, if an interface is configured as a V.35 DTE. The no version allows the system to use the DTD signal when determining whether the interface is working. [ no ] ignore dcd Interface Configuration
Syntax: Mode(s):
160
ignore link-state-signals
ignore link-state-signals
Description: Prevents the system from using any link state signal when determining whether a V.35/X.21 interface is working. The no version allows the system to use the link state signals when determining whether the interface is working. [ no ] ignore link-state-signals Interface Configuration
Syntax: Mode(s):
ignore-lsp-errors
Description: Allows the router to ignore IS-IS link state packets that are received with internal checksum errors rather than purging the link state packets. The no version disables this function. [ no ] ignore-lsp-errors Router Configuration
Syntax: Mode(s):
import map
Description: Syntax: Associates a route map with a VRF to filter routes received by the VRF. The no version disables the application of the route map to imported routes. [ no ] import map routeMap Mode(s): routeMap name of a route map
VRF Configuration
index
Description: Syntax: Sets a next hop at a particular index in the MPLS explicit path. The no version removes the next hop from the index. index indexNumber next-address ipAddress [ mask ipMask ] [ loose ] no index indexNumber index number of a node in an ordered set of abstract nodes, a value ranging from 1255 ipAddress address of the next hop ipMask [ not currently used] mask for the next adjacent address loose node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Mode(s):
interface ERX Edge Routers
161
interface
Description: Syntax: Configures an interface. The no version removes the subinterface or the logical interface. [ no ] interface interfaceType interfaceSpecifier [ extension ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. extension option that depend on the type of interface
Note: See the following entries for the syntax of each type of interface. Mode(s): Global Configuration
interface atm
Description: Syntax: Configures an ATM interface or subinterface type. The no version removes the interface or subinterface. [ no ] interface atm interfaceSpecifier [ multipoint | point-to-point ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. multipoint use to specify an NBMA subinterface point-to-point default; use to specify an ATM interface or subinterface
Global Configuration, Interface Configuration
interface-event-disable
Description: Specifies that RIP does not purge the routing table on a RIP interface that has been brought down. The no version restores the default condition, wherein RIP does purge the routing table on an interface after a down event. [ no ] interface-event-disable Router Configuration
Syntax: Mode(s):
162
interface fastEthernet
interface fastEthernet
Description: Specifies a Fast Ethernet interface or subinterface or creates a subinterface over a Fast Ethernet interface. The no version removes the interface or subinterface. [ no ] interface fastEthernet interfaceSpecifier interfaceSpecifier location of the interface in the format slot/port [ .subinterface1 [ .subinterface2 ] ]
Syntax:
slot number of the chassis slot in the range 013 (ERX-1400 series)
and 06 (ERX-700 series)
port number of the port; 0 or 1 for a dual-port Fast Ethernet module,

07 for an eight-port Fast Ethernet module, 0 for the Fast Ethernet port on the SRP module . For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide. The meaning of the subinterface variables depends on the configuration context. You can configure Fast Ethernet interfaces with or without VLANS. If you do not use VLANS, you can use either of two different configuration methods. VLANs
subinterface1 number of the VLAN subinterface in the range

14294967293; no more than 4096 VLAN subinterfaces per Fast Ethernet physical port
subinterface2 when using PPPoE, the number of the PPPoE

subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port No VLANs New Configuration Method

subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port
subinterface2 not used

No VLANs Alternative Configuration Method
subinterface1 number of the Fast Ethernet subinterface in the range

14294967293; no more than 2 subinterfaces per Fast Ethernet physical port

subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Fast Ethernet physical port Note: If you are configuring Fast Ethernet interfaces without VLANs and you are running software release 3.0.0 or higher, we highly recommend that you use the current configuration method. If you are configuring Fast Ethernet
interface gigabitEthernet ERX Edge Routers
163
interfaces without VLANs and you are running a software release earlier than 3.0.0 or if you are using scripts or macros created with such a release, you must use the alternative configuration method. Mode(s): Global Configuration
interface gigabitEthernet
Description: Specifies or creates a Gigabit Ethernet interface or a subinterface over a Gigabit Ethernet interface. The no version removes the interface or subinterface. [ no ] interface gigabitEthernet interfaceSpecifier interfaceSpecifier the location of the interface in the format slot/port [ .subinterface1 [ .subinterface2 ] ] For a list of interface types and their corresponding specifiers, see Interface Types and Specifiers in About This Guide. The meaning of the subinterface variables depends on the configuration context. You can configure Gigabit Ethernet interfaces with or without VLANS. VLANs
Syntax:
subinterface1 the number of the VLAN subinterface in the range

14294967293; no more than 4096 VLAN subinterfaces per Gigabit Ethernet physical port

subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Gigabit Ethernet physical port No VLANs

subinterface in the range 14294967293; no more than 4094 PPPoE subinterfaces per Gigabit Ethernet physical port
subinterface2 not used

Note: You can configure only the primary port, 0, on a GE I/O module. The system automatically uses the redundant port if the primary fails. Mode(s): Global Configuration
164
interface hssi
interface hssi
Description: Syntax: Selects a HSSI interface. The no version clears the configuration on the HSSI interface. [ no ] interface hssi interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
interface ip
Description: Syntax: Defines a shared IP interface. The no version removes the IP interface. [ no ] interface ip interfaceName Mode(s): interfaceName string of up to 15 characters
interface loopback
Description: Syntax: Defines a loopback interface. The no version removes the loopback interface. [ no ] interface loopback interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
interface mlframe-relay
Description: Syntax: Defines an MFR bundle or a subinterface in a bundle. The no version removes the bundle or subinterface. [ no ] interface mlframe-relay interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
interface mlppp ERX Edge Routers
165
interface mlppp
Description: Syntax: Creates an MLPPP network interface, also known as the MLPPP bundle. The no version deletes the MLPPP bundle. [ no ] interface mlppp interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
interface null
Description: Syntax: Mode(s): Defines a null interface, which does not forward traffic. The no version removes the null interface. [ no ] interface null 0 Global Configuration
interface pos
Description: Syntax: Configures a Packet over SONET interface. The no version removes the interface. [ no ] interface pos interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
interface serial
Description: Syntax: Specifies the location of the serial interface on CE1/CT1, CT3, E3/T3 FRAME, cOCx/STMx, and X.21/V.35 modules. The no version disables the interface. [ no ] interface serial interfaceSpecifier Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
166
interface tunnel
interface tunnel
Description: Creates a tunnel interface for use by DVMRP, GRE, MPLS, or IPSec. You can specify that the tunnel be established in the routing space of a virtual router other than the current VR. If you specify another VR, all tunnel commands apply to the tunnel in that VR. If you do not specify another VR, tunnel commands apply to the current VR. The no version removes the tunnel interface. [ no ] interface tunnel interfaceSpecifier [ transport-virtual-router vrName ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. vrName name of virtual router in which the tunnel will be established
Syntax:
invert data
Description: Enables data stream inversion. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables data stream inversion. [ no ] invert data Interface Configuration
Syntax: Mode(s):
invert txclock
Description: Enables inversion of the transmit clock signal, to compensate for differences between the clock and data rate when data is travelling at fast speeds over long cables. Data stream inversion must be turned on by network personnel at the other end of the line. The no version disables inversion of the transmit clock signal. [ no ] invert txclock Interface Configuration
Syntax: Mode(s):
ip access-routes
Description: Enables the ability to create host access routes on a PPP interface, which is useful for the B-RAS application. It also enables an access route in a profile. The no version disables the feature. [ no ] ip access-routes Interface Configuration, Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
ip address ERX Edge Routers
167
ip address
Description: Sets a primary or secondary IP address for an interface or subinterface. The no version removes an IP address or disables IP processing. You must specify the layer 2 encapsulation before you can set the IP address. ip address ipAddress ipMask [ secondary ] no ip address [ ipAddress ipMask [ secondary ] ] Mode(s): ipAddress IP address in 32-bit dotted decimal format (for example, 192.56.32.2) ipMask mask for associated IP subnet secondary specifies that the configured address is a secondary IP address; if omitted, the configured address is the primary IP address
Syntax:
Interface Configuration, Subinterface Configuration, Profile Configuration
ip address-pool
Description: Syntax: Specifies to the system where to get an IP address for the remote user. The no version uses the default value, local. ip address pool { dhcp | local | none } no ip address pool Mode(s): dhcp enable the use of a DHCP server for address allocations local enable the use of local address pool for address allocations none do not enable an IP address pool
ip alwaysup
Description: Forces the interface to appear as if it is up, regardless of the state of the lower layers. Use this command to reduce route topology changes when the network attached to this link is single-homed. The no version makes the interface appear in its current state. [ no ] ip alwaysup Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
168
ip as-path access-list
ip as-path access-list
Description: Defines a BGP-related access list. You can specify an access list filter on both inbound and outbound BGP routes. Each filter is an access list based on regular expressions. If the regular expression matches the representation of the AS path of the route as an ASCII string, then the permit or deny condition applies. The AS path does not contain the local AS number. The no version removes a single access list entry if permit or deny and a pathExpression are specified. Otherwise, the entire access list is removed. ip as-path access-list accessListName { permit | deny } pathExpression no ip as-path access-list accessListName accessListName name of the access list; a string of up to 32 characters permit permits access for matching conditions deny denies access to matching conditions pathExpression the regular expression describing the AS paths to be matched Use a sequence of one or more elements, each of which is either an AS number or one of the following punctuation characters: ^ $ { } ( ) start of the path end of the path start of an AS_SET end of an AS_SET start of an AS_CONFED_SET or AS_CONFED_SEQ end of an AS_CONFED_SET or AS_CONFED_SEQ
Syntax:
Use the following regular expression metacharacters to match individual elements: . * + [] ^ _ matches any single element matches zero or more occurrences of any element matches one or more occurrences of any element matches any elements enclosed between brackets ([ ]) hyphen; used within brackets to specify a range of AS numbers matches any AS number except the ones specified when used as a first item within brackets underscore; used in non-ERX implementations on either side of a path to specify a literal and disallow substring matching. Allowed but not required in our CLI.
Mode(s):
ip atm-vc ERX Edge Routers
169
ip atm-vc
Description: Syntax: Associates a protocol and address to a specific virtual circuit. ip ipAddress atm-vc vcd broadcast no ip ipAddress atm-vc vcd Mode(s): ipAddress ip address to be associated with the virtual circuit vcd number in the range 14294967295; virtual circuit descriptor; an identifier for the VC in other commands broadcast specifies that the circuit should participate in broadcast operations
Map List Configuration
ip bgp-community new-format
Description: Specifies that communities must be displayed in AA:NN format, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system. The no version restores the default display. [ no ] ip bgp-community new-format Global Configuration
Syntax: Mode(s):
ip bgp-confed-as-set new-format
Description: Specifies that AS-confed-sets must be displayed within square brackets, [ ], with the ASs delimited by commas. The no version restores the default, displaying AS-confed-sets within parentheses, ( ), with the ASs delimited by spaces. [ no ] ip bgp-confed-as-set new-format Global Configuration
Syntax: Mode(s):
ip broadcast-address
Description: Syntax: Defines a broadcast address for an interface. The no version restores the default IP broadcast address. [ no ] ip broadcast-address [ ipAddress ] Mode(s): ipAddress broadcast IP address
170
ip community-list
ip community-list
Description: Syntax: Creates a community list for BGP and controls access to it. The no version removes the community list, including all list entries. ip community-list communityLisName { permit | deny } { communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet } [ communityNumber | asCommunityNumber | no-export | no-advertise | local-as | internet ]* ip community-list communityLisName { permit | deny } communityExpression no ip community-list communityLisName communityLisName name of a community list; a string of up to 32 characters; identifies one or more permit or deny groups of communities; used for standard community lists permit permits access for a matching condition deny denies access for a matching condition communityNumber community number in the range 14294967295 asCommunityNumber community number in the format AA:NN, where AA is a number that identifies the autonomous system and NN is a number that identifies the community within the autonomous system. no-export specifies that BGP does not advertise this route outside a BGP confederation boundary no-advertise specifies that BGP does not advertise this route to any peer (internal or external) local-as specifies that BGP does not advertise this route to external peers; sometimes known as the no-export-subconfed community internet specifies the Internet community * indicates that one or more parameters can be repeated multiple times in a list in the command line communityExpression a regular expression that matches the community
Mode(s):
ip debounce-time ERX Edge Routers
171
ip debounce-time
Description: Defines the minimum time an IP interface must be in a given statefor example, up or downbefore being reported. The no version removes the debounce time. ip debounce-time [ vrf vrfName ] period no ip debounce-time [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters period interval in the range 060000 seconds
Syntax:
ip demux-type da-prefix
Description: Specifies that a subscriber interface will demultiplex traffic using destination addresses. The no version restores the default situation, in which the subscriber interface demultiplexes traffic using source addresses. [ no ] ip demux-type da-prefix Interface Configuration
Syntax: Mode(s):
ip destination-prefix
Description: Configures a subscriber interface to demultiplex traffic with the specified destination address. The no version removes the association between the subscriber interface and the specified destination address. [ no ] ip destination-prefix ipAddress ipAddressMask Mode(s): ipAddress destination IP address that the system uses to identify packets for this subscriber interface ipAddressMask network mask for associated IP subnet
Syntax:
ip dhcp-local cable-modem
Description: Specifies the IP address of the external DHCP server to which the DHCP local server will relay DHCP messages from cable modems. The no version removes the cable modem configuration. [no] ip dhcp-local cable-modem dhcp-server ipAddress Mode(s): ipAddress IP address of the cable modem DHCP server
Syntax:
172
ip dhcp-local excluded-address
ip dhcp-local excluded-address
Description: Specifies IP addresses that the DHCP local server should not supply from the default address pool because those addresses are already used by devices on the subnet. The no version allows the DHCP local server to supply the specified IP address. [ no ] ip dhcp-local excluded-address ipAddressStart ipAddressStop Mode(s): ipAddressStart single IP address or start of the range of IP addresses that the DHCP local server should not supply ipAddressStop end of the range of IP addresses that the DHCP local server should not supply
Syntax:
ip dhcp-local limit
Description: Specifies the maximum number of IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet. The no version restores the default situation, in which there is no limit on the number of token IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnet. ip dhcp-local limit { atm | ethernet | vlan | } leaseNumber no ip dhcp-local limit [ atm | ethernet | vlan ] Mode(s): atm specifies the limit for VPIs and VCIs ethernet specifies the limit for Ethernet subnets vlan specifies the limit for VLANs leaseNumber maximum number of leases in the range 032767
Syntax:
ip dhcp-local pool
Description: Syntax: Accesses Pool Configuration mode. The no version prevents the DHCP local server from supplying IP addresses from the specified pool. [ no ] ip dhcp-local pool { poolName | default } Mode(s): poolName name of the address pool default specifies the default address pool
ip dhcp-server ERX Edge Routers
173
ip dhcp-server
Description: Adds the IP address of a single DHCP server to the list of DHCP servers from which the system can request addresses to allocate to remote users. A maximum of five DHCP servers can be specified. The no version removes the specified DHCP server or removes all DHCP servers from the list. ip dhcp-server dhcpServerAddress [ adminStatus ] no ip dhcp-server [ dhcpServerAddress [ adminStatus ] ] Ipaddress IP address of the DHCP server that will allocate addresses for remote users adminStatus one of the following options:
Syntax:
disable disable the DHCP server drain drain the DHCP server
Mode(s): Global Configuration
ip directed-broadcast
Description: Syntax: Mode(s): Enables translation of directed broadcast to physical broadcasts. The no version disables the function. [ no ] ip directed-broadcast Interface Configuration, Subinterface Configuration, Profile Configuration
ip disable-forwarding
Description: Disables forwarding of packets on the SRP Ethernet interface to maintain system performance. The no version enables forwarding of packets on the SRP Ethernet interface. You see an error message if you try to set this command for interfaces other than the SRP Ethernet interface. [ no ] ip disable-forwarding Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
174
ip domain-lookup
ip domain-lookup
Description: Without the transit-virtual-router option, enables the system to query the configured DNS name servers when it needs an IP hostnametoIP address translation. With the transit-virtual-router option, configures a virtual router to use the name servers you configured for another virtual router. The no version without the transit-virtual-router option restores the default situation, in which the system does not query the DNS server. The no version with the transit-virtual-router option stops a virtual router from using the same name servers you configured for another virtual router. [ no ] ip domain-lookup [ transit-virtual-router vrName ] vrName name of the virtual router that has the DNS configuration you want to use for a second virtual router Mode(s): Global Configuration
Syntax:
ip domain-name
Description: Defines a default domain name for the clients that a name resolver serves. The no version deletes the domain name; that is, the domain name will no longer be appended to hostnames in the static host table. [ no ] ip domain-name domainName Mode(s): domainName default domain name for your hosts
Syntax:
ip dvmrp
Description: Syntax: Mode(s): Activates DVMRP on an interface.The no version removes DVMRP from an interface. [ no ] ip dvmrp Interface Configuration
ip dvmrp accept-filter ERX Edge Routers
175
ip dvmrp accept-filter
Description: Syntax: Filters incoming DVMRP reports in accordance with a standard IP access list. The no version disables the filter. [ no ] ip dvmrp accept-filter listName1 [ distance ] neighbor-list listName2 listName1 name of the IP access list. If the name is 0, the interface accepts all destinations. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask. distance distance associated with the DVMRP route when the router determines the RPF interface for the source of a multicast packet. The default is 0; the range is 0 to 255. listName2 name of an access list containing the neighbors from which the system will accept reports. If the name is 0, the interface accepts destinations from all its neighbors.
Mode(s):
ip dvmrp announce-filter
Description: Specifies a list of DVMRP routes that the system will advertise on an interface. The no version restores the default situation, in which the system advertises all known routes on the interface. ip dvmrp announce-filter listName no ip dvmrp announce-filter listName name of the IP access list that specifies the DVMRP routes that the system will advertise on the interface. You can specify a simple or extended access list; with an extended access list you can specify an address and a subnet mask.
Syntax:
Mode(s):
ip dvmrp auto-summary
Description: Syntax: Mode(s): Summarizes routes automatically on an interface. By default, automatic summarization is enabled. The no version disables automatic summarization. [ no ] ip dvmrp auto-summary Interface Configuration
176
ip dvmrp disable
ip dvmrp disable
Description: Syntax: Mode(s): Disables DVMRP on an interface without removing the DVMRP configuration. The no version reenables the DVMRP configuration on a disabled interface. [ no ] ip dvmrp disable Interface Configuration
ip dvmrp metric-offset
Description: Adjusts the number of hops associated with routes passing through an interface. This action indicates that the route is more efficient or less efficient than an alternative route. The no version restores the default values. [ no ] ip dvmrp metric-offset { in | out } [ increment ] in increments the number of hops for a DVMRP route advertised in incoming DVMRP reports. If you do not specify a key word, this option is the default. out increments the number of hops for a DVMRP route advertised in outgoing DVMRP reports increment number of hops associated with this interface. The default is 1 for incoming reports and 0 for outgoing reports.
Syntax:
Mode(s):
ip dvmrp route-hog-notification
Description: Sets the number of DVMRP routes that the system can record before it generates a syslog warning message.The no version restores the default setting, 10,000 routes. [ no ] ip dvmrp route-hog-notification [ limit ] Global Configuration
Syntax: Mode(s):
ip dvmrp route-limit
Description: Limits the number of routes that the system can advertise on each interface. The default value is 7000. The no version removes the limit for the number of routes that the system can advertise on each interface. [ no ] ip dvmrp route-limit [ limit ] Mode(s): limit number of routes that the system can advertise
Syntax:
ip dvmrp summary-address ERX Edge Routers
177
ip dvmrp summary-address
Description: Syntax: Advertises a DVMRP summary address on the interface. The no version stops the advertising of a summary address on an interface. [ no ] ip dvmrp summary-address ipAddress mask [ metric cost ] Mode(s): ipAddress summary address mask subnet mask cost cost associated with this summary address
ip dvmrp unicast-routing
Description: Enables the exchange of DVMRP unicast routes on an interface not owned by DVMRP. The no version disables the exchange of DVMRP unicast routes on an interface not owned by DVMRP. [ no ] ip dvmrp unicast-routing Interface Configuration
Syntax: Mode(s):
ip dynamic-interface-prefix
Description: Syntax: Specifies the prefix for the names of dynamic shared IP interfaces created for overlapping BGP/MPLS VPNs.The no version restores the default prefix, dyn. ip dynamic-interface-prefix [ vrfName ] prefix no ip dynamic-interface-prefix [ vrfName ] Mode(s): vrfName name of the VRF in which the shared interface is created; a string of 132 alphanumeric characters prefix string of 110 alphanumeric characters
178
ip explicit-path
ip explicit-path
Description: Defines an explicit path by name and also enables or disables explicit path routing in a non-ERX implementation. See the mpls explicit-path command for a complete description and syntax.
ip extcommunity-list
Description: Syntax: Defines an extended-community (extcommunity) list to be referenced in a route map. The no version deletes the extcommunity. ip extcommunity-list listName { permit | deny } extendedCommunity [ extendedCommunity ]* no ip extcommunity-list listName listName name of the extended-community list permit permits membership in the extended community for matching conditions deny denies membership in the extended community for matching conditions extendedCommunity extended community specified in the format: {rt | soo } { ASN:nn | ipAddress:nn }
rt specifies a route-target community; consists of one or more routers

that can receive a set of routes advertised by BGP that carry the extended-community attribute
soo specifies a Site-of-Origin community; consists of one or more

routers that injects a set of routes into BGP that carry the extended-community attribute
ASN:nn identifies the extended community by a 16-bit autonomous

system number followed by a 32-bit integer
ipAddress:nn identifies the extended community identified by an IP

address followed by a 32-bit integer Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
ip filter-options all
Description:
Enables filtering of packets with IP options on an interface. IP options filtering is disabled by default. The no version disables filtering of packets with IP options.
[ no ] ip filter-options all Interface Configuration
Syntax: Mode(s):
ip ftp source-address ERX Edge Routers
179
ip ftp source-address
Description: Specifies an operational interface by IP address as the source interface in FTP packets sent via the systems FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made. ip ftp source-address sourceAddress no ip ftp source-address [ sourceAddress ] Mode(s): sourceAddress source IP address
Syntax:
ip ftp source-interface
Description: Identifies an interface by type and location as the source interface in FTP packets sent via the systems FTP client. The no version restores the source address in the FTP packets to that on which the FTP connection is made. ip ftp source-interface interfaceType interfaceSpecifier no ip ftp source-interface [ interfaceType interfaceSpecifier ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
ip-hint
Description: When enabled, the ERX will preallocate an IP address for the remote (B-RAS) user before calling authentication.The address is then passed as a hint in the authentication request to the RADIUS server. The no version disables the feature. ip-hint { enable | disable } no ip-hint Mode(s): Domain Map Configuration
Syntax:
180
ip http access-class
ip http access-class
Description: Allows only subscribers on a standard IP access list to connect to the HTTP local server. The no version removes the association between the access list and the HTTP local server. ip http access-class listName no ip http access-class Mode(s): listName name of the access list
Syntax:
ip http max-connection-time
Description: Syntax: Specifies the maximum time that the HTTP local server maintains an inactive connection. The no version restores the default time, 30 seconds. ip http max-connection-time seconds no ip http max-connection-time Mode(s): seconds time that the HTTP local server maintains a connection; either 0 (forever) or in the range 37200 seconds
ip http not-found-url
Description: Specifies the Web page or message that appears if the subscriber requests a URL that is not available. The no version displays the standard HTTP message 404 not found. ip http not-found-url { url | root-url } no ip http not-found-url Mode(s): url URL of the Web page that appears on the subscribers computer if the DHCP local server is not configured or enabled root-url displays the root Web page
Syntax:
ip http port ERX Edge Routers
181
ip http port
Description: Syntax: Specifies the port on which the HTTP local server receives connection attempts. The no version restores the default port number, 80. ip http port portNumber no ip http port Mode(s): portNumber number of the port on which connection attempts are received, in the range 065535
ip http realm
Description: Specifies the name the Web browser displays to subscribers when the HTTP client requests the user information. The no version restores the default value, the name of the virtual router. ip http realm connectionName no ip http realm Mode(s): connectionName connection name that subscribers see when the HTTP client requests user information
Syntax:
ip http root-refresh
Description: Syntax: Specifies how often the browser updates the default internal starting (root) Web page. The no version restores the default time interval, 0 seconds. ip http root-refresh seconds no ip http root-refresh Mode(s): seconds time interval, in the range 065535 seconds, at which the default internal starting Web page is refreshed
182
ip http root-url
ip http root-url
Description: Specifies a URL external to the system for the starting (root) Web page that appears on the subscribers computer when the subscriber logs in. The no version restores the default internal URL as the starting Web page. ip http root-url url no ip http root-url Mode(s): url external URL of the Web page that appears on the subscribers computer when the connection to the HTTP local server is established
Syntax:
ip http same-host-limit
Description: Specifies the maximum number of connections that can exist between one IP address and the HTTP local server. The no version restores the default number of allowed connections, 3. ip http same-host-limit maxConnections no ip http same-host-limit Mode(s): maxConnections maximum number of connections allowed between one IP address and the HTTP local server, in the range 01000
Syntax:
ip http server
Description: Syntax: Creates or enables the HTTP local server. The no version deletes or disables the HTTP local server. [ no ] ip http [ server ] server enables or disables the HTTP local server. If you do not specify the keyword server, the command creates the HTTP local server and the no version removes the server.
Mode(s):
ip igmp
Description: Syntax: Mode(s): Enables IGMPv2 on an interface. The no version disables IGMPv2 on an interface. [ no ] ip igmp Interface Configuration, Profile Configuration
ip igmp access-group ERX Edge Routers
183
ip igmp access-group
Description: Restricts hosts on this subnet to joining multicast groups on the specified IP access list. The no version removes the association with the specified access list and allows hosts on the subnet to join any multicast group. ip igmp access-group accessListName no ip igmp access-group Mode(s): accessListName name of the access list; a string of up to 32 characters
Syntax:
Interface Configuration, Profile Configuration
ip igmp group limit

Description: Limits the number of IGMP groups that an interface can accept. The no version restores the default situation, in which there is no limit to the number of IGMP groups that the interface accepts. ip igmp group limit groupLimit no ip igmp group limit Mode(s): groupLimit maximum number of IGMP groups that an interface can accept in the range 064,000
Syntax:
ip igmp immediate-leave
Description: Removes an interface immediately when the router receives an leave group membership message from the host associated with this interface. The no version restores the default situation, in which the router issues query messages to multicast groups and removes an interface if the associated host does not return a group membership report within a certain length of time. Caution: Issue this command only on IGMPv2 interfaces to which one IGMP client is connected. Do not issue this command to interfaces to which more than one IGMP client is connected. Syntax: Mode(s): [ no ] ip igmp immediate-leave Interface Configuration, Profile Configuration
184
ip igmp last-member query-interval
ip igmp last-member query-interval

Description: Specifies in tenths of a second how long the system waits after receiving an IGMP leave message before it sends another query. The no version restores the default value, 10 tenths of a second (1 second). ip igmp last-member-query-interval tenthsOfaSecond no ip igmp last-member-query-interval tenthsOfaSecond time interval between receipt of an IGMP leave message and sending out of a query in the range 1254 tenths of a second. Using a lower value allows members to leave groups more quickly.
Syntax:
Mode(s):
ip igmp promiscuous
Description: Enables the specified interface to accept IGMP reports from hosts on any subnet. The no version specifies that an IGMP interface should use the Router Configuration mode setting (see the igmp promiscuous command) to determine from which subnets it can accept IGMP reports. ip igmp promiscuous { on | off } no ip igmp promiscuous Mode(s): on enables the interface to accept IGMP reports from hosts on any subnet off allows the interface to accept IGMP reports only from hosts on subnets associated with this interface
Syntax:
ip igmp-proxy
Description: Syntax: Mode(s): Enables IGMP proxy on an interface. The no version disables IGMP proxy for an interface. [ no ] ip igmp-proxy Interface Configuration
ip igmp-proxy unsolicited-report-interval ERX Edge Routers
185
ip igmp-proxy unsolicited-report-interval
Description: Specifies how often the upstream interface should transmit unsolicited reports. This command has no effect on interfaces other than the upstream value. The no version transmits unsolicited reports using the default value, 400 seconds. Note: Issue this command only on the upstream interface. Otherwise, this command will have no effect. Syntax: ip igmp-proxy unsolicited-report-interval seconds no ip igmp-proxy unsolicited-report-interval Mode(s): seconds time interval at which the interface transmits unsolicited reports
ip igmp-proxy V1-router-present-time
Description: Specifies how long the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface. The no version restores the default value, 10 seconds. ip igmp-proxy V1-router-present-time seconds no ip igmp-proxy V1-router-present-time seconds time for which the system assumes that there is an IGMPv1 querier router on the subnet after the system receives an IGMP V1 query on this interface
Syntax:
Mode(s):
ip igmp querier
Description: Specifies that the interface will act as a querier when you configure IGMPv1 on an interface. The no version specifies that this interface will not issue query packets. Note: This command is invalid for interfaces on which you configured IGMPv2. Syntax: Mode(s): [ no ] ip igmp querier Interface Configuration, Profile Configuration
186
ip igmp querier-timeout
ip igmp querier-timeout
Description: Syntax: Sets the time that the interface waits before declaring itself as the querier. The no version restores the default value, twice the query interval. ip igmp querier-timeout seconds no ip igmp querier-timeout Mode(s): seconds time interval between the last query from the previous router and the first query from this interface
ip igmp query-interval
Description: Syntax: Sets how often the system sends IGMP host-query packets from this interface. The no version restores the default value, 125 seconds. ip igmp query-interval seconds no ip igmp query-interval Mode(s): seconds polling interval in the range 065535 seconds
ip igmp query-max-response-time
Description: Specifies the period in tenths of a second during which the host is expected to respond to an IGMP query. IGMP version 2 includes this value in IGMP query messages sent out on the interface. You cannot set this value on interfaces running IGMP version 1. The no version restores the default value of 10 tenths of a second (1 second). ip igmp query-max-response-time tenthsOfaSecond no ip igmp query-max-response-time Mode(s): tenthsOfaSecond time interval between receipt of an IGMP query and the response; the range is 1254 tenths of a second.
Syntax:
ip igmp robustness ERX Edge Routers
187
ip igmp robustness
Description: Specifies the number of times that the system sends IGMP group-specific queries before declaring a group to no longer have any members on an interface. The no version restores the default value, 3. ip igmp robustness numberOfMessages no ip igmp robustness Mode(s): numberOfMessages number of times that the system sends IGMP group-specific queries in the range 14
Syntax:
ip igmp static-group
Description: Assigns an interface to handle all multicast traffic for a group. The interface sets no timers for this group. The no version removes the group from the interface. [ no ] ip igmp static-group groupAddress Mode(s): groupAddress address of the group
Syntax:
ip igmp version
Description: Syntax: Sets the IGMP version for the interface. The no version restores the default value, IGMPv2. ip igmp version { 2 | 1 } no ip igmp version 2 IGMP version 2 1 IGMP version 1 Mode(s): Interface Configuration, Profile Configuration
ip ignore-df-bit
Description: Specifies that the system ignores the dont-fragment bit if present in the IP header of packets crossing the configured interface; the system then fragments packets even if the bit is present. The no version restores the default behavior, which is to consider the DF bit before fragmenting. [ no ] ip ignore-df-bit Interface Configuration
Syntax: Mode(s):
188
ip interface
ip interface
Description: This command has only a no version. See the no ip interfacecommand for a complete description and syntax.
ip irdp
Description: Syntax: Mode(s): Enables ICMP Router Discovery Protocol processing on an interface. The no version disables IRDP routing. [ no ] ip irdp Interface Configuration, Subinterface Configuration
ip local pool
Description: Specifies the pool name, the starting address, the ending address, group name, the utilization threshold, and the SNMP trap flag. The no version deletes a local pool. [ no ] ip local pool name [ startIpAddress [ endIpAddress ] [ warning highUtilization abatedUtilization ] [ snmpTrap ] ] name text string in the range 116 characters that defines the name of the local address pool startIpAddress starting IP address in the local address pool endIpAddress ending IP address in the local address pool warning specifies one of the following utilization warnings:
Syntax:
highUtilization high utilization value; a number in the range 1100;

default is 85
abatedUtilization abated utilization value; a number in the range

1100; default is 75 Mode(s): snmpTrap enables SNMP pool utilization traps
ip local pool snmpTrap

Description: Syntax: Enables SNMP pool utilization traps. The no version disables SNMP pool utilization traps. [ no ] ip local pool name snmpTrap Mode(s): name text string in the range 116 characters that defines the name of the local address pool
ip local pool warning ERX Edge Routers
189
ip local pool warning

Description: Syntax: Use to identify the warning threshold values. The no version resets the thresholds to their default values. ip local pool name warning highUtilization abatedUtilization [ snmpTrap ] no ip local pool name warning [ highUtilization abatedUtilization ] Mode(s): name text string in the range 116 characters that defines the name of the local address pool highUtilization high utilization value; a number in the range 1100; default is 85 abatedUtilization abated utilization value; a number in the range 1100; default is 75 snmpTrap enables snmp pool utilization traps
ip mac-validate
Description: Syntax: Enables MAC address validation on a per interface basis. The no version disables the feature. ip mac-validate [ strict | loose ] no ip mac-validate strict prevents transmission of IP packets that do not reside in the validation table loose allows IP packets to pass through even though the packets do not have entries in the validation table; only packets that have matching IPMAC pair entries in the table are validated
Mode(s):
ip mask-reply
Description: Syntax: Mode(s): Enables ICMP netmask reply. The no version disables the feature. [ no ] ip mask-reply Interface Configuration, Subinterface Configuration
190
ip mpls forwarding-mode label-switched
ip mpls forwarding-mode label-switched

Description: Generates a label for each different FEC that a BGP route points to in a BGP/MPLS VPN. The no version restores the default, generating a single label for all BGP routes sent from a given VRF. Note: For some types of routes, the system always generates a per-VRF label, regardless of the status of this command. See ERX Routing Protocols Configuration Guide, Vol. 2, Chapter 3, Configuring BGP/MPLS VPNs, for details. Syntax: Mode(s): [ no ] ip mpls forwarding-mode label-switched VRF Configuration
ip mpls vpn-interface per-label

Description: Creates a VPN interface for each received stacked label in a BGP/MPLS VPN, enabling collection of statistics on a per-label basis. The no version restores the default, creating a VPN interface for each next-hop PE. Note: Operating in per-label mode limits the number of egress FECs supported to the order of thousands. Syntax: Mode(s): [ no ] ip mpls vpn-interface per-label VRF Configuration
ip mtu
Description: Syntax: Sets the maximum transmission unit size of IP packets sent on an interface. The no version restores the default value. [ no ] ip mtu [ mtuSize ] mtuSize maximum number of packet transmissions permitted on an interface. The range is 12810240. The default is 0, which means that the system takes the value from a lower protocol layer.
Mode(s):
ip multicast-routing
Description: Syntax: Mode(s): Enables IP multicast routing on the system. The no version disables IP multicast routing on the system. [ no ] ip multicast-routing Global Configuration
ip multipath round-robin ERX Edge Routers
191
ip multipath round-robin
Description: Syntax: Mode(s): Specifies round-robin as the mode for ECMP load sharing on an interface. The no version restores the default value, hashed. [ no ] ip multipath round-robin Subinterface Configuration
ip name-server
Description: Syntax: Specifies a DNS name server that the system can query for hostnametoIP address resolution. The no version deletes the name server. [ no ] ip name-server serverIpAddress [ serverIpAddress ]* Mode(s): serverIpAddress IP address of a DNS name server * indicates that one or more parameters can be repeated multiple times in a list in the command line
ip nfs
Description: Specifies the ERX interface that the current virtual router uses to exchange NFS communications with an NFS server. The no version prevents this interface from sending or receiving NFS communications for the current virtual router. ip nfs { source-address ipAddress | source-interface interfaceType interfaceSpecifier } no ip nfs { source-address | source-interface } Mode(s): ipAddress IP address of an ERX interface that sends and receives NFS communications interfaceType ERX interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular ERX interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Syntax:
192
ip nfs host
ip nfs host
Description: Syntax: Configures a remote host as an NFS server for the current virtual router. The no version disassociates the NFS server from the virtual router. ip nfs host hostName [ user userID [ group groupID ] ] no ip nfs host hostName Mode(s): hostName name of the remote host userID user identity in the range 04294967295 that a user must enter to connect to the remote host; default is 2001 groupID group identity in the range 04294967295 that the user must enter to connect to the remote host; default is 100
ip ospf authentication-key
Description: Syntax: Assigns a password used by neighboring routers that are using OSPF simple password authentication. The no version deletes the password. ip ospf authentication-key authKey no ip ospf authentication-key Mode(s): authKey password; continuous string of characters up to 8 characters in length
ip ospf authentication message-digest

Description: Specifies that the authentication mode for the interface is MD5. The no version sets authentication for the interface to none, but leaves any configured MD5 key intact. [ no ] ip ospf authentication message-digest Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
ip ospf authentication-none
Description: Syntax: Mode(s): Specifies that no authentication is to be used for the interface. The no version has no effect. ip ospf authentication-none Interface Configuration, Subinterface Configuration
ip ospf cost ERX Edge Routers
193
ip ospf cost
Description: Syntax: Specifies a cost metric for an interface. Used in the calculation of the SPF routing table. The no version resets the path cost to the default. [ no ] ip ospf cost intfCost Mode(s): intfCost link state metric cost; number in the range 065535; default value is 10
ip ospf dead-interval
Description: Sets the time period during which the routers neighbors do not see hello packets before they declare the router to be down. The no version resets the dead interval to its default. [ no ] ip ospf dead-interval deadInterval Mode(s): deadInterval number in the range 165535 seconds; default value is 40 seconds
Syntax:
ip ospf hello-interval
Description: Syntax: Specifies the interval between hello packets that the router sends on the interface. The no version resets the hello interval to its default. [ no ] ip ospf hello-interval helloInterval Mode(s): helloInterval number in the range 165535 seconds; default value is 10 seconds
194
ip ospf message-digest-key md5
ip ospf message-digest-key md5

Description: Syntax: Enables OSPF MD5 authentication and configures the MD5 key. The no version deletes an MD5 key. ip ospf message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey no ip ospf message-digest-key keyID keyID key identifier in the range 1255 md5 specifies use of the MD5 algorithm 0 indicates the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey OSPF password; a continuous string of up to 16 alphanumeric characters
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you must configure MD5 keys. Note: To disable MD5 authentication for the interface, use the ip ospf authentication-none command. Note: To display the password only in encrypted text, use the service password-encryption command. Mode(s): Interface Configuration, Subinterface Configuration
ip ospf network
Description: Syntax: Configures the OSPF network type to something other than the default for the network medium. The no version restores the default value for the medium. ip ospf network { broadcast | non-broadcast | point-to-point } no ip ospf network Mode(s): broadcast sets the network type to broadcast non-broadcast sets the network type to NBMA point-to-point sets the network type to point-to-point
ip ospf priority ERX Edge Routers
195
ip ospf priority
Description: Sets the router priority. Used in determining the designated router for the particular network. This designation applies only to multiaccess networks. Every broadcast and nonbroadcast multiaccess network has a designated router. The no version restores the default value. [ no ] ip ospf priority intfPriority Mode(s): intfPriority priority value, an 8-bit number in the range 1255; default value is 1
Syntax:
ip ospf retransmit-interval
Description: Specifies the time between LSA retransmissions for the interface when an acknowledgment for the LSA is not received. The no version restores the default value. [ no ] ip ospf retransmit-interval retransInterval Mode(s): retransInterval number in the range 165535 seconds; default value is 5 seconds
Syntax:
ip ospf shutdown
Description: Syntax: Mode(s): Disables OSPF on an interface. The no version enables OSPF on the interface. [ no ] ip ospf shutdown Interface Configuration, Subinterface Configuration
ip ospf transmit-delay
Description: Syntax: Sets the estimated time it takes to transmit a link state update packet on the interface. The no version restores the default value. [ no ] ip ospf transmit-delay transmDelay Mode(s): transmDelay link state transmit delay, a number in the range 165535 seconds; default value is 1 second
196
ip pim
ip pim
Description: Syntax: Enables PIM on an interface. The no version disables PIM on an interface. [ no ] ip pim [ dense-mode | sparse-mode | sparse-dense-mode ] Mode(s): dense-mode enables PIM in dense mode sparse-mode enables PIM in sparse mode sparse-dense-mode enables PIM in sparse-dense mode
ip pim query-interval
Description: Syntax: Specifies how often the system sends PIM router query messages from this interface. The no version specifies the default time interval, 30 seconds. ip pim query-interval queryTime no ip pim query-interval Mode(s): queryTime interval in the range 0210 seconds at which the system sends PIM router query messages from this interface
ip pim rp-address
Description: Syntax: Specifies a static PIM grouptoRP mapping. The no version clears the mapping from this interface. [ no ] ip pim rp-address ipAddress [ ipAccessList ] [ override ] Mode(s): ipAddress IP address of the system you want to designate as an RP router ipAccessList name of the IP access list that specifies which multicast groups use this RP override specifies that this static RP mapping has priority over group-to-RP mappings learned by auto-RP
Configuration Mode
ip pim send-rp-announce ERX Edge Routers
197
ip pim send-rp-announce
Description: Syntax: Sends autoRP announcement messages from a system you configured as an RP. The no version clears the filter from this interface. ip pim send-rp-announce interfaceType interfaceSpecifier scope ttl [ group-list ipAccessList] [ interval seconds ] no ip pim send-rp-announce interfaceType interfaceSpecifier [ group-list ipAccessList ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. The autoRP announcement messages will contain the IP address for this interface. ttl time-to-live value; the number of hops for which the announcement is valid ipAccessList name of the IP access list that specifies which multicast groups use this RP seconds time interval at which the system sends the announcements; default interval is 60 seconds
Mode(s):
Configuration Mode
ip pim send-rp-discovery scope

Description: Configures the system as an RP mapping agent, which records RP-to-group mappings and notifies PIM DRs about the mappings. The no version stops the system from acting as an RP mapping agent. ip pim send-rp-discovery scope ttl [ interfaceType interfaceSpecifier ] no ip pim send-rp-discovery ttl time-to-live value; number of hops for which the RP discovery message is valid. Specify a value that covers the PIM domain. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. If you specify an interface, the autoRP discovery messages will contain the IP address for this interface.
Syntax:
Mode(s):
Configuration Mode
198
ip pim spt-threshold
ip pim spt-threshold
Description: Syntax: Specifies the network configuration that PIM SM uses when a source starts sending multicast messages. The no version restores the default value, 0. [ no ] ip pim spt-threshold { 0 | nonzero_integer | infinity } [ group-list ipAccessList ] Mode(s): 0 configures PIM SM to switch to an SPT when a source begins to send multicast messages nonzero_integer integer in the range 14294967294; prevents PIM SM from switching from a shared tree to an SPT infinity prevents PIM SM from switching from a shared tree to an SPT ipAccessList name of the IP access list that specifies the groups to which the threshold applies
ip policy
Description: Assign a policy list to the ingress or egress of an interface. If you execute a policy command and the policy list does not exist, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system performs a routing table lookup and forwards packets on the interface based on the routing table information. You must specify the input or output keyword to assign the policy list to the ingress or egress of the interface. The no version removes the association between a policy list and an interface. [ no ] ip policy { input | local-input | output} policyName [ statistics { enabled [ baseline { enabled | disabled } ] | disabled } ] input apply policy to data arriving at this interface local-input apply policy to data that arrives at this interface but is addressed to a local interface output apply policy to data leaving this interface policyName name of the policy; a maximum of 16 characters statistics enable or disable collection of policy routing statistics
Syntax:
enabled enable collection of policy routing statistics baseline enabled enables baselining of policy routing statistics baseline disabled disables baselining of policy routing statistics disabled disable collection of policy routing statistics
ip prefix-list ERX Edge Routers
199
ip prefix-list
Description: Creates a prefix list for route filtering; specifies a list entrya permit or deny clause for a network address. The no version removes the specified prefix list or the specified list entry. ip prefix-list listName { description desc | [ seq sequence ] { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] } no ip prefix-list listName [ description | [ seq sequence ] [ { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] ] ] listName name of the prefix list; a string of up to 32 characters desc description of the prefix list sequence number in the range 065535 that indicates the position the prefix list entry is to have in the list of entries already configured for the prefix list. If given with the no version of this command, it specifies the position of the list entry to be deleted. If sequence is not specified, the value of the last sequence number + 5 is used. permit if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions deny if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed ipPrefix network route to be filtered, in the format network/length, where
Syntax:
network base address of the network route to be filtered; for example,

192.168.32.0 or 10.10.0.0
length length of the network prefix; number of bits masking base

address to produce address to be matched geNumber route being filtered matches if its prefix is within the range specified: greater than or equal to geNumber and less than or equal to 32 leNumber route being filtered matches if its prefix is within the range specified: greater than or equal to length and less than or equal to leNumber
Mode(s):
200
ip prefix-tree
ip prefix-tree
Description: Creates a prefix tree for best-match route filtering; specifies a tree entrya deny or permit clause for a network address. The no version removes the specified prefix tree or the specified tree entry. ip prefix-tree treeName { description desc | { permit | deny } ipPrefix } no ip prefix-tree treeName [ description | { permit | deny } ipPrefix ] treeName name of the prefix list; a string of up to 32 characters desc description of the prefix list deny if the prefix of the route being filtered matches the specified prefix and deny is specified, the route is not redistributed permit if the prefix of the route being filtered matches the specified prefix and permit is specified, the route is redistributed as controlled by the set actions ipPrefix network route to be filtered, in the format network/length, where
Syntax:
network base address of the network route to be filtered; for example,

192.168.32.0 or 10.10.0.0
length length of the network prefix; number of bits masking base

address to produce address to be matched Mode(s): Router Configuration
ip proxy-arp
Description: Enables proxy ARP on an Ethernet or bridge1483 interface. Proxy ARP is enabled by default. The no version disables proxy ARP on an Ethernet or bridge1483 interface. ip proxy-arp [ restricted | unrestricted ] no ip proxy-arp Mode(s): restricted restricts proxy-arp to hosts on the local interface unrestricted enables proxy-arp for all reachable hosts
Syntax:
ip redirects
Description: Enables the sending of redirect messages if the software is forced to resend a packet through the same interface on which it was received. The no version disables the sending of redirect messages. [ no ] ip redirects Interface Configuration, Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
ip refresh-route ERX Edge Routers
201
ip refresh-route
Description: Syntax: Reinstalls routes removed from the IP routing table by the clear ip route command. There is no no version. ip refresh-route [ vrf vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters
Privileged Exec
ip rip
Description: Configures RIP to run on the network specified by the network command. Uses the default values: send version is RIP version 1, receive version is RIP version 1 and version 2, authentication is not enabled. The no version deletes the RIP interface. [ no ] ip rip Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
ip rip authentication key

Description: Specifies the password for text authentication and the key for MD5 authentication. The no version clears the key for the interface. Supported only in RIP version 2. Authentication is disabled by default. ip rip authentication key [ 0 | 8 ] authkey no ip rip authentication key 0 the authKey is entered in unencrypted form (plaintext); this is the default option 8 the authKey is entered in encrypted form (ciphertext) authkey password sent with RIP messages or the key used to encrypt/decrypt RIP messages, depending on the authentication mode set for this interface
Syntax:
Mode(s):
202
ip rip authentication mode
ip rip authentication mode

Description: Specifies the type of authentication used on this interface. The no version removes authentication from the interface. Supported only in RIP version 2. Authentication is disabled by default. ip rip authentication mode { text | md5 keyID } no ip rip authentication mode Mode(s): text a simple text password is sent with each RIP message. If the password is not possessed by neighbors, the message is rejected. md5 MD5 message-digest algorithms are used to encrypt and compress the RIP message. keyID number identifying the MD5 key. Neighbors must share the MD5 key to decrypt the message and encrypt the response.
Syntax:
ip rip receive version

Description: Restricts the RIP version that the system can receive on an interface. The no version sets the interface back to the default value, receiving both RIP version 1 and version 2. ip rip receive version { 1 | 2 | 1 2 | 2 1 | off } no ip rip receive version Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only 1 2 specifies RIP version 1 and version 2 2 1 specifies RIP version 2 and version 1 off turns reception off
Syntax:
ip rip send version ERX Edge Routers
203
ip rip send version

Description: Restricts the RIP version that the system can send on an interface. The no version sets the interface back to the default value, sending only RIP version 1. ip rip send version { 1 | 2 | 1 2 | 2 1 | off } no ip rip send version Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only 1 2 specifies RIP version 1 and version 2 2 1 specifies RIP version 2 and version 1 off turns reception off
Syntax:
ip route
Description: Syntax: Establishes static routes. The no version removes static routes. ip route [ vrf vrfName ] ipAddress ipMask { ipNextHop [ InterfaceType interfaceSpecifier ] | interfaceType interfaceSpecifier } [ distance ] [ tag tagVal ] [ permanent ] no ip route [ vrf vrfName ] ipAddress ipMask [ ipNextHop | interfaceType interfaceSpecifier ] [ distance ] Mode(s): vrfName name of the VRF if the static route is being established within a VRF context ipAddress destination IP address ipMask IP mask for the destination ipNextHop IP address of the next hop that can be used to reach the destination network interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide. distance administrative distance metric for this route in the range 0254 tagVal number in the range 0255 that identifies the tag for this route permanent specifies that the route will not be removed, even if the interface shuts down
204
ip router-id
ip router-id
Description: Syntax: Establishes the IP address of a router. The no version removes the IP address assignment. [ no ] ip router-id [ vrfName ] ipAddress Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ipAddress IP address of the router
ip router isis
Description: Syntax: Configures an IS-IS routing process for IP on an interface. The no version disables IS-IS for IP on the interface. [ no ] ip router isis [ tag ] tag meaningful name for a routing process. If not specified, a null tag is assumed. The name must be unique among all IP router processes for a given router. Use the same text for the argument tag as specified in the router isis command.
Mode(s):
ip route-type
Description: Specifies whether BGP, IS-IS, OSPF, or RIP routes are available only for unicast forwarding, only for multicast reverse path forwarding checks, or for both. The no version restores the default value, unicast for BGP or both for IS-IS, OSPF, and RIP. For BGP: ip route-type [ unicast | | both ] no ip route-type For IS-IS, OSPF, and RIP: ip route-type [ unicast | multicast | both ] no ip route-type Mode(s): unicast specifies that routes for the protocol are available only for unicast forwarding multicast specifies that routes for the protocol are available only for multicast route path forwarding checks; this option is not available for BGP both specifies that routes for the protocol are available for both unicast forwarding and multicast route path forwarding checks
Syntax:
ip rpf-route ERX Edge Routers
205
ip rpf-route
Description: Syntax: Customizes static routes that the system can use to verify source addresses in multicast packets. The no version removes the static route. ip rpf-route ipAddress addressMask { nextHopIpAddress | nextHopInterfaceType nextHopInterfaceSpecifier } [ distanceValue ] [ tag tagValue ] [ no ] rpf-route ipAddress address-mask Mode(s): ipAddress IP address of the destination network addressMask subnet mask for the destination network nextHopIpAddress IP address of the next hop nextHopInterfaceType interface type; see Interface Types and Specifiers in About This Guide nextHopInterfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide distanceValue number in the range 0255 that indicates the preference for this route tagValue number in the range 04294967295 that identifies the route in the routing table
ip rsvp bandwidth
Description: Specifies the total bandwidth reservable on the interface in a non-ERX implementation. See the mpls bandwidth command for a complete description and syntax.
ip sa-validate
Description: Enables source address validation on an interface. This feature verifies that a packet has been sent from a valid source address. When a packet arrives on an interface, the system performs a route-table lookup using the source address. The result from the route-table lookup is an interface to which packets destined for that address are routed. This interface must match the interface that the packet arrived on. If it does not match, the system drops the packet.The no version disables source address validation. [ no ] ip sa-validate Interface Configuration
Syntax: Mode(s):
206
ip share-interface
ip share-interface
Description: Specifies the layer 2 interface used by a shared IP interface in the current virtual router. The no version removes the association between the layer 2 interface and the shared IP interface. ip share-interface interfaceType interfaceSpecifier no ip share-interface Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Syntax:
ip share-nexthop
Description: Syntax: Specifies that the shared IP interface dynamically tracks a next hop for the specified destination. The no version halts tracking of the next hop. ip share-nexthop ipAddress [ virtual-router vrName ] no ip share-nexthop Mode(s): ipAddress IP address of the destination for which the next hop is tracked vrName name of the virtual router for the next hop
ip shutdown
Description: Syntax: Mode(s): Shuts down an IP interface. The no version restarts the interface. [ no ] ip shutdown Interface Configuration, Subinterface Configuration
ip source-prefix
Description: Configures a subscriber interface to demultiplex traffic with the specified IP address and mask. The no version removes the association between the subscriber interface and the specified IP address and mask. [ no ] ip source-prefix ipAddress ipAddressMask Mode(s): ipAddress IP address of the physical interface that receives messages for this subscriber ipAddressMask network mask for associated IP subnet
Syntax:
ip source-route ERX Edge Routers
207
ip source-route
Description: Syntax: Enables the forwarding of source-routed packets. The no version disables forwarding. Forwarding is enabled by default. [ no ] ip source-route [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters
ip speed
Description: Syntax: Sets the speed of an IP interface in bits per second. The no version restores the default value, 0 bps. [ no ] ip speed adminSpeed Mode(s): adminSpeed speed of the interface in bps in the range 14294967295
ip split-horizon
Description: Enables split horizon, preventing the RIP router from advertising routes from the interface originating the route, reducing the possibility of routing loops; this is the default condition. The no version disables split horizon. [ no ] ip split-horizon Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
ip ssh authentication-retries
Description: Sets the number of times that a user can retry a failed authentication (such as trying to correct a wrong password) before the server terminates the connection. The no version restores the default value of 20 retries. ip ssh authentication-retries retryLimit no ip ssh authentication-retries Mode(s): retryLimit number of times authentication can be retried after the initial failure within a given connection attempt
Syntax:
208
ip ssh crypto
ip ssh crypto
Description: Adds an encryption algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list. ip ssh crypto [ client-to-server | server-to-client ] [ no | default ] cipherAlgorithm Mode(s): client-to-server adds the specified algorithm to the SSH servers list of supported inbound algorithms server-to-client adds the specified algorithm to the SSH servers list of supported outbound algorithms no removes or excludes the specified algorithm from the list default restores the specified list to the factory defaults, which includes 3des-cbc, twofish-cbc, and blowfish-cbc cipherAlgorithm algorithm to add to the list
Syntax:
ip ssh disable-user-authentication
Description: Syntax: Mode(s): Disables RADIUS password authentication, resulting in the acceptance of all SSH clients that pass protocol negotiation. [ no ] ip ssh disable-user-authentication Global Configuration
ip ssh mac
Description: Adds a MAC algorithm to the specified list of supported algorithms. The no version removes or excludes an algorithm from the specified list. The default version restores the default algorithms for the specified list. ip ssh mac [ client-to-server | server-to-client ] [ no | default ] macAlgorithm Mode(s): client-to-server adds the specified algorithm to the SSH servers list of supported inbound algorithms server-to-client adds the specified algorithm to the SSH servers list of supported outbound algorithms no removes or excludes the specified algorithm from the list default restores the specified list to the factory defaults, which includes hmac-md5, hmac-sha1, and hmac-sha1-96 macAlgorithm algorithm to add to the list
Syntax:
ip ssh sleep ERX Edge Routers
209
ip ssh sleep
Description: Sets a sleep period in seconds for users that have exceeded the authentication retry limit. Connection attempts from the user at the same host are denied until this period expires. The no version restores the default value of 600 seconds. ip ssh sleep sleepPeriod no ip ssh sleep Mode(s): sleepPeriod period in seconds
Syntax:
ip ssh timeout
Description: Sets a timeout period in seconds. The SSH server terminates the connection if protocol negotiationincluding user authenticationis not complete within this timeout. The no version restores the default value of 600 seconds. ip ssh timeout timeout no ip ssh timeout Mode(s): timeout period in the range 10600 seconds
Syntax:
ip summary-address
Description: Syntax: Summarizes specified addresses for RIP. The no version removes the summarization. ip summary-address [ rip ] ipAddress ipAddressMask [ metric ] no ip summary-address [ rip ] ipAddress ipAddressMask Mode(s): rip optional keyword for compatibility with non-ERX implementations ipAddress IP address identifying the route to be summarized ipAddressMask network mask identifying the route to be summarized metric specifies a metric for the summary address; the default is 1
210
ip ttl
ip ttl
Description: Sets the hop count specified by the TTL field in the IP header used by IP for all operations unless overridden by another command. The no version restores the default value, 127. ip ttl [ vrfName ] ttlValue no ip ttl [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ttlValue number in the range 1255
Syntax:
ip tunnel reassembly
Description: Syntax: Mode(s): Enables the reassembly of fragmented IP tunnel packets that are received on the current virtual router. The no version restores the default of disabled. [ no ] ip tunnel reassembly Global Configuration
ip unnumbered
Description: Syntax: Enables IP processing on an interface without assigning an explicit IP address to the interface. The no version disables IP processing on the interface. [ no ] ip unnumbered interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
ip unreachables
Description: Enables the generation of an ICMP unreachable message when a packet is received that cannot be delivered by the router. The no version disables this function. [ no ] ip unreachables Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
ip virtual-router ERX Edge Routers
211
ip virtual-router
Description: Specifies a virtual router in an IP profile. Dynamic interfaces created with the profile are assigned to this VR. The no version removes the VR from the profile; if a VR is not specified via RADIUS, then any subsequent creation process for dynamic interfaces using the profile fails. [ no ] ip virtual-router vrName Mode(s): vrName name of the virtual router; a string of 115 alphanumeric characters
Syntax:
Profile Configuration
ip vpn-id
Description: Syntax: Associates a VPN ID with the virtual router. The no version removes the VPN ID from the virtual router. ip vpn-id [ vrfName ] oui ouiNumber index ipAddress no ip vpn-id [ vrfName ] Mode(s): vrfName name of the VRF; string of 132 alphanumeric characters ouiNumber identifies the OUI portion of the VPN ID, ranges from 016777215 ipAddress IP address that identifies the index portion of the VPN ID
ip vrf
Description: Creates a VRF or accesses VRF Configuration mode to configure a VRF. The no version deletes the VRF. Note: After creating the VRF, you must configure a route distinguisher for it via the rd command; otherwise, the VRF will not operate. Syntax: [ no ] ip vrf vrfName Mode(s): vrfName name of the VRF; a string of 132 alphanumeric characters
212
ip vrf forwarding
ip vrf forwarding
Description: Syntax: Assigns a VRF to an interface or subinterface. The no version removes the assignment. [ no ] ip vrf forwarding vrfName Mode(s): vrfName name of the VRF; a string of 132 alphanumeric characters
ip vrrp
Description: Syntax: Creates a VRRP instance ID. The no version removes a VRID. The default is disabled. [ no ] ip vrrp vrid Mode(s): vrid VRID identifier; a number in the range 1255
ip vrrp advertise-interval
Description: Configures the VRRP advertisement interval time. You must use seconds to comply with RFC 2338. Use milliseconds only if all VRRP instances peering for the given VRID are composed of ERX systems. The no version restores the default value of 1 second. ip vrrp vrid advertise-interval advertiseInterval [ seconds | milliseconds ] no ip vrrp vrid advertise-interval Mode(s): vrid VRID identifier; a number in the range 1255 advertiseInterval the advertisement period in seconds or milliseconds; 1255 seconds; 100255000 milliseconds seconds specify interval in seconds milliseconds specify interval in milliseconds
Syntax:
ip vrrp authentication-key ERX Edge Routers
213
ip vrrp authentication-key
Description: Specify the authentication key. This command is only valid if the text keyword was selected in the ip vrrp authentication-type command. The no version negates the command or restores the default. ip vrrp vrid authentication-key key no ip vrrp vrid authentication-key Mode(s): vrid VRID identifier; a number in the range 1255 key string of 18 characters
Syntax:
ip vrrp authentication-type
Description: Syntax: Specifies the VRRP authentication type. The no version restores the default value, none. ip vrrp vrid authentication-type { none | text } no ip vrrp vrid authentication-type Mode(s): vrid VRID identifier; a number in the range 1255 none authentication disabled text simple text password
ip vrrp enable
Description: Syntax: Enables a VRID. The no version disables a VRID. The default is disabled. [ no ] ip vrrp vrid [ enable ] Mode(s): vrid VRID identifier; a number in the range 1255
ip vrrp preempt
Description: Syntax: Enables VRRP preemption. The no version disables VRRP preemption. The default is enabled. [ no ] ip vrrp vrid preempt Mode(s): vrid VRID identifier; a number in the range 1255
214
ip vrrp priority
ip vrrp priority
Description: Syntax: Configures the priority of VRRP routers. The no version restores the default value, 100. ip vrrp vrid priority priorityValue no ip vrrp vrid priority Mode(s): vrid VRID identifier; a number in the range 1255 priorityValue priority value of the VRRP router; a number in the range 1255; default is 100
ip vrrp virtual-address
Description: Associates an IP address to a VRID. The no version removes a list of IP addresses associated with a VRID. The no version clears the auto flag, if auto addresses are being used. There is no default. ip vrrp vrid virtual-address { auto | ipAddress ipAddress [ ipAddress ipAddress ]* } no ip vrrp vrid virtual-address [ ipAddress ipAddress ]* Mode(s): vrid VRID identifier; a number in the range 1255 ipAddress the IP address that associates to the VRID
Syntax:
ipsec clear sa
Description: Syntax: Refreshes ISAKMP/IKE or IPSec SAs. There is no no version. ipsec clear sa { all [ state tunnelState ] | tunnel tunnelName } [ phase {1 | 2 } ] all reinitializes all SAs state reinitializes SAs on tunnels that are in a specific state tunnelState state of tunnel, up, down, not-present tunnel specifies that an SA on a specific tunnel is to be reinitialized tunnelName name of tunnel phase specifies one of the following types of tunnel to be reinitialized:
1 ISAKMP/IKE tunnels 2 IPSec tunnels

ipsec isakmp-policy-rule ERX Edge Routers
215
ipsec isakmp-policy-rule
Description: Defines and prioritizes an ISAKMP/IKE policy. ISAKMP/IKE policies define parameters to be used during ISAKMP/IKE negotiation. You can have up to 10 ISAKMP/IKE policies per system. The no version removes a policy. If you do not include a priority number with the no version, the software removes all ISAKMP/IKE policies. ipsec isakmp-policy-rule priority no ipsec isakmp-policy-rule [ priority ] Mode(s): priority identifies and prioritizes the ISAKMP/IKE policy; the range is 110000, with 1 having the highest priority
Syntax:
ipsec key manual

Description: Specifies that a peer use a manual key for authentication and displays the prompt from which you can enter manual keys. Manually configured keys are used during the tunnel establishment phase when the ISAKMP/IKE policy specifies either preshared key authentication or encrypted nonce authentication. The no version deletes a manually configured key. Note: You must enter this command in the virtual router context where the IP address of the peer is defined. Syntax: [ no ] ipsec key manual { pre-share } ipAddress Mode(s): pre-share specifies preshared manual keys as the authentication method ipAddress address of the peer for which the key can be used
ipsec lifetime
Description: Specifies the default lifetime in volume of traffic and/or seconds. The default lifetime applies to secure tunnels that do not have a tunnel lifetime defined. When either the volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA. The no version restores the default values. [ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds } kilobytes volume of traffic in kilobytes that can pass between IPSec peers before the SA expires; the range is 1024004294967295; the default is 4294967295 kilobytes; a setting of zero turns off the kilobyte lifetime seconds number of seconds an SA lives before expiring; the range is 72004294967295; the default is 28800 seconds (8 hours)
Syntax:
Mode(s):
216
ipsec local-endpoint
ipsec local-endpoint
Description: Defines a default local endpoint used for ISAKMP/IKE negotiations and all IPSec tunnels for a transport virtual router. The no version restores the default settings of the local endpoint. [ no ] ipsec local-endpoint ipAddress transport-virtual-router transportVRName Mode(s): ipAddress IP address to use as the local endpoint transportVRName name of transport virtual router in which the IP address is defined
Syntax:
ipsec transform-set
Description: Creates a transform set. Transform sets used for manually configured tunnels can have only one transform. Transform sets used for signaled tunnels can have up to six transforms. Transforms are numbered in a priority sequence in the order in which you enter them. The no version deletes the transform set. Each transform provides a different combination of data authentication and confidentiality. Use the online Help to view available transforms. Syntax: ipsec transform-set transformSetName transform0 [ transform1 [ transform2 [ transform3 [ transform4 [ transform5 ] ] ] ] ] no ipsec transform-set transformSetName Mode(s): transformSetName name of the transform set transform0 through transform5 AH or ESP transform
isis authentication-key
Description: Assigns a password for IS-IS level 1 and level 2 hellos used by neighboring routers that are using IS-IS password authentication. The no version deletes the password. isis authentication-key [ level-1 | level-2 ] authKey no isis authentication-key [ level-1 | level-2 ] Mode(s): level-1 inserts the password into level 1 hello packets level-2 inserts the password into level 2 hello packets authKey a password, a continuous string of characters up to 8 characters in length
Syntax:
isis circuit-type ERX Edge Routers
217
isis circuit-type
Description: Syntax: Use to configure the type of adjacency desired for the specified interface. The no version resets the circuit type to level 1 and level 2. isis circuit-type [ level-1 | level-1-2 | level-2-only ] no isis circuit-type level-1 establishes a level 1 adjacency if there is at least one area address in common between this system and its neighbors level-1-2 (default) establishes a level 1 and 2 adjacency if the neighbor is also configured as a level 1-2 router and there is at least one area in common. If there is no area in common, a level 2 adjacency is established. level-2-only establishes a level 2 adjacency on the circuit. If the neighboring router is a level 1 only router, no adjacency will be established.
Mode(s):
isis csnp-interval
Description: Syntax: Configures the IS-IS CSNP interval for the specified interface. The no version restores the default value. isis csnp-interval seconds [ level-1 | level-2 ] no isis csnp-interval [ seconds ] [ level-1 | level-2 ] seconds number in the range 065535; the interval of time in seconds between the transmission of CSNPs on multiaccess networks for the designated router; default is 10 seconds, except for WAN interfaces, where the default is 0 level-1 sets the interval of time between transmission of CSNPs for level 1 independently level-2 sets the interval of time between transmission of CSNPs for level 2 independently
Mode(s):
218
isis hello-interval
isis hello-interval
Description: Syntax: Specifies the length of time in seconds between hello packets that the router sends on the specified interface. The no version restores the default value. isis hello-interval seconds [ level-1 | level-2 ] no isis hello-interval [ seconds ] [ level-1 | level-2 ] seconds number in the range 065535; a value equal to the hello multiplier times the hello interval seconds is advertised as the holdtime in the hello packets transmitted; the default is 10 seconds. The value must be the same for all routers attached to a common network. With smaller hello intervals, topological changes are detected faster, but there is more routing traffic. level-1 sets the hello-interval for level 1 independently level-2 sets the hello-interval for level 2 independently
Mode(s):
isis hello-multiplier
Description: Specifies the number of IS-IS hello packets a neighbor must miss before the router should declare the adjacency to be down. The no version restores the multiplier default value of 3. isis hello-multiplier multiplier [ level-1 | level-2 ] no isis hello-multiplier [ multiplier | level-1 | level-2 ] multiplier number in the range 31000; the default is 3. The advertised hold time in IS-IS hellos will be set to the hello-multiplier times the hello-interval. Neighbors will declare an adjacency to this router to be down after not having received any IS-IS hellos during the advertised hold time. The hold time (and thus the hello-multiplier and the hello-interval) can be set on a per interface basis, and can be different between different routers in one area. Using a smaller hello-multiplier will give fast convergence, but can result in more routing instability. Increment the hello-multiplier to a larger value to help network stability when needed. Never configure a hello-multiplier lower than the default. level-1 sets the hello-multiplier independently for level 1 adjacencies level-2 sets the hello-multiplier independently for level 2 adjacencies
Syntax:
Mode(s):
isis lsp-interval ERX Edge Routers
219
isis lsp-interval
Description: Syntax: Configures the time delay between successive IS-IS link state packet transmissions. The no version restores the default value of 33 milliseconds. isis lsp-interval milliseconds no isis lsp-interval Mode(s): milliseconds number of milliseconds in the range 14294967295; an interval between successive link state packets
isis mesh-group
Description: Syntax: Configures an interface in the same mesh group to act as a virtual multiaccess network. The no version disables the feature. isis mesh-group { blocked | number } no isis mesh-group Mode(s): blocked blocks reserved LSPs from being flooded out on this defined configured interface number mesh group number in the range 14294967295
220
isis message-digest-key
isis message-digest-key
Description: Specifies an HMAC MD5 key that the system uses to create a secure, encrypted message digest of IS-IS level 1 or level 2 hello packets on the interface. Level 1 packets are the default. The digest is inserted into the packet from which it is created. Using this algorithm protects against intrusion by preventing unauthorized routers from forming adjacencies with your system. You can specify when the system will start (default is the current time) and stop (default is never) accepting packets that include a digest made with this key. You can specify when the system will start (default is the current time plus 2 minutes) and stop (default is never) generating packets that include a digest made with this key. The no version deletes the key specified by the key-id. isis message-digest-key keyId hmac-md5 key [ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay startAcceptMonth } startAcceptYear ] ] [ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay startGenMonth } startGenYear ] ] [stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay | stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ] [ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay stopGenMonth } stopGenYear ] } ] [ level-1 | level-2 ] no isis message-digest-key keyId [ level 1 | level 2 ] keyId integer from 1 to 255 that is a unique identifier for the secret key, sent with the message digest in the packet. key string of up to 20 alphanumeric characters; secret key used by the HMAC MD5 algorithm to generate the message digest. startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear time, month, day, year that the system will start accepting packets created with this password. Use military time format HH:MM[ :SS ]. startGenTime, startGenMonth, startGenDay, startGenYear time, month, day, year that the system will start inserting this password into packets. Use military time format HH:MM[ :SS ]. never the system never stops accepting or generating packets; overrides previously specified stop times. stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear time, month, day, year that the system will stop accepting packets created with this password. Use military time format HH:MM[ :SS ]. stopGenTime, stopGenMonth, stopGenDay, stopGenYear time, month, day, year that the system will stop inserting this password into packets. Use military time format HH:MM[ :SS ]. level1 Inserts the password into level 1 hello packets level2 Inserts the password into level 2 hello packets
Syntax:
Mode(s):
isis metric ERX Edge Routers
221
isis metric
Description: Syntax: Configures the metric (cost) for the specified interface. The no version restores the default metric value. isis metric defaultMetric [ level-1 | level-2 ] no isis metric [ defaultMetric | level-1 | level-2 ] defaultMetric metric used for the redistributed route; a number in the range 063 if the system is configured with the metric-style narrow command; a number in the range 016777215 if the system is configured with the metric-style transition or metric-style wide command; the default value is 10 level-1 apply metric to level 1 links level-2 apply metric to level 2 links
Mode(s):
isis priority
Description: Syntax: Configures the priority of this system for designated router election. The no version resets priority to the default value, 64. isis priority value [ level-1 | level-2 ] no isis priority [ value | level-1 | level-2 ] Mode(s): value number in the range 0127; the priority of a router; the default value is 64 level-1 sets the priority of a router for level 1 independently level-2 sets priority of a router for level 2 independently
isis retransmit-interval
Description: Syntax: Configures the number of seconds between retransmission of LSPs with the same lsp-id for point-to-point links. The no version restores the default value. isis retransmit-interval seconds no isis retransmit-interval seconds number of seconds in the range 165535; the default value is 5. The number should be greater than the expected round-trip delay between any two routers on the attached network. The setting of this parameter should be conservative, or needless retransmission will result. The value should be larger for serial lines.
Mode(s):
222
isis retransmit-throttle-interval
isis retransmit-throttle-interval
Description: Configures the amount of time between retransmissions of any IS-IS LSPs on a point-to-point interface. The no version restores the default value, 33 milliseconds. isis retransmit-throttle-interval milliseconds no isis retransmit-throttle-interval Mode(s): milliseconds the number of milliseconds in the range 065535; the minimum delay between LSP retransmissions on the interface
Syntax:
is-type
Description: Syntax: Configures the IS-IS level at which the router is to operate. The no version resets the parameter to the default level-1-2. is-type { level-1 | level-1-2 | level-2-only } no is-type Mode(s): level-1 causes the router to act as a station router level-1-2 causes the router to act as both a station router and an area router; the default setting level-2-only causes the router to act as an area router
j1 ERX Edge Routers
223
j1
Description: Syntax: Mode(s): Enables the J1 variant (Japan) of the T1 framing. The no version disables the feature (default). [ no ] j1 Controller Configuration
key
Description: From Radius Configuration mode, specifies the authentication or accounting server secret. The no version removes the secret. From Manual Key Configuration mode, configures a manual ISAKMP/IKE preshared key. There is no no version. To delete a key, use the no version of the ipsec key manual command. To assign a RADIUS key: key secret no key secret authentication or accounting server secret text string used by RADIUS to encrypt the client and server authenticator field during exchanges between the system and a RADIUS server. The system encrypts PPP PAP passwords using this text string.
Syntax:
To assign an ISAKMP/IKE key: key keyString Mode(s): keyString key value in ASCII format; up to 200 characters
Radius Configuration, Manual Key Configuration
l2f checksum
Description: Enables the generation of checksums for L2F data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled. [ no ] l2f checksum Global Configuration
Syntax: Mode(s):
224
l2f destruct-timeout
l2f destruct-timeout
Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds. l2f destruct-timeout seconds no l2f destruct-timeout Mode(s): seconds a time in the range 103600 seconds (1 hour)
Syntax:
l2f drain
Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f shutdown command. Both commands affect the administrative state of L2F on the system. The l2f drain command sets the administrative state to drain, and the l2f shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2f drain Global Configuration
Syntax: Mode(s):
l2f drain destination

Description: Prevents the creation of new tunnels and sessions at a destination. This command works with the l2f shutdown destination command. Both commands affect the status of the administrative state of L2F for the destination. The l2f drain destination command sets the administrative state to drain, and the l2f shutdown destination command sets the administrative state to disabled. The no version allows the creation of new tunnels and sessions at a destination. [ no ] l2f drain destination { destinationName | [ virtual-router virtualRouterName ] ip ipAddress } Mode(s): destinationName name the system assigns to the home gateway virtualRouterName name of the virtual router on which the destination exists ipAddress IP address of the home gateway
Syntax:
l2f drain tunnel ERX Edge Routers
225
l2f drain tunnel

Description: Prevents the assignment of new sessions to a tunnel. This command works with the l2f shutdown tunnel command. Both commands affect the status of the administrative state of L2F for the tunnel. The l2f drain tunnel command sets the administrative state to drain, and the l2f shutdown tunnel command sets the administrative state to disabled. The no version allows the assignment of new sessions to a tunnel. [ no ] l2f drain tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName } Mode(s): destinationName name the system assigns to the home gateway vrName name of the virtual router on which the tunnel exists ipAddress IP address of the home gateway tunnelName name of the tunnel
Syntax:
l2f ignore-receive-data-sequencing
Description: Suppresses sequence number checking for data packets received on all L2F tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2F NAS still inserts sequence numbers into data packets if the NAS receives packets from the home gateway that contain sequence numbers. The no version, which is the default, causes the system to check sequence numbers in data packets that it receives on L2F tunnels. Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2F packets, out-of-order packets may be dropped if sequence numbers are being used on L2F data packets. Syntax: Mode(s): [ no ] l2f ignore-receive-data-sequencing Global Configuration
226
l2f shutdown
l2f shutdown
Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works with the l2f drain command. Both commands affect the administrative state of L2F on the system. The l2f shutdown command sets the administrative state to disabled, and the l2f drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2f shutdown Global Configuration
Syntax: Mode(s):
l2f shutdown destination

Description: Closes all tunnels and sessions at a destination, and prevents the creation of new tunnels and sessions at that destination. This command works with the l2f drain destination command. Both commands affect the status of the administrative state of L2TP on the destination. The l2f shutdown destination command sets the administrative state to disabled, and the l2f drain destination command sets the administrative state to drain. The no version enables the creation of new tunnels and sessions at that destination. [ no ] l2f shutdown destination { destinationName | [ virtual-router vrName ] ip ipAddress } Mode(s): destinationName name the system assigns to the home gateway vrName name of the virtual router on which the destination exists ipAddress IP address of the home gateway
Syntax:
l2f shutdown session

Description: Closes a specific session. The no version has no effect because all L2F sessions are dynamic and cannot be restarted after they have been shut down. [ no ] l2f shutdown session { destinationName | [ virtual-router vrName ] ip ipAddress sessionName } Mode(s): destinationName name that the system assigns to the LNS vrName name of the virtual router on which the destination exists ipAddress IP address of the home gateway sessionName name of the session
Syntax:
l2f shutdown tunnel ERX Edge Routers
227
l2f shutdown tunnel

Description: Closes all sessions in a tunnel, and prevents the creation of new sessions in that tunnel. This command works with the l2f drain tunnel command. Both commands affect the status of the administrative state of L2F on the tunnel. The l2f shutdown tunnel command sets the administrative state to disabled, and the l2f drain tunnel command sets the administrative state to drain. The no version enables the creation of new sessions in that tunnel. [ no ] l2f shutdown tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName } Mode(s): destinationName name the system assigns to the home gateway virtualRouterName name of the virtual router on which the tunnel exists ipAddress IP address of the home gateway tunnelName name of the tunnel
Syntax:
l2tp checksum
Description: Enables the generation of checksums for data packets running over IP/UDP. The no version disables the generation of checksums for data packets running over IP/UDP. The default setting is disabled. [ no ] l2tp checksum Global Configuration
Syntax: Mode(s):
228
l2tp destination profile
l2tp destination profile

Description: Defines the location of the LAC(s) by virtual router and IP address. Accesses the L2TP Destination Profile Configuration mode. The no version removes the L2TP destination profile. l2tp destination profile { profileName [ [ virtual-router vrName ] ip address ipAddress ] | [ virtual-router vrName ] ip address ipAddress } no l2tp destination profile { profileName | [ virtual-router vrName ] ip address ipAddress } profileName name of the L2TP destination profile vrName name of the virtual router to be used to reach the destination (that is, the LAC). If you do not specify a virtual router, the current virtual router context is used. ipAddress IP address to be used to reach the destination
Syntax:
Note: To manage an existing destination profile, use this version of the command: l2tp destination profile profileName. This version assumes that the L2TP destination profile already exists. Mode(s): Global Configuration
l2tp destruct-timeout
Description: Specifies the maximum time for which the system maintains dynamic destinations, tunnels, and sessions that have terminated. If resources are low, the system will replace the terminated objects with new requests. The no version restores the default value, 600 seconds. l2tp destruct-timeout seconds no l2tp destruct-timeout Mode(s): seconds time in the range 103600 seconds (1 hour)
Syntax:
l2tp drain
Description: Prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp shutdown command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp drain command sets the administrative state to drain. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2tp drain Global Configuration
Syntax: Mode(s):
l2tp drain destination ERX Edge Routers
229
l2tp drain destination

Description: Prevents the creation of new tunnels and sessions at a destination. This command works in conjunction with the l2tp shutdown destination command. Both commands affect the status of the administrative state of L2TP for the destination; the l2tp drain destination command sets the administrative state to drain. The no version allows the creation of new tunnels and sessions at a destination. [ no ] l2tp drain destination { destinationName | [ virtual-router vrName ] ip ipAddress } Mode(s): destinationName name the system assigns to the LNS vrName name of the virtual router on which the destination exists ipAddress IP address of the LNS
Syntax:
l2tp drain tunnel

Description: Prevents the assignment of new sessions to a tunnel. This command works in conjunction with the l2tp shutdown tunnel command. Both commands affect the status of the administrative state of L2TP for the tunnel; the l2tp drain tunnel command sets the administrative state to drain. The no version allows the assignment of new sessions to a tunnel. [ no ] l2tp drain tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName } Mode(s): destinationName name the system assigns to the LNS vrName name of the virtual router on which the tunnel exists ipAddress IP address of the LNS tunnelName name of the tunnel
Syntax:
l2tp fail-over-within-preference
Description: Enables tunnel selection within a preference level. The no version restores the default behavior. The default fail-over scheme is to drop down a preference level when a connection attempt has failed. Syntax: Mode(s): [ no ] l2tp fail-over-within-preference Global Configuration
230
l2tp ignore-receive-data-sequencing
l2tp ignore-receive-data-sequencing
Description: Suppresses sequence number checking for data packets received on all L2TP tunnels in the system. This setting affects only packets received on a tunnel, not packets sent on a tunnel. The L2TP LAC still inserts sequence numbers into data packets if the LAC receives packets from the LNS that contain sequence numbers. The no version, which is the default, causes the system to check the sequence numbers in data packets that it receives on L2TP tunnels. Note: If you are using IP reassembly, we recommend that you set up the system to ignore sequence numbers in received data packets. Because IP reassembly may reorder L2TP packets, out-of-order packets may be dropped if sequence numbers are being used on L2TP data packets. Syntax: Mode(s): [ no ] l2tp ignore-receive-data-sequencing Global Configuration
l2tp retransmission
Description: Syntax: Sets the number of retransmission retries. The no version resets the number of retransmissions to the default value, 5. l2tp retransmission retries no l2tp retransmission Mode(s): retries in the range 27
l2tp shutdown
Description: Closes all destinations, tunnels, and sessions and prevents the creation of new destinations, tunnels, and sessions for the system. This command works in conjunction with the l2tp drain command. Both commands affect the status of the administrative state of L2TP on the system; the l2tp shutdown command sets the administrative state to disabled. The no version allows the creation of new destinations, tunnels, and sessions for the system. [ no ] l2tp shutdown Global Configuration
Syntax: Mode(s):
l2tp shutdown destination ERX Edge Routers
231
l2tp shutdown destination

Description: Closes all tunnels and sessions at a destination, and prevents the creation of new tunnels and sessions at that destination. This command works in conjunction with the l2tp drain destination command. Both commands affect the status of the administrative state of L2TP on the destination; the l2tp shutdown destination command sets the administrative state to disabled. The no version enables the creation of new tunnels and sessions at that destination. [ no ] l2tp shutdown destination { destinationName | [ virtual-router vrName ] ip ipAddress } Mode(s): destinationName name the system assigns to the LNS vrName name of the virtual router on which the destination exists ipAddress IP address of the LNS
Syntax:
l2tp shutdown session

Description: Closes a specific session. The no version has no effect because all L2TP sessions are dynamic and cannot be restarted after they have been shut down. [ no ] l2tp shutdown session { destinationName | [ virtual-router vrName ] ip ipAddress sessionName } Mode(s): destinationName name that the system assigns to the LNS vrName name of the virtual router on which the destination exists ipAddress IP address of the LNS sessionName name of the session
Syntax:
232
l2tp shutdown tunnel
l2tp shutdown tunnel

Description: Closes all sessions in a tunnel, and prevents the creation of new sessions in that tunnel. This command works in conjunction with the l2tp drain tunnel command. Both commands affect the status of the administrative state of L2TP on the tunnel; the l2tp shutdown tunnel command sets the administrative state to disabled. The no version enables the creation of new sessions in that tunnel. [ no ] l2tp shutdown tunnel { destinationName | [ virtual-router vrName ] ip ipAddress tunnelName } Mode(s): destinationName name the system assigns to the LNS vrName name of the virtual router on which the tunnel exists ipAddress IP address of the LNS tunnelName name of the tunnel
Syntax:
l2tp tunnel idle-timeout

Description: Syntax: Configures the tunnel idle-timeout value and creates persistent tunnels by setting the value to 0. There is no no version. l2tp tunnel idle-timeout [ timerValue ] Mode(s): timerValue range is 086400 seconds
l2tp tunnel-switching
Description: Syntax: Mode(s): Enables tunnel switching chassis-wide. The no version disables tunnel switching. Disabled is the default. [ no ] l2tp tunnel-switching Global Configuration
l2tp tunnel test ERX Edge Routers
233
l2tp tunnel test

Description: Syntax: Allows you to force the establishment of a tunnel in order to verify the tunnel configuration and to verify connectivity. l2tp tunnel test authenticateName [ tunnelName ] Mode(s): authenticateName authenticate name used to look up tunnel test parameters tunnelName name of the tunnel to be tested
Privileged Exec
l2tp weighted-load-balancing
Description: Allows you to use a weighted load balancing scheme for session distribution. The no version restores the default behavior, wherein the session load of a chassis is distributed evenly across all tunnels defined to be at the same preference level. [ no ] l2tp weighted-load-balancing Global Configuration
Syntax: Mode(s):
lease
Description: Syntax: Specifies the time period for which the supplied IP address is valid. The no version restores the default lease time, one day. lease { days [ hours [ minutes [ seconds ] ] ] | infinite } no lease Mode(s): days number of days for which the IP address is valid in the range 032768 hours number of hours for which the IP address is valid in the range 024 minutes number of minutes for which the IP address is valid in the range 060 seconds number of seconds for which the IP address is valid in the range 060 infinite assigns a lease that does not expire
Pool Configuration
234
license b-ras
license b-ras
Description: Specifies the B-RAS license provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 2,000, 4,000, 8,000, 16,000, or 20,000 authenticated PPP or SDX (formerly SSC) sessions. The no version disables the license. license b-ras licenseKey no license b-ras Mode(s): licenseKey unique string of alphanumeric characters up to 15 characters long that we provide to you
Syntax:
license ipsec-tunnels
Description: Specifies the IPSec license key provided by your sales representative or Juniper Networks Customer Service. Depending on the license purchased, the system supports up to 5,000, 7,500, or 10,000 tunnels per chassis. The no version disables the license. license ipsec-tunnels licenseKey no license ipsec-tunnels Mode(s): licenseKey unique string of alphanumeric characters that we provide to you
Syntax:
lifetime
Description: Syntax: Associates a lifetime with IKE SAs established using this IKE policy. The no version restores the lifetime to its default, 28800 seconds (8 hours). lifetime seconds no lifetime Mode(s): seconds number of seconds an SA lives before expiring; range is 7200 to 864000 (10 days)
limits ERX Edge Routers
235
limits
Description: Sets memory limits for BGP internal tables maintained by BGP software. If you set a particular memory limit to a value lower than the current value and the system uses the memory up to the previous limit, then memory allocations will start to fail when the new value takes effect. The no version restores the default values; entering an optional value in the no version has the same effect as entering no optional values. limits { { nlre | received-route } receivedRouteLimit | { nlri | destination } destinationLimit | path-attribute pathAttributeLimit | vrf vrfLimit | address-family addressFamilyLimit | peer peerLimit | peer-address-family peerAddressFamilyLimit | peer-group peer-groupLimit | peer-group-address-family peer-groupAddressFamilyLimit | dampening dampeningLimit | network-route networkRouteLimit | aggregated-route aggregatedRouteLimit | redistributed-route redistributedRouteLimit | auto-summary-route autoSummaryRouteLimit | next-hop nextHopLimit | route-flap-history routeFlapHistoryLimit | rib-out ribOutLimit | group-rib-out groupRibOutLimit | send-queue-entry sendQueueEntryLimit | route-target-entry routeTargetEntryLimit } no limits { { nlre | received-route } [ receivedRouteLimit ] | { nlri | destination } [ destinationLimit ] | path-attribute [ pathAttributeLimit ] | vrf [ vrfLimit ] | address-family [ address-family-Limit ] | peer [ peerLimit ] | peer-address-family [ peerAddressFamilyLimit ] | peer-group [ peer-groupLimit ] | peer-group-address-family [ peer-groupAddressFamilyLimit ] | dampening [ dampeningLimit ] | network-route [ networkRouteLimit ] | aggregated-route [ aggregatedRouteLimit ] | redistributed-route [ redistributedRouteLimit ] | auto-summary-route [ autoSummaryRouteLimit ] | next-hop [ nextHopLimit ] | route-flap-history [ routeFlapHistoryLimit ] | rib-out [ ribOutLimit ] | group-rib-out [ groupRibOutLimit ] | send-queue-entry [ sendQueueEntryLimit ] | route-target-entry [ routeTargetEntryLimit ] } Note: The nlre and received-route keywords have the same purpose in this command, to set a limit on the received routes table. Similarly, the nlri and destination keywords have the same purpose, to set a limit on the BGP destination table. The nlre and nlri keywords are maintained for compatibility with previous software releases. receivedRouteLimit maximum number of received routes stored by BGP in the range 02147483648; the default is 5,000,000 destinationLimit maximum number of BGP destinations stored by BGP in the range 02147483648; the default is 5,000,000 pathAttributeLimit maximum number of path attributes stored by BGP in the range 02147483648; the default is 5,000,000
Syntax:
236
limits
vrfLimit maximum number of VRFs stored by BGP in the range 02147483648; the default is 5,000,000 addressFamilyLimit maximum number of address families stored by BGP in the range 02147483648; the default is 5,000,000 peerLimit maximum number of peers stored by BGP in the range 02147483648; the default is 5,000,000 peerAddressFamilyLimit maximum number of peers per address family stored by BGP in the range 02147483648; the default is 5,000,000 peer-groupLimit maximum number of peer groups stored by BGP in the range 02147483648; the default is 5,000,000 peer-groupAddressFamilyLimit maximum number of peer-groups per address family stored by BGP in the range 02147483648; the default is 5,000,000 dampeningLimit maximum number of dampening parameter blocks stored by BGP in the range 02147483648; the default is 5,000,000. BGP creates a dampening parameter block for each unique set of dampening parameterssuch as suppress threshold, reuse threshold, and so onused by BGP. For example, if you have a route map that sets the dampening parameters to one set of values for some routes and to another set of values for the remaining routes, BGP uses and stores two dampening parameter blocks, one for each set. networkRouteLimit maximum number of network routes stored by BGP in the range 02147483648; the default is 5,000,000 aggregatedRouteLimit maximum number of aggregated routes stored by BGP in the range 02147483648; the default is 5,000,000 redistributedRouteLimit maximum number of redistributed routes stored by BGP in the range 02147483648; the default is 5,000,000 autoSummaryRouteLimit maximum number of automatically summarized routes stored by BGP in the range 02147483648; the default is 5,000,000 nextHopLimit maximum number of next hops stored by BGP in the range 02147483648; the default is 5,000,000 routeFlapHistoryLimit maximum number of route-flap histories stored by BGP in the range 02147483648; the default is 5,000,000 ribOutLimit maximum number of RIB-Out routes stored by BGP for individual peers in the range 02147483648; the default is 1,000,000 groupRibOutLimit maximum number of RIB-Out routes stored by BGP for peer groups in the range 02147483648; the default is 1,000,000 sendQueueEntryLimit maximum number of send queue entries stored by BGP in the range 02147483648; the default is 5,000,000 routeTargetEntryLimit maximum number of combined import and export route-target entries in the range 02147483648; the default is 5,000,000
Mode(s):
line ERX Edge Routers
237
line
Description: Opens virtual terminal lines or the console line and allows you to configure the lines. By default five vty lines (04) are open. The no version removes a vty line or a range of lines from your configuration; users will not be able to run Telnet, SSH, or FTP to lines that you remove. When you remove a vty line, the system removes all lines above that line. For example, no line vty 6 causes the system to remove lines 6 through 19. You cannot remove lines 0 through 4. Note: Once lines are open, login is enabled by default. Before users can access the lines, you must configure a password, disable login using the no login command, or configure AAA authentication on the line. Syntax: line { console lineNumber | vty lineRangeStart [ lineRangeEnd ] } no line vty lineNumber Mode(s): console specifies the console line vty specifies vty lines lineNumber number of a single line; 0 for the console line lineRangeStart start of the vty line range; a number from 019; lineRangeEnd end of the vty line range; a number from 019
lineCoding
Description: Specifies the type of line coding used by a CE1 or CT1 interface. The no version restores the defaulthdb3 for CE1 interfaces and b8zs for CT1 interfaces. lineCoding linecodingType no lineCoding linecodingType one of the following:
Syntax:
ami alternate mark inversion b8zs bipolar with eight-zero substitution; CT1 default hdb3 high-density bipolar 3; CE1 default
238
link
link
Description: Syntax: Links the pool currently being configured to another DHCP local address pool. The linked pool acts as a backup pool. The no version removes the link. link poolName no link Mode(s): poolName name of pool to which you want to link the pool currently being configured
Pool Configuration
list
Description: Syntax: Lists the currently configured MPLS explicit path (optionally starting at a particular index). There is no no version. list [ index ] Mode(s): index number of a node in an ordered set of abstract nodes, a value ranging from 1255; set with the index command
load-interval
Description: Sets the time interval at which the system calculates bit rates and packet rates for an interface. The no version restores the default time interval, which is 300 seconds. This command is not available for the Ethernet interface on the SRP module. load-interval timeInterval no load-interval Mode(s): timeInterval a multiple of 30 seconds in the range 30300
Syntax:
local host
Description: Syntax: Configures an L2TP local hostname to be used with a remote host. The no version removes the local hostname from use with a remote host. local host hostname no local host Mode(s): hostname an L2TP local hostname; can be up to 64 characters in length (no spaces)
L2TP Destination Profile Host Configuration
local ip address ERX Edge Routers
239
local ip address
Description: Syntax: Configures a local IP address for use with a remote host. The no version removes the local IP address from use with a remote host. local ip address ipAddress no local ip address Mode(s): ipAddress an IP address
log
Description: Syntax: Configures logging settings. The no version negates the command. The suspend version suspends the policy rule. [ no ] [ suspend ] log [ classifier-group claclName ] [ precedence precValue ] Mode(s): claclName classifier control list to be logged precValue precedence of rule in relation to be logged
240
log-adjacency-changes
log-adjacency-changes
Description: Generates a log message when a NLSP adjacency changes state (up or down). The no version disables this function. This command manipulates the same log as the Global Configuration log commands. log-adjacency-changes [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] no log-adjacency-changes severity minimum severity of the log messages for this category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:
Syntax:
verbosity specifies the verbosity of this log categorys messages verbosityLevel specifies the verbosity of the log categorys messages; can be any of the following:
high verbose low terse medium moderate detail

Mode(s): Router Configuration
log destination ERX Edge Routers
241
log destination
Description: Configures the logging of system messages. You can direct messages to a destination, limit the messages logged based on severity level, or limit the event categories for which messages are logged. The no versions restore default settings or reverse the effect of previous commands that limited event categories. Note: You can display traffic logssuch as ipTraffic, icmpTraffic, tcpTraffic, and udpTrafficonly via the show log data command or from the SRP module console. You cannot redirect traffic logs elsewhere, such as to a syslog or nonvolatile storage file, or to a Telnet session. Syntax: To specify the destination and severity of messages logged: log destination { console | nv-file | syslog ipAddress [ facility facilityId ] } { severity { severityValue | severityNumber } | off } no log destination [ syslog [ ipAddress ] ] To specify which event categories are logged to syslog: log destination syslog ipAddress { include | exclude } category [ category ]* no log destination syslog ipAddress { include | exclude } [ category ]* console configure or modify logging to the local console nv-file configure or modify logging to the nonvolatile log file; the nv-file can accept only events at a severity level of critical or higher in importance syslog configure or modify logging to a syslog server ipAddress IP address of the syslog application on a remote host facility specifies the syslog facility on the host facilityId number in the range 07 that identifies the corresponding logging facility, local0local7 severity minimum severity of the log messages displayed; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:
emergency or 0 system unusable alert or 1 immediate action needed critical or 2 critical condition exists error or 3 error condition warning or 4 warning condition notice or 5 normal but significant condition info or 6 informational message
242
log destination syslog source
debug or 7 debug message

off disable logging to this destination include send only the specified event categories to the syslog server exclude send all event categories except those specified to the syslog server Issuing an include command after an exclude command (or vice versa) overrides the earlier command. You can issue successive include commands or successive exclude commands. Successive commands expand the list of included or excluded categories. Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
log destination syslog source

Description: Specifies a source interface type and location for events logged to a syslog server. Overrides the type and location of the actual source to enable server access behind firewalls. The no version restores the default state, which is to use the actual interface type and location of the source. log destination syslog ipAddress source interfaceType interfaceSpecifier no log destination syslog ipAddress source [ interfaceType interfaceSpecifier ] Mode(s): ipAddress IP address of the syslog application interfaceType type of interface; the source of the events logged; see Interface Types and Specifiers in About This Guide. interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide.
Syntax:
log engineering
Description: Syntax: Mode(s): Enables engineering logs. The no version disables engineering logs. [ no ] log engineering Global Configuration
log fields ERX Edge Routers
243
log fields
Description: Syntax: Selects optional fields to be added to all logs. The no version disables the optional log fields. log fields { timestamp | no-timestamp } { instance | no-instance } { calling-task | no-calling-task } no log fields Mode(s): timestamp include the timestamp in log messages no-timestamp do not include the timestamp in log messages instance include the event ID in log messages no-instance do not include the event ID in log messages calling-task include the logging task name in log messages no-calling-task do not include the logging task name in log messages
log filters
Description: This command has only a no version. See the no log filterscommand for a complete description and syntax.
log here
Description: Syntax: Mode(s): Enables the current terminal as a log console. The no version disables logs destined for a console from being displayed on the current terminal. [ no ] log here User Exec, Privileged Exec, Global Configuration
244
log severity
log severity
Description: Sets the severity value for the selected category. The no version removes an override severity setting and returns a log to its default value or the system-wide setting. log severity { severityValue | off | severityNumber } [ eventCategory [ instanceTree ] | eventCategory instanceTree | eventCategory ] no log severity [ severityValue | off | severityNumber ] [ eventCategory [ filters | instanceTree ] | eventCategory { filters | instanceTree } | eventCategory | * ] severityValue and severityNumber minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07. The lower the number, the higher the priority:
Syntax:
Mode(s): off disables log messages for all event categories or for a specified event category eventCategory log category; refer to the CLI online Help for available options filters removes all log filters for the event category instanceTree log-specific filter parameters; refer to the CLI online Help for available options * resets all log severities, system wide and individual, to default settings
log unlimit ERX Edge Routers
245
log unlimit
Description: Syntax: Removes the limit on the number of outstanding buffers for an event category. The no version returns the number of buffers to the default value. [ no ] log unlimit [ eventCategory ] Mode(s): eventCategory log category; refer to the CLI online Help for available options
User Exec, Privileged Exec, Global Configuration
log verbosity
Description: Syntax: Sets the verbosity level for a selected category. The no version returns the log verbosity to its default value, low. log verbosity verbosityLevel [ eventCategory ] no log verbosity [ verbosityLevel ] [ eventCategory ] verbosityLevel specifies the verbosity for the log category:
low terse (default) medium moderate detail high verbose

Mode(s): eventCategory log category; refer to the CLI online Help for available options
login
Description: Syntax: Mode(s): Requires you to log in with a password. The no version removes the password requirement and allows connections without a password. [ no ] login Line Configuration Note: If this command has been configured and no password has been configured, access to Telnet is refused.
246
login authentication
login authentication
Description: Applies an AAA authentication list to the vty sessions that you specified for AAA authentication.The no version removes all authentication methods, which means the system accepts Telnet sessions without challenge. login authentication authListName no login authentication Mode(s): authListName specifies an authentication list name of up to 32 characters
Syntax:
Line Configuration
logout subscribers
Description: Syntax: Logs out the authenticated PPP users. If you do not specify a license, B-RAS configuration commands are disabled. There is no no version. logout subscribers { all | username userName | domain domainName | virtual-router vrName | port interfaceLocation } all all PPP sessions userName active PPP session whose names match the username domainName active PPP session whose usernames have that domain name vrName active PPP session whose interfaces are bound to a specific virtual router port active PPP subscribers for the port interfaceLocation location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Mode(s):
Privileged Exec
loopback ERX Edge Routers
247
loopback
Description: Specifies the loopback mode for a module controller or interface, or maps a loopback interface to a user domain name in Domain Map Configuration mode. The no version clears all loopback on the module or interface (the default), or deletes the mapping to the user domain name. Module controllers The options available vary depending on the module being configured. CE1 module: loopback { local | network { payload | line } } no loopback CT1 module: loopback { local | network { payload | line } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ ansi ] } } no loopback [ remote ] CT3, E3, or T3 module: loopback { local | network | payload } no loopback cOCx/STMx SONET controller (SONET/SDH section layer), OCx/STMx line modules: loopback { local | network } no loopback X.21/V.35 module: [ no ] loopback local loops the data back toward the router and sends an AIS out toward the network. network payload loops the data toward the network after the framer has processed the data. network line loops the data toward the network before the data reaches the framer. remote line fdl ansi sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 line, according to the ANSI T1.403 specification.
Syntax:
248
loopback
remote line fdl bellcore sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 line, according to the Bellcore TR-TSY-000312 specification. remote line inband sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback. remote payload [ fdl ] [ ansi ] sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 line. You can specify fdl and ansi, but it is not necessary. remote based on the last activate request sent to the remote end, sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end. network loops the data toward the network before the data reaches the framer. payload loops the data toward the network after the framer has processed the data.
Interfaces The options available vary depending on the interface being configured. ATM interface This command cannot be used on a subinterface: loopback { diagnostic | line } no loopback POS interface: [ no ] loopback internal | line diagnostic places the interface into internal loopback line ATM interface: places the interface into external loopback; POS interface: connects the received network signal directly to the transmit network signal. When configured in line loopback mode, the system never receives data from the network. internal connects the local transmitted signal to the local received signal
User Domain Name loopback interface-number no loopback Mode(s): interface-number interface number in the range 132000
Controller Configuration, Interface Configuration, Domain Map Configuration
lsp-gen-interval ERX Edge Routers
249
lsp-gen-interval
Description: Syntax: Sets the minimum interval at which originated IS-IS link state packets are generated on a per LSP basis. The no version restores the default interval. lsp-gen-interval [ level-1 | level-2 ] seconds no lsp-gen-interval [ level-1 | level-2 ] Mode(s): level-1 sets interval for level 1 only level-2 sets interval for level 2 only seconds number in the range 0120; the minimum interval in seconds; the default value is 5 seconds
lsp-mtu
Description: Syntax: Sets the maximum size of an IS-IS link state packet generated by the software. The no version restores the default MTU size of 1497 bytes. lsp-mtu bytes no lsp-mtu Mode(s): bytes number in the range 1289180; the MTU size in bytes; the default value is 1497
lsp-refresh-interval
Description: Sets the link state packet rate at which locally generated IS-IS link state packets are periodically transmitted.The no version restores the default refresh interval. lsp-refresh-interval seconds no lsp-refresh-interval Mode(s): seconds number in the range 165535; the refresh interval in seconds; the default value is 900
Syntax:
250
macro
macro
Description: Executes a macro file, which can consist of one or more macros. If you do not use the macroName option to specify a macro, the command searches in the specified macro file for a macro named start, and returns an error if the start macro is not found. If you do not specify fileName.mac, you must specify name macroName; the command then searches only in local memory for a file called macroName.mac that contains the macroName macro. There is no no version. macro [ test | verbose ] { fileName.mac [ macroName [ arg ]* ] | name macroName [ arg ]* } test displays the output of the macro without issuing the commands to the system, and displays comments verbose echoes each command as the macro executes and displays comments fileName name of the file containing the macro; requires the .mac extension macroName name of a macro within the macro file arg zero or more arguments passed to the macro; if the argument contains a space or other special character, the argument must be enclosed within double quotation marks * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
Mode(s): All
map-class frame-relay
Description: Creates a map class. Command is used when configuring Frame Relay end-to-end fragmentation and reassembly. The no version removes the map-class. [ no ] map-class frame-relay mapName Mode(s): mapName name of the map class; use up to 64 characters
Syntax:
map-group ERX Edge Routers
251
map-group
Description: Associates a map list to an NBMA interface when configuring static mapping. The no version removes the association. Use in conjunction with the map-list command. [ no ] map-group name Mode(s): name name of the map group
Syntax:
map-list
Description: Creates a map list for an NBMA interface when configuring static mapping. The no version removes the map list. Use in conjunction with the map-group command. [ no ] map-list name Mode(s): name name of the map list
Syntax:
Map List Configuration
252
mark
mark
Description: Sets the precedence field of the ToS byte in the IP header to a specified value. Unlike the committed-mark-value, conformed-mark-value, and the exceeded-mark-value commands, the mark command is not tied to a rate limit profile, but marks packets based on a classifier control list. Use the suspend keyword to suspend a mark rule temporaily.The no version removes the mark rule from a policy list. [ no ] [ suspend ] mark { tosByteValue mask maskValue | tos-precedence tosPrecNum | dsfield dsFieldNum | tos tosNum } [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule tosByteValue ToS byte value to be assigned to packets; in the range 0255 maskValue mask to be used when applying ToS Byte values to packets; in the range 1255 tosPrecNum ToS precedence value to be assigned to packets; in the range 07 dsFieldNum DS field value to be assigned to packets; in the range 063 tosNum ToS value to be assigned to packets; in the range 0255 claclName classifier control list used to classify packets for this IP precedence policy precValue precedence of this rule in relation to other rules within this set in the range 032768
Syntax:
mask-val
Description: Sets the mask value. Use the mask-val command in conjunction with the committed-mark-value, conformed-mark-value, and exceeded-mark-value commands. The no version restores the default value, 255. [ no ] mask-val value value mask value in the range 0255. Use the following mask values to set the appropriate bits in the ToS field of the IP packet header:
Syntax:
IP Precedence 0xED (three most significant bits) DS Field 0xFC (six significant bits)
Mode(s): Rate Limit Profile Configuration
match as-path ERX Edge Routers
253
match as-path
Description: Matches a BGP AS path access list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match as-path listName [ listName ]* no match as-path [ listName ] * Mode(s): listName name of an AS path access list; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
Route Map Configuration
match community
Description: Matches a BGP community list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match community listName [ listName ]* [ exact-match ] no match community [ listName ]* [ exact-match ] listName a string of up to 32 characters that designates a community list; you can optionally use a regular expression to specify the listName exact-match limits the match to a route that contains only the communities contained in the specified list; cannot be used with a community list specified by a regular expression * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
Mode(s):
254
match distance
match distance
Description: Use to match any routes that have the specified administrative distance. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. Note: Matching a distance is useful only when applied to a route being redistributed out of a routing table. Distance is used to determine the relative preference between routes to the same prefix in order to pick the best route to that prefix in the routing table. Distance has no meaning in any other circumstance and any attempt to match distance will fail. Syntax: match distance distance [ distance ]* no match distance [ distance ] Mode(s): distance administrative distance in the range 0255 * indicates that one or more parameters can be repeated multiple times in a list in the command line
match extcommunity
Description: Matches a BGP extcommunity list. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match extcommunity listName [ listName ]* [ exact-match ] no match extcommunity [ listName ]* listName name of the extended-community list * indicates that one or more parameters can be repeated multiple times in a list in the command line exact-match limits the match to a route that contains only the extended communities contained in the specified list; cannot be used with an extended community list specified by a regular expression
Syntax:
Mode(s):
match ip address ERX Edge Routers
255
match ip address
Description: Matches any routes that have a destination network number address that is permitted by a standard or extended access list, a prefix list, or a prefix tree, or performs policy routing on packets. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match ip address { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* } no match ip address [ accessListName ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]* Mode(s): accessListName string of up to 32 alphanumeric characters listName name of a single prefix list; string of up to 32 characters treeName name of a single prefix tree; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
match ip next-hop
Description: Matches any routes that have a next-hop router address passed by the specified access list, prefix list, or prefix tree. You cannot mix references in the same match command; you can only specify either access list(s), prefix list(s), or prefix tree(s). The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match ip next-hop { accessListName [ accessListName ]* | prefix-list listName [ listName ]* | prefix-tree treeName [ treeName ]* } no match ip next-hop [ accessListNumber ]* | prefix-list [ listName ]* | prefix-tree [ treeName ]* Mode(s): accessListName name of a single standard access list; string of up to 32 characters listName name of a single prefix list; string of up to 32 characters treeName name of a single prefix tree; string of up to 32 characters * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
256
match level
match level
Description: Matches import routes for the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match level { backbone | level-1 | level-1-2 | level-2 | stub-area } * no match level [ backbone | level-1 | level-1-2 | level-2 | stub-area ] Mode(s): backbone an OSPF backbone area level-1 a level 1 area level-1-2 a level 1 and a level 2 area level 2 a level 2 subdomain stub-area an OSPF NSSA area * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
match metric
Description: Matches a route for the specified metric value. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match metric metricValue [ metricValue ]* no match metric [ metricValue ] Mode(s): metricValue number in the range 04294967295, which indicates the preference value for a specific route in a route map * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
match metric-type
Description: Syntax: Matches routes having the specified metric type. The no version removes the match clause from a route map. match metric-type { external | internal } no match metric-type [ external | internal ] Mode(s): external IS-IS external metric type internal IS-IS internal metric type
match route-type ERX Edge Routers
257
match route-type
Description: Matches routes of the specified type. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match route-type internal [ intra | inter ] [ level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]* match route-type external [ type-1 | type-2 ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]* match route-type { level-1 | level-2 } [ internal [ intra | inter ] ] [level-1 | level-2 ] [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ]* match route-type { level-1 | level-2 } [ external [ type-1 | type-2 ] ] [ level-1 | level-2 ] [ internal [ intra | inter ] ] [ level-1 | level-2 ]* no match route-type [ internal [ intra | inter ] | external [ type-1 | type-2 ] | level-1 | level-2 ] internal internal routes
Syntax:
intra OSPF intra-area routes inter OSPF interarea routes

external external routes
type-1 OSPF type 1 external routes type-2 OSPF type 2 external routes
Mode(s): level-1 IS-IS level 1 routes level-2 IS-IS level 2 routes * indicates that one or more parameters can be repeated multiple times in a list in the command line
match-set summary prefix-tree

Description: Sets condition for a route map that matches routes based on the network base address set in the specified prefix tree and summarizes them by preserving only the bits set in the prefix tree. The no version disables the use of the prefix tree by the route map. match-set summary prefix-tree treeName no match-set summary prefix-tree Mode(s): treeName name of the prefix tree
Syntax:
258
match tag
match tag
Description: Matches the tag value of the destination routing protocol. The no version removes the match clause from a route map unless you specify a value, in which case only that value is removed from the match clause. match tag tagValue [ tagValue ]* no match tag [ tagValue ]* Mode(s): tagValue number in the range 04294967295 * indicates that one or more parameters can be repeated multiple times in a list in the command line
Syntax:
maximum-paths
Description: Controls the maximum number of equal-cost paths to the same destination that BGP, IS-IS, OSPF, or RIP can install in the routing table to support ECMP. For BGP, issue the command from Router Configuration mode to apply to routes in the global RIB. In Address Family Configuration mode, issue the command only in the context of IPv4 unicast address families to apply the value only to routes in the global RIB or the specific VRF for the IPv4 unicast address family; VPNv4 address families are not supported. For IS-IS, OSPF, or RIP, issue from Router Configuration mode. The no version restores the default value, 1 path for BGP or 4 paths for IS-IS, OSPF, and RIP. Syntax: For BGP: maximum-paths [ ibgp ] maxPaths no maximum-paths [ ibgp ] [ maxPaths ] ibgp specifies that the maxPaths value applies only to routes received from internal (IBGP) peers; if this keyword is not specified, the maxPaths value applies only to routes received from external (EBGP) peers maxPaths maximum number of parallel paths (routes) in the range 16
For IS-IS and RIP: maximum-paths maxPaths no maximum-paths maxPaths maximum number of parallel paths (routes) in the range 116
For OSPF: [ no ] maximum-paths maxPaths Mode(s): maxPaths maximum number of parallel paths (routes) in the range 116
Address Family Configuration, Router Configuration, VRF Configuration
maximum routes ERX Edge Routers
259
maximum routes
Description: Sets a warning threshold and maximum limit for routes imported by a PE router into a VRF from associated CE routers. The no version removes the limit and warning threshold. maximum routes limit { warningThreshold | warning-only } no maximum routes limit number in the range 14294967295 that when exceeded prevents routes from being imported into the routing table; when first exceeded generates a limit-exceeded log entry; if the route count fluctuates below and up to this value, an interval of five minutes must pass before another limit-exceeded log entry can be generated warningThreshold percentage in the range 1100 that when first exceeded generates a warning-threshold-exceeded log entry; if the route count fluctuates around this value, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated warning-only causes the limit to function as a warningThreshold; specifies that exceeding the limit generates a warning-threshold-exceeded log entry instead of a limit-exceeded log entry and permits routes exceeding the limit to be added to the routing table; if the route count fluctuates around the limit, an interval of five minutes must pass before another warning-threshold-exceeded log entry can be generated
Syntax:
Mode(s):
VRF Configuration
max-lsp-lifetime
Description: Syntax: Sets the maximum time that IS-IS link state packets persist without being refreshed. The no version restores the default time. max-lsp-lifetime seconds no max-lsp-lifetime Mode(s): seconds number in the range 165535; the lifetime of LSP in seconds; the default value is 1200 seconds
260
max-response-failure
max-response-failure
Description: Terminates a test when the maxFailureValue is reached. That is, when there is no response to a designated number of operation requests, the test is terminated. This feature applies only to pathEcho entries. The no version restores the default value, five consecutive failures. max-response-failure maxFailureValue no max-response-failure Mode(s): maxFailureValue number of operation requests not responded to; 0 turns this feature off; the default is 5
Syntax:
RTR Configuration
max-sessions
Description: For RADIUS, specifies the number of outstanding requests to a server. The no version reverts to the default value. For tunnelss, sets the maximum sessions per tunnel. The no version disables the feature. The default version sets the value to zero. Syntax: For RADIUS: max-sessions sessionLimit no max-sessions sessionLimit maximum number of outstanding requests to a specific server in the range 104000; the default is 255
For tunnels: max-sessions maxSessionsPerTunnel default max-sessions no max-sessions Mode(s): maxSessionsPerTunnel maximum number of sessions that can be configure on a tunnel in the range 04294967295; the default is zero
Domain Map Tunnel Configuration, Radius Configuration
mdl carrier
Description: Specifies that a T3 interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] mdl carrier Controller Configuration
Syntax: Mode(s):
mdl string ERX Edge Routers
261
mdl string
Description: Allows you to specify an MDL message on a T3 interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages. mdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiCode | port portValue | generator genValue } no mdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): eicValue equipment identification code; 110 characters; default is the null value. ficValue frame identification code; 110 characters; default is the null value. licValue line identification code; 111 characters; default is the null value. unitValue unit identification code; 16 characters; default is the null value. pfiCode facility identification code to send in the MDL path message; 138 characters; default is the null value. portValue equipment port number to send in the MDL idle signal message; 138 characters; default is the null value. genValue generator number to send in the MDL test signal message; 138 characters; default is the null value.
Syntax:
mdl transmit
Description: Syntax: Transmits an MDL message from a T3 interface. The no version disables transmission of the specified MDL message or all MDL messages. [ no ] mdl transmit { path-id | idle-signal | test signal } no mdl transmit Mode(s): path-id MDL path message; default is disabled idle-signal MDL idle signal message; default is disabled test-signal MDL test signal message; default is disabled
262
medium ipv4
medium ipv4
Description: Syntax: Specifies the medium type of an L2TP or L2F tunnel to IPv4 (the only medium type currently supported). The no version restores the default value, ipv4. medium ipv4 no medium Mode(s): Domain Map Tunnel Configuration
member-interface
Description: Adds an MLPPP link interfacealso known as an MLPPP bundle memberto an MLPPP bundle or adds an MFR link interfacealso known as an MFR bundle member to an MFR bundle. The no version deletes the specified interface from the MLPPP or MFR bundle. [ no ] member-interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type: serial or pos interfaceSpecifier particular interface; see Interface Types and Specifiers in About This Guide
Syntax:
memory
Description: Configures memory warning parameters. When the system reaches the high memory utilization value, it sends warning messages. When memory usage falls to the abated memory utilization value, the system stops sending warning messages. The no version returns the memory warning parameters to the default values. [ no ] memory warning highUtilization abatedUtilization Mode(s): highUtilization high memory utilization value; the range is 199, and the default is 85 abatedUtilization abated memory utilization value; the range is 199, and the default is 75
Syntax:
message-digest-key md5 ERX Edge Routers
263
message-digest-key md5
Description: Syntax: Enables OSPF MD5 authentication for the remote-neighbor interface and configures the MD5 key. The no version deletes an MD5 key. message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey no message-digest-key keyID keyID key identifier in the range 1255 md5 specifies use of the MD5 algorithm 0 indicates that the msgDigestKey is entered in unencrypted form (plaintext); this is the default option 8 indicates that the msgDigestKey is entered in encrypted form (ciphertext) msgDigestKey the OSPF password. The password can be a continuous string of up to 16 alphanumeric characters.
Note: If all the MD5 keys have been deleted, the authentication type is still MD5, but you need to configure MD5 keys. Note: To disable MD5 authentication for the remote-neighbor interface, use the authentication-none command. Mode(s): Remote Neighbor Configuration
metric-style narrow
Description: Configures the system to generate and accept only old-style IS-IS TLVs with narrow (six-bit) metric fields. If you issue this command, the value configured with the isis metric command can range only from 063. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style narrow [ transition ] [ level-1 | level-2 | level-1-2 ] Mode(s): transition configures the system to additionally accept new-style TLVs with wider metric fields level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing
Syntax:
264
metric-style transition
metric-style transition
Description: Configures the system to generate and accept both old-style IS-IS TLVs with narrow (six-bit) metric fields and new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 016777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style transition [ level-1 | level-2 | level-1-2 ] Mode(s): level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing
Syntax:
metric-style wide
Description: Configures the system to generate and accept only new-style IS-IS TLVs with wider metric fields. If you issue this command, the value configured with the isis metric command can range from 016777215. The no version restores the default value, which is to generate and accept only old-style TLVs with narrow (six-bit) metric fields. [ no ] metric-style wide [ transition ] [ level-1 | level-2 | level-1-2 ] Mode(s): transition configures the system to additionally accept old-style TLVs with narrow (six-bit) metric fields level-1 configuration applies only to level 1 routing level-2 configuration applies only to level 2 routing level-1-2 configuration applies to both level 1 and level 2 routing
Syntax:
motd-banner
Description: Controls display of a message-of-the-day banner (configured with the banner command) on a particular line when a connection is initiated. The no version disables the banner. [ no ] motd-banner Line Configuration
Syntax: Mode(s):
mpls ERX Edge Routers
265
mpls
Description: Enables, disables, or deletes MPLS on either a virtual router or on an interface. MPLS does not exist by default and must be created explicitly or implicitly. If it is created implicitly, MPLS remains disabled until explicitly enabled. The no mpls version halts MPLS on the virtual router or interface and deletes the MPLS configuration. The no mpls disable version enables MPLS that was previously disabled or implicitly created on the virtual router or interface. [ no ] mpls [ traffic-eng tunnels ] [ disable ] Mode(s): traffic-eng tunnels optional keyword for compatibility with non-ERX implementations disable stops MPLS on the virtual router, but leaves the MPLS global configuration intact
Syntax:
mpls atm vci range

Description: Specifies the range for virtual circuit identifiers used for MPLS on ATM major interfaces. An interface can support LDP, RSVP-TE, or both as the label distribution protocol. You can set VCI ranges independently for each protocol. If you do not specify a keyword, the range applies to both protocols. The no version deletes the range. mpls atm vci range [ ldp | rsvp ] minVCI maxVCI no mpls atm vci range [ ldp | rsvp ] Mode(s): ldp specifies the range when LDP is used as the label distribution protocol rsvp specifies the range when RSVP is used as the label distribution protocol minVCI lowest virtual circuit identifier acceptable for a label, a value from 3365535 maxVCI highest virtual circuit identifier acceptable for a label, a value from 3365535
Syntax:
266
mpls atm vpi range
mpls atm vpi range

Description: Specifies the range for virtual path identifiers used for MPLS on ATM major interfaces. An interface can support LDP, RSVP-TE, or both as the label distribution protocol. You can set VPI ranges independently for each protocol. If you do not specify a keyword, the range applies to both protocols. The no version deletes the range. mpls atm vpi range [ ldp | rsvp ] minVPI maxVPI no mpls atm vpi range [ ldp | rsvp ] Mode(s): ldp specifies the range when LDP is used as the label distribution protocol rsvp specifies the range when RSVP-TE is used as the label distribution protocol minVPI lowest virtual path identifier acceptable for a label, a value in the range 0255 maxVPI highest virtual path identifier acceptable for a label, a value in the range 0255
Syntax:
mpls bandwidth
Description: Syntax: Specifies the total bandwidth reservable for MPLS on the interface. The no version restores the default value of 0. { ip rsvp | mpls} bandwidth bandwidth no { ip rsvp | mpls} bandwidth Mode(s): ip rsvp keyword for compatibility with non-ERX implementations of MPLS mpls specify this keyword for our MPLS implementation bandwidth reservable bandwidth in kilobits per second, a value in the range 110000000
mpls disable
Description: Disables the specified label distribution protocol on the interface. The no version reenables the label distribution protocol when it was previously disabled on the interface. [ no ] mpls { ldp | rsvp } disable Interface Configuration
Syntax: Mode(s):
mpls explicit-path ERX Edge Routers
267
mpls explicit-path
Description: Syntax: Defines an explicit path by name or ID number and also enables or disables the explicit path. The no version deletes the explicit path. { ip | mpls } explicit-path { name name | identifier number } [ enable | disable ] no { ip | mpls } explicit-path { name name | identifier number } ip keyword for compatibility with non-ERX implementations mpls specify this keyword for our MPLS implementation name name for the explicit path; string of up to 20 characters number number identifying the explicit path in the range 165535 enable reenables the explicit path that was previously disabled on the virtual router; to prevent a partially configured explicit path from being used, do not enable it until you have finished configuring or modifying the path disable disables the explicit path that was previously enabled on the virtual router
Mode(s):
mpls ip propagate-ttl
Description: Controls the value for the TTL field in the MPLS header when a label is assigned to an IP packet. Enabled by default, this command sets the TTL to the TTL value from the IP packet header. The no version sets the value to 255 and controls how the network structure is hidden from the traceroute command. The default version reverts to the global default, causing the TTL field to be copied from the IP packet header and enabling the traceroute command to show all the hops in the network., and propagating the label TTL into the IP header at the tunnel egress. mpls ip propagate-ttl [ forwarded | local ] { no | default } mpls ip propagate-ttl [ forwarded | local ] Mode(s): forwarded hides the network structure from traceroute only for forwarded packets local hides the network structure from traceroute only for local packets
Syntax:
268
mpls label-range
mpls label-range
Description: Syntax: Specifies the range for the platform label space; all configured virtual routers can share this range. The no version restores the default values, 161048575. mpls label-range minLabel maxLabel no mpls label-range Mode(s): minLabel lowest number acceptable for a label, a value in the range 161048575 maxLabel highest number acceptable for a label, a value in the range 161048575
mpls ldp advertise-labels

Description: Syntax: Controls the distribution of incoming labels distributed by LDP. The no version halts advertisement of all incoming labels or the specified labels. mpls ldp advertise-labels { host-only | for routeAccessList [ to neighborAccessList ] } no mpls ldp advertise-labels { policy-list | host-only | for routeAccessList [ to neighborAccessList ] } Mode(s): host-only advertises only labels for host routes (routes with a 32-bit mask) routeAccessList name of access list identifying routes for which label advertisement is permitted or denied neighborAccessList name of access list identifying neighbors to which the LSR advertises labels policy-list deletes all lists configured with the for routeAccessList option
mpls ldp discovery transport-address

Description: Syntax: Specifies the transport address of the local peer advertised in LDP discovery hello messages. The no version halts advertisement of the address. mpls ldp discovery transport-address { interface | ipAddress } no mpls ldp discovery transport-address Mode(s): interface specifies that the interface IP address is advertised as the transport address ipAddress IP address advertised as the transport address
mpls ldp no-route retries ERX Edge Routers
269
mpls ldp no-route retries

Description: Specifies the number of attempts that will be made to set up an LSP for topology-driven LDP after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. mpls ldp no-route retries retryNum no mpls ldp no-route retries Mode(s): retryNum number of retry attempts in the range 065535
Syntax:
mpls ldp no-route retry-time

Description: Specifies the interval in seconds between attempts to set up an LSP for topology-driven LDP after a failure due to no available route. The no version restores the default value of 30 seconds. mpls ldp no-route retry-time retryTime no mpls ldp no-route retry-time Mode(s): retryTime interval in the range 160
Syntax:
mpls ldp retries

Description: Specifies the number of attempts that will be made to set up an LSP for topology-driven LDP after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. mpls ldp retries retryNum no mpls ldp retries Mode(s): retryNum number of retry attempts in the range 065535
Syntax:
270
mpls ldp retry-time
mpls ldp retry-time

Description: Specifies the interval in seconds between attempts to set up an LSP for topology-driven LDP after a failure other than one due to no available route. The no version restores the default value of 30 seconds. mpls ldp [ no-route ] retry-time retryTime no mpls ldp retry-time Mode(s): retryTime interval in the range 160
Syntax:
mpls ldp session retries

Description: Specifies the number of attempts that will be made to set up an LDP session. The default value of 0 means the attempts will be made until successful. The no version restores the default value. mpls ldp session retries retryNum no mpls ldp session retries Mode(s): retryNum number of attempts in the range 065535
Syntax:
mpls ldp session retry-time

Description: Syntax: Use to specify the interval in seconds between attempts to set up an LDP session. The no version restores the default value of 30 seconds. mpls ldp session retry-time retryTime no mpls ldp session retry-time Mode(s): retryTime interval in the range 060
mpls ldp targeted-hello receive list ERX Edge Routers
271
mpls ldp targeted-hello receive list

Description: Syntax: Configures the list of peer addresses from which MPLS accepts targeted hello messages. The no version removes the list of peer addresses. [ no ] mpls ldp targeted-hello receive list { access-list accessListName | ipAddress [ ipAddress ]* } Mode(s): accessListName string of up to 32 alphanumeric characters that identifies an access list ipAddress IP address of a peer * indicates that one or more parameters can be repeated multiple times in a list in the command line
mpls ldp targeted-hello send list

Description: Syntax: Configures the list of peer addresses to which MPLS sends targeted hello messages. The no version removes the list of peer addresses. [ no ] mpls ldp targeted-hello send list { access-list accessListName | ipAddress [ ipAddress ]* } Mode(s): accessListName string of up to 32 alphanumeric characters that identifies an access list ipAddress IP address of a peer * indicates that one or more parameters can be repeated multiple times in a list in the command line
mpls lsp no-route retries

Description: Specifies the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. mpls lsp no-route retries retryNum no mpls lsp no-route retries Mode(s): retryNum number of retry attempts in the range 065535
Syntax:
272
mpls lsp no-route retry-time
mpls lsp no-route retry-time

Description: Specifies the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value of 5 seconds. mpls lsp no-route retry-time retryTime no mpls lsp no-route retry-time Mode(s): retryTime interval in the range 160
Syntax:
mpls lsp retries

Description: Specifies the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. mpls lsp retries retryNum no mpls lsp retries Mode(s): retryNum number of retry attempts in the range 065535
Syntax:
mpls lsp retry-time

Description: Specifies the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value of 5 seconds. mpls lsp [ no-route ] retry-time retryTime no mpls lsp retry-time Mode(s): retryTime interval in the range 160
Syntax:
mpls match exp-bits ERX Edge Routers
273
mpls match exp-bits

Description: Sets the traffic class and color for incoming traffic matching the specified EXP bits value in the MPLS shim header. The no version reverts to the default behavior for traffic matching the specified EXP bits value, setting neither traffic class nor color. mpls match exp-bits bitValue set traffic-class className color { green | yellow | red } no mpls match exp-bits bitValue Mode(s): bitValue value in the range 07 that matches the corresponding binary value (000111) for the three EXP bits className name of a traffic class; the system supports up to eight traffic classes green sets packet color to green, indicating a low drop preference yellow sets packet color to yellow, indicating a medium drop preference red sets packet color to red, indicating a high drop preference
Syntax:
mpls match traffic-class

Description: Sets the EXP bits in the MPLS shim header of outgoing traffic matching the specified combination of traffic class and color. The no version reverts to the default behavior for traffic matching the specified traffic class and color combination. The default behavior sets the EXP bits to 000 for traffic entering an LSP and has no effect on the EXP bits for transit traffic. mpls match traffic-class className color { green | yellow | red } set exp-bits bitValue no mpls match traffic-class className color { green | yellow | red } Mode(s): className name of a traffic class; the system supports up to eight traffic classes green sets packet color to green, indicating a low drop preference yellow sets packet color to yellow, indicating a medium drop preference red sets packet color to red, indicating a high drop preference bitValue value in the range 07 that sets the corresponding binary value (000111) for the three EXP bits
Syntax:
274
mpls profile
mpls profile
Description: In Global Configuration mode, creates or modifies a configuration profile for the specified label distribution protocoleither LDP or RSVP-TE. Places the CLI in either LDP Configuration mode or RSVP Configuration mode. You can specify the name of a previously created profile to modify its parameters. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile is assumed. The no version deletes the specified profile. In Interface Configuration mode, enables either LDP or RSVP-TE on the interface. You can specify the name of a profile configured in Global Configuration mode to set the parameters for the protocol. If you specify a profile that was not previously configured, the command creates the new profile with the factory default settings. If you do not specify a profile name, the factory default profile values are applied. The no mpls version deletes the protocol on the interface. The no mpls profile version reverts to the default profile on the interface. In Global Configuration mode: mpls { ldp | rsvp } [ interface ] profile [ profileName ] no mpls { ldp | rsvp } interface profile profileName In Interface Configuration mode: mpls { ldp | rsvp } [ profile profileName ] no mpls { ldp | rsvp } [ profile ] ldp specifies LDP as the label distribution protocol rsvp specifies RSVP-TE as the label distribution protocol interface keyword for compatibility with non-ERX implementations profileName name of a profile to be created or modified (Global Configuration mode), applied to an interface (Interface Configuration mode), or deleted (both modes); the profile sets the values for the protocol parameters; until you modify the profile settings, the values match those of the implicit default profile
Syntax:
Mode(s):
mpls-relay ERX Edge Routers
275
mpls-relay
Description: Syntax: Route traffic on the specified interface over an MPLS LSP. { mpls-relay remoteAddress | route interface interfaceType interfaceSpecifier } [ vc-id ] vcidValue [ group ID groupIdValue ] no { mpls-relay | route } [ group ID groupIdValue ] Mode(s): mpls-relay routes the traffic on this interface over an MPLS LSP remoteAddress destination ip address route interface routes the traffic on this interface over another one interfaceType interface type: serial or pos interfaceSpecifier particular interface; see Interface Types and Specifiers in About This Guide vcidValue virtual connection ID; can be any 32-bit value. The two ends across the MPLS core must match inside each VC type. groupIdValue group of virtual connections ID; can be any 32-bit value
mpls reoptimize
Description: Syntax: Performs an immediate check for better paths for all existing LSPs. There is no no version. mpls [ traffic-eng ] reoptimize Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations
mpls reoptimize timers frequency

Description: Syntax: Specifies the frequency at which existing LSPS are checked for better paths. The no version restores the default value of 3600 seconds. mpls [ traffic-eng ] reoptimize timers frequency seconds no mpls [ traffic-eng ] reoptimize timers frequency Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations seconds number of seconds in the range 0604800; a value of zero means that no reoptimization is performed
276
mpls rsvp message-bundling
mpls rsvp message-bundling

Description: Enables RSVP-TE to send bundle messages, each of which includes multiple standard RSVP-TE messages, to reduce the overall message processing overhead. The no version disables RSVP-TE message bundling. [ no ] mpls rsvp message-bundling RSVP Configuration
Syntax: Mode(s):
mpls rsvp refresh-reduction

Description: Enables RSVP-TE summary refresh and reliability features, including the message ID object, the message ack object, and summary refresh messages. The no version disables summary refresh and reliability. [ no ] mpls rsvp refresh-reduction RSVP Configuration
Syntax: Mode(s):
mpls spf-use-any-best-path
Description: Enables the SPF calculations to consider both the best IGP (IS-IS) paths and the MPLS tunnel to reach the tunnel endpoint. The no version restores the default value, which is to always use the MPLS tunnel to reach the tunnel endpointthe IGP best paths are not considered. [ no ] mpls spf-use-any-best-path Router Configuration
Syntax: Mode(s):
mpls topology-driven-lsp
Description: Enables topology-driven LSP creation on the virtual router or in an IP profile. The no version disables topology-driven LSPs on the virtual router or in IP profiles. mpls topology-driven-lsp [ ip-profile ipProfileName ] no mpls topology-driven-lsp [ ip-profile ] Mode(s): ipProfileName name of an IP profile used for creating IP interfaces over topology-driven LSPs
Syntax:
mpls topology-driven-lsp ip-interfaces ERX Edge Routers
277
mpls topology-driven-lsp ip-interfaces

Description: Syntax: Enables the creation of IP interfaces over topology-driven LSPs. The no version prevents creation of IP interfaces over topology-driven LSPs. mpls topology-driven-lsp ip-interfaces [ egress | ingress ] [ { access-list | prefix-list } listName ] [ host-only ] no mpls topology-driven-lsp ip-interfaces [ egress | ingress ] [ host-only ] [ policy-list ] Mode(s): egress specifies that IP interfaces are created only over the LSP egress ingress specifies that IP interfaces are created only over the LSP ingress access-list specifies listName is an access list prefix-list specifies that listName is a prefix list listName name of access list or prefix list that specifies LSPs over which IP interfaces are created host-only specifies that IP interfaces are created only over LSPs to host addresses policy-list removes previously applied access lists or prefix lists
mpls traffic-eng
Description: Syntax: Enables flooding of MPLS traffic-engineering link information into the specified IS-IS level. Flooding is disabled by default. The no version disables flooding. mpls traffic-eng { level-1 | level-2 } no mpls traffic-eng { level-1 | level-2 | router-id } Mode(s): level-1 floods IS-IS level 1 level-2 floods IS-IS level 2
mpls traffic-eng administrative-weight

Description: Syntax: Specifies the administrative weight for the interface. The no version restores the default value, which matches the IGP-determined weight (cost). mpls traffic-eng administrative-weight weight no mpls traffic-eng administrative-weight Mode(s): weight administrative weight, a value in the range04294967295
278
mpls traffic-eng area
mpls traffic-eng area

Description: Syntax: Enables flooding of MPLS traffic-engineering link information into the specified OSPF area. Flooding is disabled by default. The no version disables flooding. [ no ] mpls traffic-eng area { areaId | areaIdInt } Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value in the range 04294967295
mpls traffic-eng attribute-flags

Description: Specifies attributes for the interface for traffic engineering. The attributes are compared with tunnel affinity bits to determine links eligibility for the tunnel. The no version restores the default value, 0x0. mpls traffic-eng attribute-flags bitmask no mpls traffic-eng attribute-flags Mode(s): bitmask mask that sets the attributes, a value in the range 0x00xFFFFFFFF
Syntax:
mpls traffic-eng flood thresholds ERX Edge Routers
279
mpls traffic-eng flood thresholds

Description: Specifies thresholds for the flooding of the current reservable bandwidth throughout the network. You can configure a set of thresholds for increases or decreases in bandwidth. Flooding is triggered when the reservable bandwidth increases past any up threshold or decreases past any down threshold. The no version restores the following default values: Syntax: For increases in bandwidth (up changes) 15, 30, 45, 60, 75, 80, 85, 90, 95, 97, 98, 99, 100 For decreases in bandwidth (down changes) 100, 99, 98, 97, 96, 95, 90, 85, 80, 75, 60, 45, 30, 15
mpls traffic-eng flood thresholds { up | down } percentage [ percentage ]* no mpls traffic-eng flood thresholds { up | down } up specifies that an increase in bandwidth past the threshold triggers flooding down specifies that a decrease in bandwidth past the threshold triggers flooding percentage percentage of reservable bandwidth, a value from 1 to 100 percent for increasing bandwidth and from 0 to 99 percent for decreasing bandwidth * indicates that the percentage can be repeated multiple times in a list in the command line
Mode(s):
mpls traffic-eng link-management timers periodic-flooding

Description: Specifies the interval at which bandwidth values are flooded to the entire network. Configuring a value of 0 turns off flooding.The no version restores the default value, 180. mpls traffic-eng link-management timers periodic-flooding frequency no mpls traffic-eng link-management timers periodic-flooding Mode(s): frequency interval in seconds, a value from 0 to 3600
Syntax:
280
mpls traffic-eng router-id
mpls traffic-eng router-id

Description: Specifies a stable interface to be used as a router ID for MPLS traffic engineering with IS-IS, typically a loopback interface. The interface acts as the destination node for tunnels originating at other nodes. The no version removes the interface as a router ID. [ no ] mpls traffic-eng router-id interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
mpls tunnels profile

Description: Creates or disables a tunnel profile for MPLS. The no mpls tunnels profile version deletes the tunnel profile. The no mpls tunnels profile disable version reenables tunnels previously disabled. [ no ] mpls tunnels profile profileName [ disable ] Mode(s): profileName name of a tunnel configuration profile used for MPLS tunnels disable disables all tunnels associated with the profile
Syntax:
mru
Description: Sets the maximum allowable size in bytes of the maximum receive unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type. mru mruSize no mru mruSize maximum allowable size of the MRU CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces default is 1600; range is 432765 HSSI interfaces default is 4770; range is 432768 POS interfaces default is 4470; range is 165529 Mode(s): Interface Configuration
Syntax:
mtrace ERX Edge Routers
281
mtrace
Description: Syntax: Discovers the routes that multicast packets follow when travelling to their destinations. There is no no version. mtrace sourceAddress [ destinationAddress [ groupAddress [ responseAddress ] ] ] [ maxHops ] [ detailed ] sourceAddress DNS name or unicast IP address of the multicast-capable device at the beginning of the path. destinationAddress DNS name or unicast address of the device at the end of the path. The default destination is the system from which you type the command. groupAddress DNS name or multicast address of the group for which you want to trace routes. The default address is 224.2.0.1 (the group used for MBONE Audio). responseAddress IP address that receives the results of the trace maxHops maximum number of hops allowed for the trace. The default is 64. detailed provides a detailed description of the trace, rather than a summary
Mode(s):
mtu
Description: Sets the maximum allowable size in bytes of the maximum transmission unit for CE1, cOCx/STMx, CT1, CT3, E3-FRAME, Ethernet, HSSI, POS, T3-FRAME, or X.21/V.35 interfaces. The no version restores the default value, which varies according to interface type. This command is not available for the Ethernet interface on the SRP module. mtu mtuSize no mtu mtuSize maximum allowable size of the MTU CE1, CT1, cOCx/STMx, CT3, E3-FRAME, T3-FRAME, and X.21/V.35 interfaces default is 1600; range is 432765 HSSI interfaces default is 4770; range is 432768 Ethernet interfaces default is 1518; range is 649188, except on the FE-2 and FE-8 I.O modules, where the range is 649042; you cannot configure MTU on Ethernet interfaces on the SRP module POS interfaces default is 4470; range is 165529 Mode(s): Interface Configuration
Syntax:
282
multicast group port limit
multicast group port limit

Description: Limits the number of IGMP groups that a port can accept. The no version restores the default situation, in which there is no limit to the number of IGMP groups the port can accept. multicast group port slot/port limit groupLimit no multicast group port slot/port limit Mode(s): slot number of slot in which the line module resides port number of port groupLimit maximum number of IGMP groups that an interface can accept in the range 064,000
Syntax:
neighbor ERX Edge Routers
283
neighbor
Description: For OSPF, configures OSPF neighbors on an NBMA network. For RIP, specifies a RIP neighbor to which the router sends unicast messages. The no version removes the neighbor (OSPF and RIP) or restores the default values (OSPF). For OSPF: neighbor ipAddress [ pollinterval seconds | priority number ] no neighbor ipAddress [ pollinterval | priority ] ipAddress IP address of the neighbors interface; this interface must itself be configured for the NBMA network type number router priority value of the neighbor in the range 14294967295; the default is 0 seconds interval in seconds at which the neighbor is polled; should be much larger than the hello interval (per RFC 1247); ranges from 0255, the default is 120 seconds
Syntax:
For RIP: [ no ] neighbor ipAddress Mode(s): ipAddress IP address of the neighbors interface; this interface must be defined as a passive interface with the passive-interface command
neighbor activate
Description: Specifies a peer or peer group with which routes of the current address family are exchanged. A peer or peer group can be activated in more than one address family. By default, a peer or peer group is activated only for the IPv4 unicast address family. The address families that are actively exchanged over a BGP session are negotiated when the session is established. The no version indicates that routes of the current address family should not be exchanged with the peer or peer group. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } activate ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
Syntax:
Mode(s):
284
neighbor advertisement-interval
neighbor advertisement-interval
Description: Syntax: Sets the minimum interval between the sending of BGP updates for a given prefix. The no version restores the default interval. neighbor { ipAddress | peerGroupName } advertisement-interval seconds no neighbor { ipAddress | peerGroupName } advertisement-interval [ seconds ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. seconds interval in seconds between update messages; range is from 0600; default is 30 seconds for external peers and 5 seconds for internal peers
Mode(s):
neighbor allowas-in
Description: Specifies the number of times that the AS path of a received route may contain the recipient BGP speakers AS number and still be accepted. The no version restores the default state, which is to reject as a loop any route whose path contains the speakers AS number. [ no ] neighbor { ipAddress | peerGroupName } allowas-in number ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 110
Syntax:
Mode(s):
neighbor as-override ERX Edge Routers
285
neighbor as-override
Description: Prevents routing loops between routers within a VPN by substituting the current routers AS number in routing tables for that of the neighboring router. The no version halts this substitution. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } as-override ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
286
neighbor capability
neighbor capability
Description: Controls advertisement of BGP capabilities to peers. Capability negotiation and advertisement of all capabilities, except the ORF capability, is enabled by default. The no version disables capability negotiation or prevents advertisement of the specified capability. The default version restores the default condition, advertising the capability. For all capabilities except ORF: [ no | default ] neighbor { ipAddress | peerGroupName } capability { negotiation | dynamic-capability-renegotiation | four-octet-as-numbers | route-refresh | route-refresh-cisco } For the ORF capability: neighbor { ipAddress | peerGroupName } capability orf { prefix-list | prefix-list-cisco } { send | receive | both } { no | default } neighbor { ipAddress | peerGroupName } orf { prefix-list | prefix-list-cisco } [ send | receive | both ] ipAddress neighbors IP address peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. negotiation determines whether the capabilities option is sent in the open message while establishing a session; if it is not sent, no capability negotiation is conducted with that peer dynamic-capability-renegotiation indicates support of renegotiation of capabilities (sending new capabilities or removing previously negotiated capabilities) without performing a hard clear of the BGP session four-octet-as-numbers indicates support of AS numbers and sub-AS numbers that are four octets in length, a range from 04294967295 route-refresh indicates support of route-refresh messages that request the peer to resend its routes to the system, enabling the BGP speaker to apply modified or new policies to the routes when it receives them again route-refresh-cisco indicates support of Cisco-proprietary (pre-standard) route-refresh messages for interoperability with older Cisco devices orf indicates support of cooperative route filtering to install a BGP speakers inbound route filter as an outbound route filter on the peer prefix-list installs the filterany inbound prefix list or distribute listas an outbound prefix list prefix-list-cisco installs the filterany inbound prefix list or distribute listas an outbound Cisco proprietary prefix list send sends inbound route filter to peer to install as outbound route filter
Syntax:
neighbor default-originate ERX Edge Routers
287
receive accepts inbound route filter from peer and installs it as outbound route filter; cannot be configured for a peer group or a peer that is a member of a peer groups both sends and accepts inbound route filters with peer for installation as outbound route filter
Mode(s):
neighbor default-originate
Description: Allows a BGP speaker (the local router) to send the default route 0.0.0.0/0 to a neighbor for use as a default route. The no version halts sending a default route to the neighbor. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } default-originate ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
neighbor description
Description: Syntax: Associates a textual description with a BGP neighbor. The no version removes the description. neighbor { ipAddress | peerGroupName } description text no neighbor { ipAddress | peerGroupName } description ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. text up to 80 characters of text that describes the neighbor
Mode(s):
288
neighbor distribute-list
neighbor distribute-list
Description: Distributes BGP neighbor information as specified in an access list. The no version removes an entry. Using distribute lists is one of several ways to filter BGP advertisements. You can also use route maps or use AS-path filters, as with the ip as-path access-list Global Configuration command and the neighbor filter-list command. neighbor { ipAddress | peerGroupName } distribute-list accessListName { in | out } no neighbor { ipAddress | peerGroupName } distribute-list [ accessListName ] { in | out } ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. accessListName string of up to 32 alphanumeric characters identifying an access list in applies list to incoming routes (inbound policy) out applies list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Syntax:
Mode(s):
neighbor ebgp-multihop
Description: Allows BGP to accept route updates from external peers residing on networks that are not directly connected. The no version halts accepting such routers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } ebgp-multihop [ ttl ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. ttl maximum number of hops to the peer; the value ranges from 1 to 255, with a default of 255
Syntax:
Mode(s):
neighbor filter-list ERX Edge Routers
289
neighbor filter-list
Description: Applies an AS path access list to advertisements inbound from or outbound to the specified neighbor, or assigns a weight to incoming routes that match the AS path access list. The no version stops the application of the list or assignment of the weight. To apply an access list: neighbor { ipAddress | peerGroupName } filter-list accessListName { in | out } no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] { in | out } To assign a weight: neighbor { ipAddress | peerGroupName } filter-list accessListName weight value no neighbor { ipAddress | peerGroupName } filter-list [ accessListName ] weight [ value ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. accessListName name of a single AS path access list; string of up to 32 characters in applies access list to incoming routes (inbound policy) out applies access list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy value number in the range 065535; assigns relative importance to incoming routes matching AS paths
Syntax:
Mode(s):
290
neighbor local-as
neighbor local-as
Description: Assigns a local AS number for the specified BGP peer or peer group. The no version restores the default value set globally for the BGP instance with the router bgp command. neighbor { ipAddress | peerGroupName } local-as number no neighbor { ipAddress | peerGroupName } local-as [ number ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 14294967295; the local AS to assign to the peer
Syntax:
Mode(s):
neighbor maximum-orf-entries
Description: Sets the maximum number of ORF entries of a particular type that are accepted from the specified neighbor. The no version restores the default value of no limits. neighbor ipAddress maximum-orf-entries maximum no neighbor ipAddress maximum-orf-entries [ maximum ] Mode(s): ipAddress neighbor IP address maximum maximum number of ORF entries in the range 04294967295; the default is no limit
Syntax:
neighbor maximum-prefix ERX Edge Routers
291
neighbor maximum-prefix
Description: Syntax: Sets the number of prefixes that can be received from a neighbor. The no version removes the maximum prefix limitation. neighbor { ipAddress | peerGroupName } maximum-prefix maximum [ threshold ] [ strict ] [ warning-only ] no neighbor { ipAddress | peerGroupName } maximum-prefix [ maximum ] [ threshold ] [ strict ] [ warning-only ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. maximum maximum number of prefixes; the default is no limit threshold percent of maximum at which to log a warning in the range 0100; the default is 75 strict checks the maximum prefix limit against all received routes rather than the default behavior of checking it only against accepted routes warning-only causes BGP software to log a warning, rather than reset the connection if the maximum or threshold value is exceeded
Mode(s):
neighbor maximum-update-size
Description: Syntax: Sets the maximum size of update messages transmitted to a BGP peer. The no version removes the maximum update size limitation. neighbor { ipAddress | peerGroupName } maximum-update-size value no neighbor { ipAddress | peerGroupName } maximum-update-size [ value ] ipAddress neighbor IP address peerGroupName name of the BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. value maximum update size in octets in the range 2564096; he default is 1024
Mode(s):
292
neighbor next-hop-self
neighbor next-hop-self
Description: Forces the BGP speaker to report itself as the next hop for an advertised route it advertised to a neighbor. Typically you use this command to prevent third-party next hops from being used on NBMA media such as Frame Relay. The no version disables the feature. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } next-hop-self ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
neighbor password
Description: Syntax: Enables MD5 authentication on a TCP connection between two BGP peers. The no version disables MD5 authentication. neighbor { ipAddress | peerGroupName } password [ 0 | 8 ] string no neighbor { ipAddress | peerGroupName } password ipAddress IP address of the BGP neighbor that belongs to the peer group specified by the name peerGroupName name of the BGP peer group to which this neighbor belongs. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. 0 indicates the MD5 password is entered in unencrypted form (plaintext) 8 indicates the MD5 password is entered in encrypted form (ciphertext) string MD5 password, an alphanumeric text string of up to 80 characters
Mode(s):
neighbor peer-group ERX Edge Routers
293
neighbor peer-group
Description: When used from Router Configuration mode without specifying an IP address, creates a BGP peer group. The no version removes a peer group. When used from Router Configuration mode with an IP address or from Address Family Configuration mode, configures a BGP neighbor to be a member of a peer group. The no version removes a neighbor from a peer group. Creating a peer group: neighbor peerGroupName peer-group no neighbor peerGroupName [ peer-group ] peerGroupName name of BGP peer group
Syntax:
Assigning members to a peer group: neighbor ipAddress peer-group peerGroupName no neighbor ipAddress peer-group [ peerGroupName ] Mode(s): ipAddress IP address of the BGP neighbor that belongs to the peer group specified by the name peerGroupName name of the BGP peer group to which this neighbor belongs
neighbor prefix-list
Description: Syntax: Assigns an inbound or outbound prefix list. The no version removes the prefix list. neighbor { ipAddress | peerGroupName } prefix-list prefix-list-name { in | out } no neighbor { ipAddress | peerGroupName } prefix-list [ prefixListName ] { in | out } ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. prefixListName name of a BGP prefix list in assigns prefix list to incoming routes (inbound policy) out assigns prefix list to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Mode(s):
294
neighbor prefix-tree
neighbor prefix-tree
Description: Syntax: Assigns an inbound or outbound prefix tree. The no version removes the prefix tree. neighbor { ipAddress | peerGroupName } prefix-tree prefixTreeName { in | out } no neighbor { ipAddress | peerGroupName } prefix-tree [ prefixTreeName ] { in | out } ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. prefixTreeName name of a BGP prefix tree in assigns prefix tree to incoming routes (inbound policy) out assigns prefix tree to outgoing routes (outbound policy); you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Mode(s):
neighbor remote-as
Description: Adds an entry to the BGP neighbor table. The no version removes an entry from the table. Specifying a neighbor with an AS number that matches the AS number specified in the router bgp Global Configuration command identifies the neighbor as internal to the local AS. Otherwise, the neighbor is considered external. neighbor { ipAddress | peerGroupName } remote-as number no neighbor { ipAddress | peerGroupName } [ remote-as [ number ] ] ipAddress IP address peerGroupName the name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. number number in the range 14294967295; the AS to which the neighbor belongs
Syntax:
Mode(s):
neighbor remove-private-as ERX Edge Routers
295
neighbor remove-private-as
Description: Removes private AS numbers in updates sent to external peers. The no version halts removing private AS numbers. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } remove-private-as ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
neighbor rib-out disable

Description: Disables storage of routes to the Adj-RIBs-Out table (disables rib-out) for the neighbor or peer group. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } rib-out disable ipAddress neighbors IP address; you can independently enable or disable the Adj-RIBs-Out table for a peer, regardless of whether it is a member of a peer group peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, a single Adj-RIBs-Out table is established for the peer group; BGP does not enable individual Adj-RIBs-Out tables for each peer group member.
Syntax:
Note: If you enable or disable rib-out for a peer or peer group and this action changes the current configuration, the peer session or all peer group sessions are automatically bounced. Mode(s): Address Family Configuration, Router Configuration
296
neighbor route-map
neighbor route-map
Description: Applies a route map to incoming or outgoing routes. If an outbound route map is specified, BGP advertises only routes that match at least one section of the route map. The no version removes a route map. neighbor { ipAddress | peerGroupName } route-map mapTag { in | out } no neighbor { ipAddress | peerGroupName } route-map [ mapTag ] { in | out } ipAddress neighbors IP address peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. mapTag name of the route map; a string of up to 32 alphanumeric characters in apply to incoming routes out apply to outgoing routes; you cannot configure a member of a peer group to override the inherited peer group characteristic for outbound policy
Syntax:
Mode(s):
neighbor route-reflector-client
Description: Configures a system as a BGP route reflector and configures the specified neighbor as its client. The no version indicates that the neighbor is not a client. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } route-reflector-client ipAddress IP address of BGP neighbor being identified as a client peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group.
Syntax:
Mode(s):
neighbor send-community ERX Edge Routers
297
neighbor send-community
Description: Enables a BGP speaker to send a community attribute to the peer. The no version causes the speaker to send only standard communities to the peer. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } send-community [ standard | extended | both ] ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group. standard sends only standard communities extended sends only extended communities both sends both standard and extended communities
Syntax:
Mode(s):
neighbor shutdown
Description: Shuts down the specified neighbor or peer group without removing the neighbor or peer group configuration. The no version reenables a neighbor or peer group that was previously shut down. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } shutdown ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
Syntax:
Mode(s):
298
neighbor soft-reconfiguration inbound
neighbor soft-reconfiguration inbound

Description: Initiates storage of unmodified copies of routes from the specified neighbor or all members of the specified peer group. The no version halts this storage. The default version removes the explicit configuration from the peer or peer group and reestablishes inheritance of the feature configuration. [ no | default ] neighbor { ipAddress | peerGroupName } soft-reconfiguration inbound ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer.
Syntax:
Mode(s):
neighbor timers
Description: Sets keepalive and hold-time timers for the specified neighbor or peer group. Overrides values set for the router via the timers bgp command. The no version restores the default values. neighbor { ipAddress | peerGroupName } timers keepaliveTime holdTime no neighbor { ipAddress | peerGroupName } timers [ keepaliveTime ] [ holdTime ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. keepaliveTime interval in seconds between keepalive messages; range is from 065535 seconds, default is 30 seconds; a value of zero prevents BGP from sending keepalive messages holdTime period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is from 065535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any keepalive messages
Syntax:
Mode(s):
neighbor unsuppress-map ERX Edge Routers
299
neighbor unsuppress-map
Description: Syntax: Restores the advertisement of routes suppressed by policy-based route flap dampening. The no version restores the default values. neighbor { ipAddress | peerGroupName } unsuppress-map mapTag no neighbor { ipAddress | peerGroupName } unsuppress-map [ mapTag ] ipAddress neighbors IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command. You cannot override the characteristic for a specific member of the peer group. mapTag name of the route map; a string of up to 32 alphanumeric characters
Mode(s):
neighbor update-source
Description: Allows a BGP session to use the IP address of any operational interface as the source address of TCP connections used by BGP. The no version restores the interface assignment to the closest interface. neighbor { ipAddress | peerGroupName } update-source { interfaceType interfaceSpecifier | updateSourceAddress } no neighbor { ipAddress | peerGroupName } update-source [ interfaceType interfaceSpecifier | updateSourceAddress ] ipAddress IP address of BGP-speaking neighbor peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide updateSourceAddress the source IP address
Syntax:
Mode(s):
300
neighbor weight
neighbor weight
Description: Assigns a weight to a neighbor connection. The no version removes a weight assignment. All routes learned from this neighbor will have the assigned weight initially. The route with the highest weight will be chosen as the preferred route when multiple routes are available to a particular network. The weights assigned with the match as-path and set weight route-map commands override the weights assigned using the neighbor weight and neighbor filter-list commands. neighbor { ipAddress | peerGroupName } weight value no neighbor { ipAddress | peerGroupName } weight [ value ] ipAddress neighbor's IP address peerGroupName name of a BGP peer group. If you specify a BGP peer group by using the peerGroupName argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. value number in the range 065535; the weight to assign
Syntax:
Mode(s):
net
Description: Configures an IS-IS network entity title for the specified routing process. The no version removes a specific NET. You must specify a NET. You can add multiple manual area IDs by adding multiple NETs with the same system ID. The last NET cannot be removed. [ no ] net networkEntityTitle networkEntityTitle NET that specifies the area ID and the system ID for an IS-IS routing process; can be either an address or a name; in the form of: areaID.systemID.nSelector For example: 47.0010.0000.0000.0001.0001.1111.1111.1111.00 area ID system ID N selector
Syntax:
areaID all bytes in front of the system ID; the number of bytes can vary
from 113 bytes
systemID always 6 bytes and cannot vary nSelector the last byte; always 0
netbios-name-server ERX Edge Routers
301
netbios-name-server
Description: Syntax: Assigns a Net-Bios server to subscribers of an address pool. The no version removes the association between the address pool and the Net-Bios server. netbios-name-server ipAddressPrimary [ ipAddressSecondary ] no netbios-name-server Mode(s): ipAddressPrimary IP address of preferred Netbios server ipAddressSecondary IP address of secondary DNS server
Pool Configuration
netbios-node-type
Description: Syntax: Specifies a Net-Bios node type. The no version restores the default situation, in which the node type is unspecified. netbios-node-type nodeType no netbios-node-type nodeType one of the following types of Net-Bios servers:
b-node Net-Bios Broadcast node p-node Net-Bios Peer-to-Peer node m-node Net-Bios mixed node h-node Net-Bios hybrid node
Mode(s): Pool Configuration
302
network
network
Description: For BGP, configures a BGP speaker with a prefix originating within its AS that it advertises to its peers if a non-BGP route to the prefix exists in the IP forwarding table. The no version removes the prefix. For RIP, enables RIP on a specific network (not on a range of networks). If you do not associate a network with RIP, the system cannot advertise the network in any RIP update. The no version disables RIP on a specific network. If you do not specify a network mask, the system applies the natural mask. Use the ip rip commands to configure RIP attributes on the network. For DHCP local server, specifies the IP addresses that the DHCP local server can provide from an address pool. The no version removes the network address and mask. For BGP: [ no ] network networkNumber [ mask networkMask ] [ route-map mapTag ] [ weight weight ] [ backdoor ] networkNumber prefix that BGP will advertise networkMask subnet mask mapTag name of the route map; a string of up to 32 alphanumeric characters weight number in the range 065535; default is 32768; assigns an absolute weight to the network route that overrides a weight assigned by the redistribute command backdoor lowers the preference of an EBGP route to the specified prefix by setting the administrative distance to the value of an internal BGP route. Use this option to favor an IGP backdoor route over an EBGP route to a specific network. BGP does not advertise the prefix specified with this option.
Syntax:
For RIP: [ no ] network networkAddress [ networkMask ] networkAddress IP address of the network networkMask subnet mask; the command accepts either the standard mask (network 10.2.1.0 255.255.255.0) or the inverse mask (network 10.2.1.0 0.0.0.255)
network area ERX Edge Routers
303
For DHCP local server: network networkAddress { networkMask | prefix } no network [ force ] Mode(s): ipAddress IP address of the network networkMask subnet mask for the network prefix network prefix force deletes address pool even if the pool is in use
Address Family Configuration or Router Configuration for BGP; Router Configuration for RIP; Pool Configuration for DHCP local server
network area
Description: Syntax: Defines the interfaces on which OSPF runs and the area ID for those interfaces. The no version deletes OSPF interfaces, ranges, and areas. [ no ] network ipNet maskWildCard area { areaId | areaIdInt } ipNet network number maskWildCard wild-card mask for the network number areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value, in the range 04294967295
Note: Before you issue this command, you must first configure one or more interface with an IP address that is within the range specified by ipNet. Mode(s): Router Configuration
next-address
Description: Syntax: Configures an IPv4 hop at the end of the MPLS explicit path. There is no no version. next-address ipAddress [ mask ipMask ] [ loose ] ipAddress address of the node ipMask [not currently used] mask for the next adjacent address loose indicates the node is not necessarily directly connected (adjacent) to the previous node in the path. If loose is not configured, the configuration defaults to strict. Strict indicates that the node is directly connected to the previous node.
Mode(s):
304
next-hop
next-hop
Description: Defines the IP address of the next hop for a policy list. The classifier-group keyword and claclName argument specify the classifier control list. If you do not specify a classifier group, the system selects all packets from the interface associated with this policy list for this rule. Use the suspend keyword to suspend a filter rule temporarily. The no version removes a next hop rule from a policy list. Note: The SRP module does not support the next-hop command. Syntax: [ no ] [ suspend ] next-hop address [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule address IP address for the next hop claclName classifier control list used to classify packets for this next-hop policy precValue precedence of this rule in relation to other rules within this set
next-interface
Description: Defines an output interface for a policy list. Use the classifier-group option to specify the classifier control list. If you do not specify a classifier control list, the system selects all packets from the interface associated with this policy list for this rule. Specify a next-hop command when the interfaceType is a broadcast medium. The no version removes a next-interface rule from a policy list. The suspend version suspends a filter rule temporarily. Note: The SRP module does not support the next-interface command. Syntax: [ no ] [ suspend ] next-interface interfaceType interfaceNumber [ next-hop nextHop ] [ classifier-group claclName ] [ precedence precValue ] Mode(s): suspend suspend a policy rule interfaceType type of interface to route packets to interfaceNumber number of the interface to route packets to nextHop next-hop IP address claclName classifier control list used to classify packets for this next-interface policy precValue precedence of this rule in relation to other rules within this set
no area ERX Edge Routers
305
no area
Description: Syntax: Removes the specified OSPF area if there are no OSPF interfaces configured in the area. no area { areaId | areaIdInt } Mode(s): areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295
no ip interface
Description: Syntax: Mode(s): Removes the IP configuration from the interface or subinterface and disables IP processing on the interface. no ip interface Interface Configuration, Subinterface Configuration
no log filters
Description: Syntax: Mode(s): Turns off all log filters. To turn off a specific filter, use the no version of the log severity command that you used to add the filter. no log filters Global Configuration
no radius client
Description: Syntax: Mode(s): Use to unconfigure all RADIUS servers for the virtual router context and to delete the RADIUS client for the virtual router context. no radius client Global Configuration
306
node
node
Description: Syntax: Specifies that a scheduler node be configured for each interface of the given interface type. The no version removes this rule from the QoS profile. [ no ] interfaceType node [ scheduler-profile schedulerProfileName ] [ group groupName ] interfaceType one of the following interface types for which scheduler nodes should be configured: atm-vc, cbf, fr-vc, ip, ip-tunnel, l2tp-tunnel, vlan schedulerProfileName name of the scheduler profile groupName name of the traffic class group
Mode(s):
QoS Profile Configuration
nrzi-encoding
Description: Syntax: Mode(s): Use to enable NRZI encoding. [ no ] nrzi-encoding Interface Configuration
ntp access-group
Description: Specifies the type of broadcasts that the system will accept and respond to, and specifies the servers from which the system will accept broadcasts. The no version enables the system to receive all NTP broadcasts on interfaces configured to receive broadcasts. ntp access-group { peer | serve-only | serve | query-only } accessListName no ntp access-group { peer | serve-only | serve | query-only } Note: The system can accept, but does not use, NTP control queries. peer enables the system to receive time requests, receive NTP control queries, and synchronize itself to the servers specified on the access-list serve-only enables the system to receive time requests and NTP control queries from servers specified on the access-list, but not to synchronize itself to the specified servers serve enables the system only to receive time requests from the servers specified on the access-list query-only enables the system only to receive NTP control queries from the servers specified on the access-list accessListName name of the access list
Syntax:
Mode(s):
ntp broadcast-client ERX Edge Routers
307
ntp broadcast-client
Description: Syntax: Mode(s): Enables an interface to receive NTP broadcasts.The no version prevents an interface from receiving NTP broadcasts. [ no ] ntp broadcast-client Interface Configuration
ntp broadcast-delay
Description: Sets the estimated round-trip delay between the broadcast NTP server and the system. The no version restores the round-trip delay to the default value, 3000 microseconds. ntp broadcast-delay delayTime no ntp broadcast-delay Mode(s): delayTime a value in the range 0999999 microseconds
Syntax:
ntp disable
Description: Syntax: Mode(s): Disables NTP on an interface. The no version enables NTP on an interface. The default setting is enable. [ no ] ntp disable Interface Configuration
ntp enable
Description: Enables NTP services on the system and attaches the NTP client to the current virtual router. The no version disables reception of NTP packets on the system and removes the association between NTP and the virtual router. The default setting is disable. [ no ] ntp enable Global Configuration
Syntax: Mode(s):
308
ntp master
ntp master
Description: Specifies the stratum number of a virtual router you configured as an NTP server. By default, if the system is configured as an NTP server, the stratum number is set to the stratum number of the master plus one. The no version restores the default stratum number. [ no ] ntp master [ stratumNumber ] Note: Although you can specify a stratum number of 1, the system does not support stratum 1 service. The system can synchronize only with an NTP server, and not directly with an atomic clock or radio clock. stratumNumber number in the range 115 that indicates how many hops the NTP server is from an accurate time source, such as a radio clock or atomic clock. Stratum n servers are n hops from an accurate time source. The default is 8.
Syntax:
Mode(s):
ntp server
Description: Specifies an NTP server for time synchronization. The source option for this command overrides the ntp source command.The no version terminates NTP communications between this server and the interface. ntp server ipAddress [ version number ] [ prefer ] [ source interfaceType interfaceSpecifier ] no ntp server ipAddress Mode(s): ipAddress IP address of the NTP server number value from 1 to 4; indicates the version of the NTP software on the server prefer indicates that this server is the first choice for time synchronization source directs responses from the NTP server to a specific interface on the system; overrides the ntp source command interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
ntp server enable ERX Edge Routers
309
ntp server enable

Description: Syntax: Mode(s): Enables a virtual router to act as an NTP server. The no version prevents a virtual router from acting as an NTP server. [ no ] ntp server enable Global Configuration
ntp source
Description: Directs responses from all NTP servers to a specific interface. Using the source option with the ntp server command overrides the ntp source command. The no version restores the default situation in which servers reply to the interface from which the NTP request was sent. ntp source interfaceType interfaceSpecifier no ntp source Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
310
operations-per-hop
operations-per-hop
Description: Configures the number of operations sent to a designated hop before the TTL value is increased. This option applies only to the pathEcho type. The no version restores the default value, 3. operations-per-hop operationsHopValue no operations-per-hop Mode(s): operationsHopValue number of operations per hop; the default is 3
Syntax:
RTR Configuration
ospf auto-cost reference-bandwidth

Description: Syntax: Controls how OSPF calculates default metrics for the interface. The no version assigns cost based only on the interface type. [ no ] ospf auto-cost reference-bandwidth refBw Mode(s): refBw bandwidth in megabits per second in the range 14294967; default is 100
ospf enable
Description: Syntax: Mode(s): Enables OSPF on the router. The no version disables OSPF on the router. [ no ] ospf enable Router Configuration
ospf log-adjacency-changes ERX Edge Routers
311
ospf log-adjacency-changes
Description: Syntax: Configures the router to send a syslog message when the state of an OSPF neighbor changes. The no version turns off this feature. [ no ] ospf log-adjacency-changes [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] severity minimum severity of the log messages displayed for the selected category; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07; the lower the number, the higher the priority:
verbosityLevel specifies the verbosity of the log categorys messages; can be any of the following:
low terse medium moderate detail high verbose

ospf shutdown
Description: Syntax: Mode(s): Administratively disables OSPF on the router. The no version reenables OSPF on the router. [ no ] ospf shutdown Router Configuration
overload shutdown
Description: Syntax: Mode(s): Causes BGP to shut down when it runs out of resources. The no version restores the default behavior, which is to continue running. [ no ] overload shutdown Router Configuration
312
override-user
override-user
Description: Syntax: Specifies a single username and single password for all users from a domain. The no version removes the username and reverts to the original username. override-user [ name newName ] password newPassword no override-user Mode(s): newName identifier that replaces the username newPassword password that replaces the users password
owner
Description: Syntax: Configures the owner of the RTR operation. The no version restores the default value. owner ownerValue no owner Mode(s): ownerValue specifies the owners identifier: 0255 ASCII characters; by default, no owner is configured
RTR Configuration
padn
Description: Syntax: Configures PADN parameters for a domain name. The no version deletes the PADN parameters from the domain name. padn ipAddress ipmask distance no padn ipAddress ipmask Mode(s): ipAddress destination IP address ipmask IP mask for the destination distance administrative distance metric for this route in the range 0255
passive-interface ERX Edge Routers
313
passive-interface
Description: Modifies the transmission of routing updates for IS-IS, OSPF, and RIP. For IS-IS, configures an IS-IS interface to only advertise its IP address in the link state PDUs; the interface does not send or receive IS-IS packets. Issue the complementary interface command to enable the interface to send and receive IS-IS packets. The no version disables the advertising of the IP address. For OSPF, halts the transmission of routing updates on an OSPF interface. OSPF neither sends nor receives routing information through the specified interface, which appears as a stub network in the OSPF network. The no version reenables the transmission of routing updates. For RIP, halts the transmission of multicast RIP messages. RIP messages are unicast to the interface (if it is the best path to a configured neighbor). The no version reenables the transmission of multicast messages on the interface. [ no ] passive-interface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
314
password
password
Description: Configures a password to be used at login on the console, a line or a range of lines; or specifies the password for an L2TP of L2F tunnel. The no version removes the password. Login Password: password [ encryptionType ] passwordValue no password encryptionType one of the following types:
Syntax:
0 unencrypted (the default) 5 secret 7 hidden

passwordValue character string that specifies the line password. The first character cannot be a number. The string can contain any alphanumeric characters, including spaces, up to 50 characters. The password checking is case sensitive. For example, the password Secret is different from the password secret.
L2TP or L2F Tunnel Password: password tunnelPassword no password Mode(s): tunnelPassword up to 32-character password
Line Configuration for a login password; Domain Map Tunnel Configuration for a tunnel password
path ERX Edge Routers
315
path
Description: Syntax: Configures paths over channelized SONET and SDH interfaces. The no version deletes a path. path pathChannel [ pathSpeed [ pathHierarchy ] ] no path pathChannel pathChannel number in the range 12147483648 that identifies the STS-1 or STM-0 line pathSpeed speed of the path
oc1, oc3, or oc12 for SONET only oc1 or oc3 is available for
cOC3/STM1 interfaces
stm0, stm1, or stm4 for SDH only stm0 or stm1 is available for
cOC3/STM1 interfaces Note: Although the path speed appears to be optional in the software, you must specify a value. pathHierarchy identifier that defines the structure of the path
If you specify a path speed that matches the speed of the module (for
example, a path speed of oc3 for a cOC3/STM1 interface), do not specify an identifier.
If you specify a speed of oc1 or stm0 for a cOC3/STM1 interface, the

identifier is a number in the range 13 that represents either the STS-1 within the STS-3 or the STM-0 within the STM-1.

identifier is a number in the range 14 that represents either the STS-3 within the STS-12 or the STM-1 within the STM-4.

identifier is of the form X/Y. X is a number in the range 14 that represents either the STS-3 within the STS-12 or the STM-1 within the STM-4; Y is a number in the range 13 that represents either the STS-1 within the STS-3 or the STM-0 within the STM-1. Mode(s): Controller Configuration
316
path ds1|e1
path ds1|e1
Description: Syntax: Creates and configures SONET and SDH tributaries. The no version deletes a tributary. path pathChannel { ds1 | e1 } tributaryIdentifier [ tributary-type ] [ no ] pathChannel { ds1 | e1 } path tributaryIdentifier pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier specifier for the tributary in the format pathChannel { ds1 | e1 } pathPayload/tributaryGroup/tributaryNumber
pathPayload payload number for the path; value is 1 for SONET and in
the range 13 for SDH
tributaryGroup number in the range 17 that identifies the group within

the path
tributaryNumber number of the tributary within the tributary group; the

value is in the range 14 if the tributary type is vt15 or tu11 and in the range 13 if the tributary type is tu12 tributaryType virtual tributary type
vt15 default for SONET DS1 tributaries tu11 default for SDH DS1 tributaries tu12 default for SDH E1 tributaries
path ds1|e1 bert ERX Edge Routers
317
path ds1|e1 bert

Description: Enables bit error rate tests using the specified pattern at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version stops the test that is running. path pathChannel { ds1 | e1 } tributaryIdentifier bert pattern pattern interval time [ unframed ] no path pathChannel { ds1 | e1 } tributaryIdentifier bert
Syntax:
tributaryIdentifier identifier for the tributary. See description for the

path ds1|e1 command. pattern one of the following test patterns:
2^11 pseudorandom test pattern, 2048 bits in length 2^15 pseudorandom 0.151 test pattern, 32768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1048575 bits in length
time interval between test patterns, ranging from 114400 minutes unframed test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1 payload bits.
Mode(s):
path ds1|e1 channel-group shutdown

Description: Disables a DS1 or an E1 channel group for channelized SONET and SDH interfaces. DS1 and E1 channel groups are enabled by default. The no version restarts a disabled interface. [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber shutdown Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.
Syntax:
318
path ds1|e1 channel-group snmp trap link-status
path ds1|e1 channel-group snmp trap link-status

Description: Enables SNMP link status processing for a DS1 or an E1 channel group of channelized SONET and SDH interfaces. The no version disables SNMP link status processing for a DS1 or E1 channel group. [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber snmp trap link-status Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. channelGroupNumber either a fractional T1 interface in the range 124 or a fractional E1 interface in the range 131
Syntax:
path ds1|e1 channel-group timeslots

Description: Configures T1 or E1 line parameters for channelized SONET and SDH interfaces. To configure a line, you specify a DS1 or an E1 channel group number and assign a range of timeslots. To configure a whole T1 or E1 line, assign all the timeslots to the channel group. You can specify a line speed that applies to all DS0 timeslots assigned to a channel group. The no version removes the timeslots from the channel group. path pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber timeslots range [ speed { 56 | 64 } ] no pathChannel { ds1 | e1 } tributaryIdentifier channel-group channelGroupNumber pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. channelGroupNumber either a fractional T1 interface in the range 124 or a fractional E1 interface in the range 131 range specifies the timeslot assigned to the T1 or E1 channel in the range 131. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 110 and 15 18. speed specifies the data rate for the T1 or E1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.
Syntax:
Mode(s):
path ds1|e1 clock source ERX Edge Routers
319
path ds1|e1 clock source

Description: Syntax: Configures the transmit clock source for channelized SONET and SDH interfaces. The no version restores the default value. path pathChannel { ds1 | e1 } tributaryIdentifier clock source { line | internal { module | chassis } } no path pathChannel { ds1 | e1 } tributaryIdentifier clock source pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:
path ds1|e1 framing

Description: Syntax: Configures the framing format for T1 or E1 over channelized SONET and SDH interfaces. The no version restores the default value. path pathChannel { ds1 | e1 } tributaryIdentifier framing framingType no path pathChannel { ds1 | e1 } tributaryIdentifier framing pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. framingType one of the following types:
crc4 cyclic redundancy check (default for E1); not available for T1 no-crc4 no cyclic redundancy check; not available for T1 esf extended superframe (T1 default); not available for E1 sf superframe; not available for E1
320
path ds1|e1 loopback
path ds1|e1 loopback

Description: Configures a loopback at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version turns off the loopback. path pathChannel ds1|e1 tributaryIdentifier loopback { local | network { payload | line } | remote { line fdl { ansi | bellcore } | payload [fdl ] [ ansi ] } } no path pathChannel ds1 tributaryIdentifier loopback [ remote ] pathChannel a number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. local loops the router output data back toward the router at the T1/E1 framer and sends an alarm indication signal out toward the network network { line | payload } specify the line keyword to loop the data back toward the network before the T1/E1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1/E1 framer and automatically set a local loopback at the HDLC controllers. remote line fdl ansi (T1 line only) sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, per the ANSI T1.403 specification. remote line fdl bellcore (T1 line only) sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, per the Bellcore TR-TSY-000312 specification. remote payload [ fdl ] [ ansi ] (T1 line only) sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.
Syntax:
Note: You cannot send an inband pattern to the remote end requesting that it enter into a network line loopback. Mode(s): Controller Configuration
path ds1|e1 shutdown ERX Edge Routers
321
path ds1|e1 shutdown

Description: Disables DS1 or E1 over channelized SONET and SDH interfaces. DS1 and E1 interfaces are enabled by default. The no version restarts a disabled interface. [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier shutdown Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.
Syntax:
path ds1|e1 snmp trap link-status

Description: Syntax: Enables SNMP link status processing for DS1 or E1 over channelized SONET and SDH interfaces. The no version disables SNMP link status processing. [ no ] path pathChannel { ds1 | e1 } tributaryIdentifier snmp trap link-status Mode(s): pathChannel a number in the range 12147483648 that identifies the path tributaryIdentifier the identifier for the tributary. See description for the path ds1|e1 command.
path ds1 fdl

Description: Syntax: Specifies the facility data link standard for a T1 over channelized SONET or SDH interface. The no version restores the default, none. path pathChannel ds1 tributaryIdentifier fdl { ansi | att | all | none } no path pathChannel ds1 tributaryIdentifier fdl [ ansi | att | all ] Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings
322
path ds1 fdl carrier
path ds1 fdl carrier

Description: Specifies that a T1 over channelized SONET or SDH interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] path pathChannel ds1 tributaryIdentifier fdl carrier Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.
Syntax:
path ds1 fdl string

Description: Defines an FDL message for a T1 over channelized SONET or SDH interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. path pathChannel ds1 tributaryIdentifier fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no path pathChannel ds1 tributaryIdentifier fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value. pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value
Syntax:
path ds1 fdl transmit ERX Edge Routers
323
path ds1 fdl transmit

Description: Configures the system to send the specified FDL message on a T1 over channelized SONET or SDH interface. The no version stops the system from sending the specified FDL message or all FDL messages. [ no ] path pathChannel ds1 tributaryIdentifier fdl transmit { path-id | idle-sIgnal | test-signal } no path pathChannel ds1 tributaryIdentifier fdl transmit Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command. path-id transmits a path identification message every second idle-sIgnal transmits an idle signal every 10 seconds test-signal transmits a test signal every 10 seconds
Syntax:
path ds1 remote-loopback

Description: Enables acceptance of remote loopback requests at the T1/E1 over SONET/SDH VT layer on channelized SONET and SDH interfaces. The no version restores the factory default value, which is to reject remote loopback requests. [ no ] path pathChannel ds1 tributaryIdentifier remote-loopback Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.
Syntax:
path ds3
Description: Creates and configures a T3 over channelized SONET interface. If you do not specify whether or not the path should be channelized, the system creates a channelized path by default. The no version deletes a path. path pathChannel ds3 ds3Channel { [ channelized ] | unchannelized } no path pathChannel ds3 ds3Channel Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path
Syntax:
324
path ds3 clock source
path ds3 clock source

Description: Syntax: Configures the transmit clock source for a a T3 over channelized SONET interface. The no version restores the default value. path pathChannel ds3 ds3Channel clock source { line | internal { module | chassis } } no path pathChannel ds3 ds3Channel clock source pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:
path ds3 framing

Description: Syntax: Configures the framing format for a T3 over channelized SONET interface. The no version restores the default value. path pathChannel ds3 ds3Channel framing framingType no path pathChannel ds3 ds3Channel framing pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path framingType choose one of the following:
c-bit default; specifies c-bit parity framing m23 specifies M23 multiplexer framing
path ds3 loopback ERX Edge Routers
325
path ds3 loopback

Description: Syntax: Configures a loopback at the DS3 layer for a T3 over channelized SONET interface. The no version turns off the loopback. path pathChannel ds3 ds3Channel loopback { local | network { payload | line } } no path pathChannel ds3 ds3Channel loopback Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path local loops the data back toward the router and sends an alarm indication signal out toward the network network payload loops the data toward the network after the framer has processed the data network line loops the data toward the network before the data reaches the framer
path ds3 mdl carrier

Description: Specifies that a T3 over channelized SONET interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] path pathChannel ds3 ds3Channel mdl carrier Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path
Syntax:
326
path ds3 mdl string
path ds3 mdl string

Description: Allows you to configure an MDL message on a T3 over channelized SONET interface as defined in the ANSI T1.107a-1990 specification. The no version restores the default value to the specified MDL message or to all MDL messages. path pathChannel ds3 ds3Channel mdl string { eic eicValue | fic ficValue | generator genValue | lic licValue | pfi pfiCode | port portValue | unit unitValue } no path pathChannel ds3 ds3Channel mdl string { eic | fic | generator | lic | pfi | port | unit } Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path eicValue equipment identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value genValue generator number to send in the MDL test signal message; 138 characters; default is the null value licValue line identification code; 111 characters; default is the null value pfiCode facility identification code to send in the MDL path message; 138 characters; default is the null value portValue equipment port number to send in the MDL idle signal message; 138 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value
Syntax:
path ds3 mdl transmit ERX Edge Routers
327
path ds3 mdl transmit

Description: Enables you to transmit an MDL message on a T3 over channelized SONET interface. The no version disables transmission of the specified message or all messages. [ no ] path pathChannel ds3 ds3Channel mdl transmit { path-id | idle-signal | test signal } no path ds3 mdl transmit Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path path-id MDL path message; factory default is disabled idle-signal MDL idle signal message; factory default is disabled test-signal MDL test signal message; factory default is disabled
Syntax:
path ds3 shutdown

Description: Syntax: Disables a T3 over channelized SONET interface. DS3 interfaces are enabled by default. The no version restarts a disabled interface. [ no ] path pathChannel ds3 ds3Channel shutdown Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path
path ds3 snmp trap link-status

Description: Enables SNMP link status processing for a T3 over channelized SONET interface. The no version disables SNMP link status processing on an interface. [ no ] path pathChannel ds3 ds3Channel snmp trap link-status Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the path
Syntax:
328
path ds3 t1
path ds3 t1
Description: Syntax: Creates and configures a T1 channel on a T3 over channelized SONET interface. The no version deletes a path. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel
path ds3 t1 bert

Description: Enables bit error rate tests using the specified pattern for a T1 channel on a T3 over channelized SONET interface. The no version stops the test that is running. path pathChannel ds3 ds3Channel t1 t1Channel bert pattern pattern interval time [ unframed ] no path pathChannel ds3 ds3Channel t1 t1Channel bert pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel pattern one of the following test patterns:
Syntax:
2^11 pseudorandom test pattern, 2,048 bits in length 2^15 pseudorandom 0.151 test pattern, 32,768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1,048,575 bits in length
time interval between test patterns, ranging from 114400 minutes unframed test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern occupies only T1/E1payload bits.
Mode(s):
path ds3 t1 clock source ERX Edge Routers
329
path ds3 t1 clock source

Description: Syntax: Configures the transmit clock source for a T1 channel on a T3 over channelized SONET interface.The no version restores the default value, line. path pathChannel ds3 ds3Channel t1 t1Channel clock source { line | internal { module | chassis } } no path pathChannel ds3 ds3Channel t1 t1Channel clock source pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:
path ds3 t1 framing

Description: Syntax: Configures the framing format for a T1 channel on a T3 over channelized SONET interface. The no version restores the default value. path pathChannel ds3 ds3Channel t1 t1Channel framing framingType no path pathChannel ds3 ds3Channel t1 t1Channel framing pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel framingType one of the following types:
esf default; specifies extended superframe sf specifies superframe

330
path ds3 t1 fdl
path ds3 t1 fdl

Description: Syntax: Specifies the facility data link standard for a T1 channel on a T3 over channelized SONET interface. The no version restores the default, none. path pathChannel ds3 ds3Channel t1 t1Channel fdl { ansi | att | all | none } no path pathChannel ds3 ds3Channel t1 t1Channel fdl [ ansi | att | all ] Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings
path ds3 t1 fdl carrier

Description: Specifies that a T1 channel on a T3 over channelized SONET interface is used in the carrier environment. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel fdl carrier Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel
Syntax:
path ds3 t1 fdl string ERX Edge Routers
331
path ds3 t1 fdl string

Description: Defines an FDL message for a T1 channel on a T3 over channelized SONET interface, as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. path pathChannel ds3 ds3Channel t1 t1Channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no path pathChannel ds3 ds3Channel t1 t1Channel fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value
Syntax:
332
path ds3 t1 fdl transmit
path ds3 t1 fdl transmit

Description: Configures the system to send the specified type of FDL message for a T1 channel on a T3 over channelized SONET interface. The no version stops the system from sending the specified type of FDL message or all FDL messages. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel fdl transmit { path-id | idle-signal | test-signal } no path pathChannel ds3 ds3Channel t1 t1Channel fdl transmit Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel path-id transmits a path identification FDL message every 10 seconds idle-sIgnal transmits an idle signal FDL message every second test-signal transmits a test signal FDL message every second
Syntax:
path ds3 t1 loopback ERX Edge Routers
333
path ds3 t1 loopback

Description: Syntax: Configures a loopback for a T1 channel on a T3 over channelized SONET interface. The no version turns off the loopback. path pathChannel ds3 ds3Channel t1 t1Channel loopback { local | network { payload | line } | remote { line fdl { ansi | bellcore } | payload [fdl ] [ ansi ] } } no path pathChannel ds3 ds3Channel t1 t1Channel loopback [ remote ] pathChannel a number in the range 12147483648 that identifies the path ds3Channel a number in the range 13 that identifies the DS3 channel t1Channel a number in the range 128 that identifies the T1 channel local loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network network { line | payload } Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers. remote line fdl ansi sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification. remote line fdl bellcore sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification. remote payload [ fdl ] [ ansi ] sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.
Mode(s):
334
path ds3 t1 remote-loopback
path ds3 t1 remote-loopback

Description: Enables acceptance of remote loopback requests by a T1 channel on a T3 over channelized SONET interface. The no version restores the default value, which is to reject remote loopback requests. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel remote-loopback Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel
Syntax:
path ds3 t1 shutdown

Description: Disables a T1 channel or subchannel on a T3 over channelized SONET interface. T1 channels are enabled by default. The no version restarts a disabled interface. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel[/subchannel] shutdown Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel subchannel fractional T1 interface in the range 124
Syntax:
path ds3 t1 snmp trap link-status

Description: Enables SNMP link status processing for a T1 channel group or subchannel for a T3 over channelized SONET interface. The no version disables SNMP link status processing for a T1 channel. [ no ] path pathChannel ds3 ds3Channel t1 t1Channel[ /subchannel ] snmp trap link-status Mode(s): pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel subchannel fractional T1 interface in the range 124
Syntax:
path ds3 t1 timeslots ERX Edge Routers
335
path ds3 t1 timeslots

Description: Assigns a range of DS0 timeslots to a subchannel as a single data stream for a T1 channel on a T3 over channelized SONET interface. You can optionally specify a line speed that applies to all DS0 timeslots assigned to a subchannel. The no version deletes the fractional T1 circuit. path pathChannel ds3 ds3Channel t1 t1Channel/subchannel timeslots range [ speed { 56 | 64 } ] no path pathChannel ds3 ds3Channel t1 t1Channel/subchannel pathChannel number in the range 12147483648 that identifies the path ds3Channel number in the range 13 that identifies the DS3 channel t1Channel number in the range 128 that identifies the T1 channel subchannel fractional T1 interface in the range 124 range timeslots assigned to the T1 channel in the range 124; a dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 110 and 1518. speed specifies the data rate for the T1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.
Syntax:
Mode(s):
path e1 unframed
Description: Syntax: Configures unframed E1 for channelized SONET and SDH interfaces. The no version deletes an unframed E1 interface from the path. [ no ] path pathChannel e1 tributaryIdentifier unframed Mode(s): pathChannel number in the range 12147483648 that identifies the path tributaryIdentifier identifier for the tributary. See description for the path ds1|e1 command.
336
path overhead j1
path overhead j1
Description: Specifies trace messages to check for connectivity between the system and the SONET/SDH device at the other end of the line. The no version restores the default situation, in which all characters of the trace message are zeros. [ no ] path pathChannel overhead j1 { msg | exp-msg } [ message ] pathChannel identifier for the path
Syntax:
For OC3 (dual port) or OCx/STMx interfaces, there is no identifier For cOCx/STMx interfaces, a number in the range 12147483648 that
identifies the path Mode(s): msg send the specified transmit message exp-msg expect the specified trace message message text of the message. The maximum is 15 characters for SDH mode and 62 characters for SONET mode.
path snmp trap link-status

Description: Syntax: Enables SNMP link status processing for the path layer of SONET and SDH interfaces. The no version disables SNMP link status processing. [ no ] path [ pathChannel ] snmp trap link-status Mode(s): pathChannel number in the range 12147483648 that identifies the path on a channelized interface
peak-burst
Description: Syntax: Sets the peak burst for a rate limit profile. The no version restores the default value, 8192. [ no ] peak-burst size Mode(s): size size in bytes in the range 81924294967295
peak-rate ERX Edge Routers
337
peak-rate
Description: Syntax: Sets the peak rate for a rate limit profile. The no version restores the default value, 0. [ no ] peak-rate rate Mode(s): rate rate in bits per second in the range 04294967295
pim disable
Description: Syntax: Mode(s): Disables PIM on a virtual router. The no version reenables PIM on a virtual router. [ no ] pim disable Router Configuration
338
ping
ping
Description: Syntax: Sends an ICMP echo request packet to the IP address that you specify. There is no no version. ping [ vrf vrfName ] [ ip ] destination [ packetCount ] [ timeout timeOutVal ] [ transmit-delay delayVal ] [ ttl ttlValue ] [ data-size dataSize ] [ data-pattern { ones | zeros | random | hex-data hexData } ] [ source { interface interfaceType interfaceSpecifier | address sourceAddr } ] [ sweep-sizes sweepMin sweepMax [ sweep-interval sweepInt ] ] [ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ set-router-alert ] [ { loose-source-route | strict-source-route } [ srtAddrs ]* ] [ record-route numRoutes ] [ timestamp numTstamps ] [ interface interfaceType InterfaceSpecifier ] ] vrfName name of the VRF context ip optional keyword for compatibility with non-ERX implementations destination IP address or domain name of the host to ping packetCount number of packets to send to the destination IP address in the range 04294967295; the default is 5; 0 means ping forever timeOutVal number of seconds in the range 120 to wait for an ICMP echo reply packet before the connection attempt times out delayVal number of milliseconds in the range 150 between transmission of each ICMP request; default is 10 ms ttlValue specifies a hop count by setting the time-to-live field in the IP header in the range 1255; default is 32 dataSize number of bytes comprising the IP packet and reflected in the IP header in the range 064000; the default is 100 bytes data-pattern type of bits contained in the packet. You can set the bits to all ones, all zeros, a random mixture of ones and zeros, or a specific hexadecimal data pattern that can range from 0x0 0xFFFFFFFF. The default data pattern is all zeros. source interface specifies an interface as the source of the packets

About This Guide

interface type; see Interface Types and Specifiers in About This Guide source address specifies an IP address as the source of the packets
sourceAddr IP address or domain name used as the source address

sweep-sizes configures payload sizes, enabling you to vary the sizes of the echo packets being sent. This capability is useful for determining the minimum sizes of the MTUs configured on the nodes along the path to the
ping ERX Edge Routers
339
destination address. This reduces packet fragmentation which contributes to performance problems. The default is not to sweep (all packets are the same size).
sweepMin minimum payload size in the range 064000 sweepMax maximum payload size in the range 064000 sweepInt number of bytes to add to the size of the packet; the change
in the size of subsequent ping packets while sweeping across a range of sizes. For example, you can configure the sweep interval to sweep across the range of packets from 100 bytes to 1000 bytes in increments of sweepInt. By default, send 100, 101, 102, 103...1000. If sweepInt is 5, send 100, 105, 110, 115...1000). When sweeping, the default interval is 1. extended enables you to configure extended header attributes
tosVal specifies the value set in the ToS byte in the range 0255 to
support QoS offerings
set-dont-fragment-bit sets the dont-fragment bit in the IP header to

prevent IP from fragmenting the packet if it is too long for the MTU of a link; if the nonfragmented packet cannot be delivered, it is discarded
loose-source-route specifies a set of hops through which the packet

must traverse; the hops do not have to be adjacent
strict-source-route specifies every hop through which the packet must

traverse and generates an ICMP error if the exact path cannot be followed
srtAddrs IP addresses or domain name of the intermediate hops on

the way to the destination that will be used in the loose-source or strict-source route
* indicates that one or more parameters can be repeated multiple times in

a list in the command line
numRoutes specifies how many routes are to be recorded as the

packet travels; ranges from 1 to 9
numTstamps specifies how many timestamps from routers are to be

recorded as the packet travels; ranges from 1 to 9
interfaceType interface type of a destination address on the system

that is configured for external loopback; see Interface Types and Specifiers in About This Guide
interfaceSpecifier particular interface of a destination address on the

system that is configured for external loopback; format varies according to interface type; see Interface Types and Specifiers in About This Guide Mode(s): User Exec, Privileged Exec
340
ping atm interface atm
ping atm interface atm

Description: Syntax: Sets up the ATM interface or circuit to send loopback cells. There is no no version. ping atm interface atm interfaceSpecifier vpi vci [ end-loopback [ destination ] | seg-loopback [ destination ] ] [ count cellCount ] [ timeout #OfSeconds ] interfaceSpecifier see Interface Types and Specifiers in About This Guide. vpi virtual path identifier vci virtual circuit identifier. By default F5 end-to-end loopback OAM cells are used for the ping operation.
To send F4 segment loopback cells, set the VCI to 3. To send F5 end-to-end loopback cells, set the VCI to 4.
end-loopback sends the ping to the connection endpoint seg-loopback sends the ping to the first segment endpoint destination value of the location ID included the loopback cell. The location ID is a 16-octet field, and the destination portion is 4 octets. You can set the destination to a specific location ID or to 0s (zeros) or 1s (ones). If the destination is set to:
0s loopback location ID in the loopback cell is initialized to all 0s, and

each segment endpoint in the network responds to the ping.
1s loopback location ID in the loopback cell is initialized to all 1s, and

only the connection endpoint responds to the ping. The default value is 0xFFFFFFFF, which causes the loopback location ID in the loopback cell to be initialized to all 1s. cellCount number of OAM echo cells to send to the destination. The default value is 5. The range is 132. timeout amount of time to wait for a response to the sent OAM cell. If no response is received when this time expires, the system sends the next cell. This process is repeated for the number of cells specified in the cellCount parameter. #OfSeconds number of seconds in the timeout period. The default value is 5 seconds. The range is 15 seconds.
Mode(s):
Privileged Exec
policy-list ERX Edge Routers
341
policy-list
Description: Creates or modifies a policy list. If you execute a policy-list command and type exit, the system creates a policy list with no rules, the default. When no rules are found in a policy list, the system automatically inserts a default filter rule. Attaching this policy list to an interface will filter all packets on that interface. The no version removes a policy list. [ no ] policy-list policyName Mode(s): policyName name associated with the policy list
Syntax:
pos framing
Description: Syntax: Sets the type of framing for a POS interface. There is no no version. pos framing { sdh | sonet } Mode(s): sdh uses SDH framing format sonet uses SONET framing format (the default)
pos scramble-atm
Description: Enables payload scrambling on a POS interface. When enabled, both sides of the connection must be using the scrambling algorithm. The system uses a 43rd-order synchronous scrambler to scramble the output data. The no version disables scrambling on the POS interface. [ no ] pos scramble-atm Interface Configuration
Syntax: Mode(s):
342
ppp authentication
ppp authentication
Description: Syntax: Requests authentication from a PPP peer system. The no version removes the authentication requirement. ppp authentication [ virtual-router vrName ] chap [ pap ] | pap [ chap ] no ppp authentication vrName name of a virtual router to be used as the authentication virtual router chap specifies CHAP authentication protocol. If the peer system refuses to use CHAP and you additionally specified PAP on the command line, the system requests the PAP protocol. If the peer system refuses to negotiate authentication, the system terminates the session. pap specifies PAP authentication protocol. If the peer system refuses to use PAP and you additionally specified CHAP on the command line, the system requests the PAP protocol.
Mode(s):
ppp aaa-profile
Description: Maps an AAA profile to static and dynamic, multilink and nonmultilink PPP interfaces. The no version removes the AAA profile assignment to the PPP interface. ppp aaa-profile profileName no ppp aaa-profile Mode(s): profileName name of the AAA profile; 32 characters maximum
Syntax:
ppp chap-challenge-length ERX Edge Routers
343
ppp chap-challenge-length
Description: Modifies the length of the CHAP challenge by specifying the minimum and maximum allowable length. The no version restores the defaults. Caution: We recommend that you do NOT use the ppp chap-challenge-length command; increasing the minimum length (from the default 16 bytes) or decreasing the maximum length (from the default 32 bytes) reduces the security of your system. Syntax: ppp chap-challenge-length minLength maxLength no ppp chap-challenge-length minLength minimum length of the CHAP challenge in bytes in the range 863; default value is 16 bytes maxLength maximum length of the CHAP challenge in bytes in the range 863; value must be equal to or greater than the minimum length; default value is 32 bytes
Mode(s):
ppp description
Description: Syntax: Assigns a text description or alias to a static PPP interface. The no version removes the text description or alias. ppp description name no ppp description Mode(s): name text description or alias for the ppp interface; up to 64 characters
ppp ipcp netmask

Description: Explicitly enables the IPCP option 0x90 on a per-PPP interface basis, either in a profile or on a static interface. By default, the IPCP option 0x90 is disabled on the interface. The no version disables the IPCP option 0x90. [ no ] ppp ipcp netmask Interface Configuration, Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
344
ppp keepalive
ppp keepalive
Description: Specifies a keepalive value. The keepalive mechanism tracks the status of the connection. The no version disables keepalive. High-density mode is automatically selected when PPP is layered over ATM, Tunnel, or PPPoE. Low-density mode is selected when PPP is layered over HDLC. ppp keepalive [ seconds ] no ppp keepalive seconds keepalive timeout period in the range 30300 seconds for high-density mode or 10300 seconds for low-density mode. The default is 30.
Syntax:
Mode(s):
ppp log
Description: Syntax: Enables PPP packet or state machine logging on any dynamic interface that uses the profile being configured. The no version disables the logging. [ no ] ppp log logCategory logCategory one of the following categories
pppPacket enables PPP packet logging pppStateMachine enables PPP state machine logging
Mode(s): Profile Configuration
ppp magic-number disable

Description: Disables negotiation of the local magic number. Issuing this command prevents the system from detecting loopback configurations. The no version enables negotiation. [ no ] ppp magic-number disable Interface Configuration, Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
ppp max-bad-auth ERX Edge Routers
345
ppp max-bad-auth
Description: Specifies the maximum number of authentication retries the system accepts before terminating a PPP session. The no version returns the value to the default. ppp max-bad-auth maxBadAuth no ppp max-bad-auth maxBadAuth number of authentication retries after which the interface resets itself in the range: 07. The default is 0, which indicates that no retries are allowed.
Syntax:
Mode(s):
ppp mru
Description: Sets the maximum allowable size in bytes of the maximum receive unit for PPP or MLPPP serial interfaces. If the command is executed from an encapsulated PPP or MLPPP serial interface, it affects only that interface. If executed from an MLPPP bundle, it affects all serial member links within that bundle. The no version restores the default value, which varies according to module type. ppp mru mruSize no ppp mru Mode(s): mruSize the maximum allowable size of the MRU; the range is from 6465535
Syntax:
ppp multilink enable

Description: Enables creation of dynamic MLPPP interfaces when used in a profile. The no version causes the LNS to reject any incoming requests to establish dynamic MLPPP interfaces. [ no ] ppp multilink enable Profile Configuration
Syntax: Mode(s):
346
ppp passive-mode
ppp passive-mode
Description: Forces dynamic and static PPP interfaces into passive mode before LCP negotiation begins for a period of one second, enabling slow clients time to start up and to initiate LCP negotiation. The no version disables passive mode. [ no ] ppp passive-mode Interface Configuration, Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
ppp peer
Description: Resolves conflicts when the system and the PPP peer system have the primary and secondary DNS and WINS name server addresses configured with different values. If the PPP peer system has the address and the system does not, the peer always supplies the address regardless of how you have configured the PPP peer. The no version configures the system to take precedence during setup negotiations between the system and the remote personal computer client. [ no ] ppp peer { dns | wins } Mode(s): dns sets the peer to take precedence over the system for resolving conflicts in the DNS primary and secondary addresses wins sets the peer to take precedence over the system for resolving conflicts in the WINS primary and secondary addresses
Syntax:
ppp shutdown
Description: Stops a PPP session. For MLPPP, issue only in the context of a network interface; the command disables the service for the MLPPP network interface (MLPPP bundle). The no version restarts a PPP session. [ no ] ppp shutdown [ ip | mpls | osi ] Mode(s): ip disables the IPCP service mpls disables MPLS service osi disables the OSINLCP service
Syntax:
pppoe ERX Edge Routers
347
pppoe
Description: Syntax: Mode(s): Creates a PPPoE major interface. The no version removes the interface. [ no ] pppoe Interface Configuration, Subinterface Configuration
pppoe acName
Description: Allows you to configure an access concentrator name for a PPPoE interface or profile. If no AC name is configured, the system name is used. The no version removes the access concentrator name. pppoe acName string no pppoe acName Mode(s): string AC name; 64 characters maximum
Syntax:
pppoe auto-configure
Description: Syntax: Mode(s): Sets up the system to dynamically create PPPoE subinterfaces on the PPPoE major interfaces. The no version removes this configuration. [ no ] pppoe auto-configure Subinterface Configuration
pppoe always-offer
Description: Sets up the system to offer to set up a session, even if the system has insufficient resources to establish a session. The no version disables this feature, and is the default setting. [ no ] pppoe always-offer Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
pppoe duplicate-protection
Description: Sets up the system to prevent a client from establishing more than one session using the same MAC address. The no version disables this feature, and is the default setting. [ no ] pppoe duplicate-protection Subinterface Configuration, Profile Configuration
Syntax: Mode(s):
348
pppoe log pppoeControlPacket
pppoe log pppoeControlPacket

Description: Enables packet trace logging on PPPoE dynamic interfaces created using the profile being configured. Packet trace information is logged to the pppoeControlPacket log. The no version disables the logging. [ no ] pppoe log pppoeControlPacket Profile Configuration
Syntax: Mode(s):
pppoe motm
Description: Causes the PPPoE application to send a PADM message of the minute message. The no version disables the message. The recipient of the message is determined by the mode from which the command is issued. From Privileged Exec mode the message is sent to all PPPoE clients connected to the system; from Interface Configuration mode the PADM message is sent to the client as it is configured (if connected); and from Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface. The MOTM string is passed with no changes. pppoe motm string no pppoe motm Mode(s): string message sent
Syntax:
Privileged Exec, Interface Configuration, Profile Configuration
pppoe sessions
Description: Specifies the number of subinterfaces permitted on a PPPoE interface. The command affects only subinterfaces that are created after the command is entered. Previously created interfaces remain, even if their number exceeds the new value of the sessions parameter. The no version restores the default value, 4094. pppoe sessions sessions no pppoe sessions Mode(s): sessions number of subinterfaces permitted on the interface in the range 14094; the default is 4094
Syntax:
pppoe subinterface ERX Edge Routers
349
pppoe subinterface
Description: Syntax: Creates a PPPoE subinterface on an FE, GE, or ATM interface. [ no ] pppoe subinterface interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
pppoe url
Description: Causes the PPPoE application to send string to the new client. The no version disables the message. The recipient of the message is determined by the mode from which the command is issued. From Interface Configuration mode the PADM message is sent to the client as it is configured (if connected). From Profile Configuration mode the message is sent to the new client created when the profile is dynamically attached to an IP interface. pppoe url url no pppoe url Mode(s): url URL string sent
Syntax:
preference
Description: Syntax: Specifies the preference value for an L2TP or L2F tunnel in Domain Map Configuration mode. The no version restores the default value, 0. preference tunnelPreference no preference Mode(s): tunnelPreference tunnel preference in the range 02000; 0 is the highest preference
350
profile
profile
Description: When used from Global Configuration mode, the command creates a profile. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile. When used from Subinterface Configuration mode, the command assigns a profile to an interface. Use profiles to configure interfaces dynamically, allowing you to manage a large number of interfaces effectively. The no version removes the profile assigned to the interface. When used from L2TP Destination Profile Host Configuration mode, sets an attribute of the current remote host. The no version removes the attribute from the remote host. To assign a profile name for a remote host: [ no ] profile profileName To create a profile or assign a profile to a subinterface: profile [ bridgedEthernet | ip | ppp | pppoe | any ] profileName no profile [ bridgedEthernet | ip | ppp | pppoe | any ] Mode(s): bridgedEthernet specifies a bridged Ethernet encapsulation type to which the profile applies ip specifies an IP encapsulation type to which the profile applies ppp specifies a PPP encapsulation type to which the profile applies pppoe specifies a PPPoE encapsulation type to which the profile applies any specifies any auto-configured encapsulation that does not have a specific profile assignment profileName profile name of up to 80 characters
Syntax:
Global Configuration, Subinterface Configuration, L2TP Destination Profile Host Configuration
qos-mode-port
Description: Syntax: Mode(s): Configures an ATM port for per-port queuing. The no version removes per-port queuing on the ATM port. [ no ] qos-mode-port Interface Configuration
qos-port-type-profile ERX Edge Routers
351
qos-port-type-profile
Description: Syntax: Associates a QoS profile with all the ports of a given interface type. There is no no version for this command. [ no ] qos-port-type-profile interfaceType qos-profile qosProfileName Mode(s): interfaceType one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port qosProfileName name of the QoS profile
qos-profile
Description: In Global Configuration mode, creates a QoS profile on your system. The no version deletes the QoS profile in Global Configuration mode. In Interface Configuration mode, attaches a QoS profile to a given interface. The no version detaches the QoS profile from the interface in Interface Configuration mode. [ no ] qos-profile qosProfileName Mode(s): qosProfileName name of the QoS profile
Syntax:
query-interval
Description: Syntax: Specifies how often the system sends PIM router query messages to remote neighbors. The no version specifies the default time interval, 30 seconds. query-interval queryTime no query-interval Mode(s): queryTime interval in the range 0210 seconds at which the system sends PIM router query messages from this interface
352
queue
queue
Description: Syntax: Specifies that a queue traffic class be configured for the selected interface type. The no version removes this rule from the QoS profile. [ no ] interfaceType queue traffic-class trafficClassName [ queue-profile queueProfileName ] [ scheduler-profile schedProfileName ] | [ scheduler-profile schedProfileName ] [ queue-profile queueProfileName ] ] interfaceType one of the following interface types for which queue traffic classes should be configured: atm, atm-vc, cbf, ethernet, fr-vc, ip, ip-tunnel, l2tp-tunnel, serial, server-port, vlan trafficClassName name of the traffic class queueProfileName name of the queue profile schedProfileName name of the scheduler profile
Mode(s):
QoS Profile Configuration
queue-profile
Description: Syntax: Configures a queue profile. The no version removes the named queue profile. [ no ] queue-profile queueProfileName Mode(s): queueProfileName name of the queue profile
radius acct-session-id-format
Description: Syntax: Configures the RADIUS clients use of a specific format for RADIUS attribute 44, Acct-Session-Id. The no version negates the Acct-Session-Id format. radius acct-session-id-format { decimal | description } no radius acct-session-id-format Mode(s): Global Configuration
radius algorithm ERX Edge Routers
353
radius algorithm
Description: Syntax: Specifies the algorithm that the RADIUS client uses to contact the RADIUS server. The no version restores the default value, direct. radius algorithm direct | round-robin no radius algorithm Mode(s): direct contacts the first AAA server on the list for each user, and the second if the first one fails, and so on. round-robin contacts the first AAA server for the first user, and the second for the second user, and so on.
radius calling-station-delimiter
Description: Syntax: Specifies the delimiter for DSL PPP users for RADIUS attribute, Calling-Station-Id. The no version removes the delimiter. radius calling-station-delimiter delimiter no radius calling-station-delimiter Mode(s): delimiter special character to set off items in the Calling-Station-Ids definition (for example, # or %)
354
radius calling-station-format
radius calling-station-format
Description: On a virtual router, specifies the format of RADIUS attribute 31, Calling-Station-Id, when the PPP user is terminated at the non-LNS ERX system. The no version returns the Calling-Station-Id format to delimited. radius calling-station-format delimited | fixed-format no radius calling-station-format delimited specifies that the RADIUS client uses the delimited format: delimiter systemName delimiter interfaceDescription delimiter vpi delimiter vci In the case of Ethernet vpi delimiter vci is replaced with vlan. fixed-format specifies that the RADIUS client uses the fixed format: systemName (up to four bytes) slot (two bytes) port (one byte) VPI (three bytes) VCI (five bytes)
Syntax:
All fields are in ASCII, making the format up to 15 characters in length. In the case of Ethernet, the VPI and VCI bytes are replaced by an 8-byte
VLAN.
In the case of PPP terminated from LNS, the Calling-Station-Id attribute

is the value passed as the calling-station AVP. Mode(s): Global Configuration
radius client
Description: This command has only a no version. See the no radius clientcommand for a complete description and syntax.
radius dsl-port-type ERX Edge Routers
355
radius dsl-port-type
Description: Sets RADIUS attribute 61, NAS-Port-Type, in RADIUS access request packets and accounting start and stop packets for ATM interfaces. The no version restores the default setting of xdsl. radius dsl-port-type { sdsl | adsl-cap | adsl-dmt | idsl | xdsl | virtual } no radius dsl-port-type Mode(s): sdsl symmetric DSL adsl-cap asymmetric DSL, carrierless amplitude phase modulation adsl-dmt asymmetric DSL, discrete multitone idsl ISDN DSL xdsl DSL of unspecified type (default) virtual virtual
Syntax:
radius ethernet-port-type
Description: Syntax: Indicates to RADIUS which Ethernet port type to use in RADIUS attribute 61, NAS-Port-Type, for all Ethernet users on the ERX. radius ethernet-port-type [ virtual | ethernet ] no radius ethernet-port type Mode(s): virtual sets RADIUS NAS-Port-Type to virtual ethernet sets RADIUS NAS-Port-Type to Ethernet
radius ignore framed-ip-netmask

Description: Ignores the Framed-Ip-Netmask attribute 9, returned by RADIUS in the access-accept packet. The default is enable. The no version restores the default. radius ignore framed-ip-netmask enable | disable no radius ignore framed-ip-netmask Mode(s): Global Configuration
Syntax:
356
radius include
radius include
Description: Configures the inclusion of RADIUS attributes in RADIUS messages. Not all attributes are available in all message types. All attributes are included by default except for tunnel-server-attributes. The no version restores the default. radius include attributeName { access-request | acct-start | acct-stop } { enable | disable } no radius include attributeName { access-request | acct-start | acct-stop } attributeName one of the following RADIUS attributes; not all attributes are available in all message types: Attributes available for Access-Request, Acct-Start, and Acct-Stop messages:
Syntax:
acct-tunnel-connection includes RADIUS attribute 68,

Acct-Tunnel-Connection
called-station-id includes RADIUS attribute 30, Called-Station-Id calling-station-id includes RADIUS attribute 31, Calling-Station-Id connect-info includes RADIUS attribute 77, Connect-Info nas-identifier includes RADIUS attribute 32, NAS-Identifier nas-port includes RADIUS attribute 5, NAS-Port, nas-port-id includes RADIUS attribute 87, NAS-Port-Id nas-port-type includes RADIUS attribute 61, NAS-Port-Type pppoe-description includes RADIUS attribute 26-24,
Pppoe-Description
tunnel-client-auth-id includes RADIUS attribute 90,

Tunnel-Client-Auth-Id
tunnel-client-endpoint includes RADIUS attribute 66,

Tunnel-Client-Endpoint
tunnel-medium-type includes RADIUS attribute 65,

Tunnel-Medium-Type
tunnel-server-attributes includes all supported tunnel server attributes,

that is, the attributes of the tunnel client when PPP is terminated at the LNS on the system
tunnel-server-auth-id includes RADIUS attribute 91,

Tunnel-Server-Auth-Id
tunnel-server-endpoint includes RADIUS attribute 67,

Tunnel-Server-Endpoint
tunnel-type includes RADIUS attribute 64, Tunnel-Type
radius include ERX Edge Routers
357
Attributes available for Access-Request messages only:
acct-session-id includes RADIUS attribute 44, Acct-Session-Id

Attributes available for Acct-Start messages only:
framed-ip-addr includes RADIUS attribute 8, Framed-IP-Address

Attributes available for Acct-Start and Acct-Stop messages only:
acct-link-count includes RADIUS attribute 51, Acct-Link-Count acct-multi-session-id includes RADIUS attribute 50,
Acct-Multi-Session-ID
class includes RADIUS attribute 25, Class egress-policy-name includes RADIUS attribute 26-11,
Egress-Policy-Name
event-timestamp includes RADIUS attribute 55, Event-Timestamp framed-compression includes RADIUS attribute 13,
Framed-Compression
framed-ip-netmask includes RADIUS attribute 9, Framed-IP-Netmask ingress-policy-name includes RADIUS attribute 26-10,
Ingress-Policy-Name
tunnel-assignment-id includes RADIUS attribute 82,

Tunnel-Assignment-Id
tunnel-preference includes RADIUS attribute 83, Tunnel-Preference

Attributes available for Acct-Stop messages only:
input-gigapkts includes RADIUS attribute 26-35,

Acct-Input-Gigapackets
input-gigawords includes RADIUS attribute 52, Acct-Input-Gigawords output-gigapkts includes RADIUS attribute 26-36,
Acct-Output-Gigapackets
output-gigawords includes RADIUS attribute 53,

Acct-Output-Gigawords Mode(s): access-request specifies RADIUS Access-Request messages acct-start specifies RADIUS Acct-Start messages acct-stop specifies RADIUS Acct-Stop messages enable enables attribute inclusion disables disables attribute inclusion; the attribute is excluded
358
radius nas-identifier
radius nas-identifier
Description: Syntax: Configures the RADIUS clients value for RADIUS attribute 32, NAS-Identifier. The no version deletes the NAS-Identifier. radius nas-identifier identifierValue no radius nas-identifier Mode(s): identifierValue value in the range is 1 64 characters; this value is used in the NAS-Identifier attribute for authentication and accounting requests
radius nas-port-format
Description: Syntax: Configures the RADIUS clients use of a specific format for RADIUS attribute 5, NAS-Port. The no version removes the format. radius nas-port-format { 0ssssppp | ssss0ppp } no radius nas-port-format Mode(s): 0ssssppp sets the RADIUS client to use the 0ssssppp format where s is slot and p is port ssss0ppp sets the RADIUS client to use the ssss0ppp format where s is slot and p is port
radius override nas-ip-addr tunnel-client-endpoint

Description: Configures the RADIUS client (LNS) to use the tunnel-client-endpoint (LAC) IP address for RADIUS attribute 4, NAS-IP-Address. The no version restores the default address. radius override nas-ip-addr tunnel-client-endpoint no radius override nas-ip-addr Mode(s): radius configures the RADIUS server override configures the RADIUS client to override the standard use for an attribute nas-ip-addr configures the RADIUS client value for the nas-ip-addr attribute tunnel-client-endpoint configures the RADIUS client to use the tunnel-client-endpoint in an attribute
Syntax:
radius rollover-on-reject ERX Edge Routers
359
radius rollover-on-reject
Description: On a virtual router, specifies whether the system should roll over to the next RADIUS server when the system receives an access-reject message for the user it is authenticating. The no version restores the default value, disable. radius rollover-on-reject { enable | disable } no radius rollover-on-reject Mode(s): Global Configuration
Syntax:
radius server
Description: Syntax: Specifies the IP address of a RADIUS authentication and accounting servers. The no version deletes the instance of the RADIUS server. radius { authentication | accounting } server ipAddress no radius { authentication | accounting } server ipAddress Mode(s): authentication configure the RADIUS authentication server accounting configure the RADIUS accounting server ipAddress IP address of the server
radius trap acct-server-not-responding

Description: Enables or disables SNMP traps when a particular RADIUS accounting server fails to respond to a RADIUS accounting request. The no version restores the default value, disable. [ no ] radius trap acct-server-not-responding { enable | disable } Global Configuration
Syntax: Mode(s):
radius trap auth-server-not-responding

Description: Enables or disables SNMP traps when a particular RADIUS authentication server fails to respond to a RADIUS Access-Request message. The no version restores the default value, disable. [ no ] radius trap auth-server-not-responding { enable | disable } Global Configuration
Syntax: Mode(s):
360
radius trap no-acct-server-responding
radius trap no-acct-server-responding

Description: Enables or disables SNMP traps when all of the configured RADIUS accounting servers per VR fail to respond to a RADIUS accounting request. The no version restores the default value, disable. [ no ] radius trap no-acct-server-responding { enable | disable } Global Configuration
Syntax: Mode(s):
radius trap no-auth-server-responding

Description: Enables or disables SNMP traps when all of the configured RADIUS authentication servers per VR fail to respond to a RADIUS Access-Request message. The no version restores the default value, disable. [ no ] radius trap no-auth-server-responding { enable | disable } Global Configuration
Syntax: Mode(s):
radius tunnel-accounting
Description: Syntax: Enables or disables tunnel accounting. The no version restores the default value, disable. radius tunnel-accounting { enable | disable } no radius tunnel-accounting Mode(s): Global Configuration
radius udp-checksum
Description: Syntax: Enables or disables UDP checksum for RADIUS packets on virtual routers you configure for B-RAS. The no version restores the default value, enable. radius udp-checksum { enable | disable } no radius udp-checksum Mode(s): Global Configuration
radius update-source-addr ERX Edge Routers
361
radius update-source-addr
Description: Specifies an alternate source IP address for the system to use rather than the default router ID. The no version deletes the alternate address, and the system uses the router ID. radius update-source-addr sourceAddr no radius update-source-addr Mode(s): sourceAddr source address of the RADIUS client
Syntax:
rate-limit-profile
Description: From Global Configuration mode, creates a rate limit profile and accesses Rate Limit Profile Configuration mode. The no version removes the rate limit profile. From Policy Configuration mode, specifies a rate limit profile as a rule in a policy list. The no version removes a rate limit profile from a policy list. The suspend version suspends the rule temporarily. To create a rate limit profile: [ no ] rate-limit-profile profileName [ rateLimitProfileType profileName name of the rate limit profile rateLimitProfileType one-rate or two-rate
Syntax:
To specify a rate limit profile in a policy: [ no ] [ suspend ] rate-limit-profile profileName [ classifier-group claclName ] [ precedence precValue ] Mode(s): profileName name of the rate limit profile to be created or to be used in a policy claclName classifier control list used to classify packets for this rate limit profile precValue precedence of this rule in relation to other rules within this set
Global Configuration, Policy Configuration
362
rd
rd
Description: Syntax: Specifies the unique two-part route distinguisher for a VRF. There is no no version. rd distinguisher distinguisher unique two-part identifier of the format number1:number2 where:
number1 AS number or an IP address number2 unique integer; 32 bits if number1 is an AS number; 16 bits if
number1 is an IP address Mode(s): VRF Configuration
receive version
Description: Restricts the RIP version that the system can receive on a RIP remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, receiving both RIP version 1 and version 2. receive version [ 1 ] [ 2 ] [ off ] no address receive version Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only off turns reception off
Syntax:
redistribute ERX Edge Routers
363
redistribute
Description: Redistributes routes from one routing domain into another routing domain. For DVMRP, only routes that appear in the RPF table can be redistributed. The no version ends redistribution of information. The options available vary depending on your routing protocol context; that is, on whether you are configuring BGP, DVMRP, IS-IS, OSPF, or RIP. BGP: redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric absoluteValue | route-map mapTag | weight wtValue ]* no redistribute { fromProtocol | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ metric [ absoluteValue ] | route-map [ mapTag ] | weight [ wtValue ] ]* DVMRP: [ no ] redistribute fromProtocol [ route-map mapTag ]
Syntax:
IS-IS: redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric absoluteValue | metric-type { external | internal } | route-map mapTag ]* no redistribute { fromProtocol | static [ ip ] | [ ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] ] } [ level-1 | level-1-2 | level-2 | metric [ absoluteValue ] | metric-type { external | internal } | route-map [ mapTag ] ]* OSPF: redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric absoluteValue | tag tagValue | route-map mapTag ]* no redistribute { fromProtocol | ospf match internal } [ metric-type [ 1 | 2 ] | metric [ absoluteValue ] | tag [ tagValue ] | route-map [ mapTag ] ]* redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag | tag tagValue ]* no redistribute { ospf match internal external [ 1 | 2 ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] | tag [ tagValue ] ]*
364
redistribute
RIP: redistribute { fromProtocol | ospf match internal [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric absoluteValue | route-map mapTag ]* no redistribute { fromProtocol | ospf match internal } [ external [ 1 | 2 ] ] | ospf match external [ 1 | 2 ] [ internal ] } [ metric [ absoluteValue ] | route-map [ mapTag ] ]* fromProtocol source protocol from which routes are being redistributed; the default is no source protocol defined
access redistributes access-server routes (BGP) access-internal redistributes internal routes to directly connected
clients (BGP)
bgp routes sourced from BGP protocol connected routes that are established automatically when IP is
enabled on an interface (non-multicast routing protocols). For routing protocols such as OSPF and IS-IS, these routes are redistributed as external to the AS. When redistributing from connected, only those connected networks that are configured on an interface that is not configured to run IS-IS will be redistributed. For DVMRP, this keyword redistributes routes that are established automatically in the RPF table because another multicast routing protocol, such as PIM, is enabled on an interface.
dvmrp routes sourced from DVMRP isis routes sourced from IS-IS ospf routes sourced from OSPF rip routes sourced from RIP static redistributes static routes; for IS-IS, you can specify static or
static ip ospf match determines what type(s) of routes to redistribute from OSPF; all OSPF routes are redistributed if you do not specify a type
internal redistributes OSPF internal routes external 1 redistributes OSPF external routes of metric-type 1 external 2 redistributes OSPF external routes of metric-type 2
absoluteValue a metric that is applied to all routes from the source protocol; ranges from 0429496729; in BGP this value is the MED, which defaults to the IGP metric of the redistributed route mapTag a string of up to 32 alphanumeric characters that specifies a route map applied to all routes from the source protocol; all routes are redistributed if you do not specify a route map wtValue administrative weight (relative importance) for routes redistributed into the protocol; a number in the range 065535
redistribute isis ip ERX Edge Routers
365
level-1 specifies the redistribution of only IS-IS level 1 routes level-1-2 specifies the redistribution of both IS-IS level 1 and level 2 routes level-2 specifies the redistribution of only IS-IS level 2 routes metric-type specifies the OSPF or IS-IS metric type for all routes from the source protocol For routes redistributed into IS-IS:
metric-type external only the metric of the route itself is considered for
comparison
metric-type internal both the metric of the route and the cost to the
router that advertised the route are considered for comparison; this is the IS-IS default For routes redistributed into OSPF:
metric-type 1 cost of the external routes is equal to the sum of all

internal costs and the external cost
metric-type 2 cost of the external routes is equal to the external cost

alone; this is the OSPF default Mode(s): tagValue a tag that is applied to all routes from the source protocol; ranges from 0429496729 * indicates that one or more parameters can be repeated multiple times in a list in the command line
redistribute isis ip
Description: Syntax: Redistributes routes from one IS-IS routing level into the other. The no version ends the redistribution. [ no ] redistribute isis ip { level-1 into level-2 | level-2 into level-1 } distribute-list accessListName Mode(s): level-1 specifies the redistribution of routes from or into IS-IS level 1 level-2 specifies the redistribution of routes from or into IS-IS level 2 accessListName string of up to 32 alphanumeric characters specifying the IP access list used to filter routes between levels
366
redundancy force-failover
redundancy force-failover
Description: Forces the system to switch from the primary line module in the specified slot or the primary SRP module to the spare line module or SRP module. This command overrides the redundancy lockout command. With the srp option, the command is equivalent to the srp switch command. There is no no version. redundancy force-failover { slotNumber | srp } Mode(s): slotNumber number of the slot in which the primary line module resides srp indicates that the system should switch from the active to the standby SRP module
Syntax:
Privileged Exec
redundancy lockout
Description: Prevents the system from switching automatically to a spare line module if the primary module fails on a slot. The no version reverts to the default situation, in which the system switches automatically to a spare line module if the primary module fails on a slot. The redundancy force-failover command overrides this command. There is no no version. [ no ] redundancy lockout slotNumber Mode(s): slotNumber number of the slot in which the primary line module resides
Syntax:
redundancy revert ERX Edge Routers
367
redundancy revert
Description: Forces the system to revert to the primary line module in the specified slot. If you specify a time or time and date, reversion occurs when the primary line module becomes available after that time. Otherwise, reversion occurs immediately. Issuing this command causes reversion once; after reboot, the system returns to the settings configured in the software. The no version has no effect. [ no ] redundancy revert slotNumber [ startTime [ [ startMonth startDay | startDay startMonth ] startYear ] ] Mode(s): slotNumber number of the slot in which the primary line module resides startTime time, in 24-hour format (00:00:00), at which the system reverts to this line module startMonth name of the month in which the system reverts to this line module startDay day of the month on which the system reverts to this line module startYear four-digit year in which the system reverts to this line module
Syntax:
Privileged Exec
redundancy revertive
Description: Enables the system to revert from spare line modules to available primary line modules automatically. The no version reverts to the default situation, in which there is no automatic reversion from spare to primary line modules. [ no ] redundancy revertive [ timeOfDay ] Mode(s): timeOfDay time, in 24-hour format (00:00:00), at which the system reverts to the available primary line modules every day
Syntax:
refresh-period
Description: Specifies the timeout period in milliseconds between generation of RSVP refresh messages. The no version restores the default value of 30000 milliseconds. refresh-period period no refresh-period Mode(s): period interval from 04294967295
Syntax:
RSVP Profile Configuration
368
reload
reload
Description: Syntax: Reloads the operating system in the designated interval or at the designated time. There is no no version. reload [ force [ reason ] | in inTime [ reason ] | at atTime [ month day | day month ] [ reason ] | cancel ] force prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption. reason reason for the reload (1255 characters long) inTime schedules a reload of the software to take place in the specified minutes or hours and minutes ([ hh: ] mm). If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails. atTime schedules a reload of the software to take place at the specified time (hh:mm) (using a 24-hour clock). If you specify the month and day, the reload takes place at the specified time and date. If you do not specify the month and day, the reload takes place at the specified time on the current day (if the specified time is later than the current time) or on the next day (if the specified time is earlier than the current time). Specifying 00:00 schedules the reload for midnight. If the system is in a state that could lead to a loss of configuration data or an NVS corruption, it will delay the reboot for one minute, up to five times. If the system cannot reboot on its sixth attempt, the scheduled reboot fails. month name of the month (any number of characters in a unique string) day number of the day of the month, in the range 131 cancel cancels a scheduled reload
Mode(s):
Privileged Exec
reload slot
Description: Syntax: Reboots the module in the selected slot. There is no no version. reload slot slotNumber [ force ] reason reason for the reload (1255 characters long) slotNumber number of a selected slot in the router force prompts for confirmation to reboot if the system is in certain states, such as during the synchronization of SRP modules, that could lead to a loss of configuration data or an NVS corruption.
Mode(s):
Privileged Exec
remote host ERX Edge Routers
369
remote host
Description: Syntax: Defines an L2TP host profile. Accesses the L2TP Destination Profile Host Configuration mode. The no version removes an L2TP host profile. remote host { hostname | default } no remote host { hostname | default } Mode(s): hostname name the LAC must supply in the hostname AVP of the receive SCCRQ; can be up to 64 characters in length (no spaces) default allows the LAC to use any hostname in the hostname AVP
L2TP Destination Profile Configuration
remote-loopback
Description: Enables the acceptance of remote loopback requests on a T1 line on a CT1 line module. The no version restores the default value, which is to reject remote loopback requests. [ no ] remote-loopback Controller Configuration
Syntax: Mode(s):
remote-neighbor
Description: Syntax: Configures an OSPF, PIM, or RIP remote neighbor. The no version removes the remote neighbor and any attributes configured for the neighbor. For OSPF: [ no ] remote-neighbor ipAddress area { areaId | areaIdInt } For PIM [ no ] remote-neighbor ipAddress sparse-mode For RIP: [ no ] remote-neighbor ipAddress Mode(s): ipAddress IP address identifying the remote neighbor areaId OSPF area ID in IP address format areaIdInt OSPF area ID as a decimal value 04294967295
370
rename
rename
Description: Renames a local file. There is no no version. Note: You cannot change the extension of a file, for example, .scr. Syntax: rename oldFileName newFileName Mode(s): oldFileName file to rename newFileName new filename
Privileged Exec
request-data-size
Description: Syntax: Sets the request payload data size. The no version restores the default value. request-data-size requestSizeValue no request-data-size Mode(s): requestSizeValue size of the data in bytes in the request packets payload; the default is 1 byte
RTR Configuration
reserve
Description: Syntax: For DHCP local server clients, reserves an IP address for a specific MAC address. The no version removes the reservation. reserve ipAddress macAddress no reserve ipAddress ipAddress IP address to reserve macAddress MAC address for which the IP address is reserved. Mode(s): Pool Configuration
retransmit
Description: Specifies maximum number of times the system retransmits a RADIUS packet to an authentication or accounting server. The no version restores the default value. retransmit retries no retransmit Mode(s): retries number of retries in the range 010. The default is 3.
Syntax:
Radius Configuration
retransmit-interval ERX Edge Routers
371
retransmit-interval
Description: Specifies the time between LSA retransmissions for the OSPF remote-neighbor interface when an acknowledgment for the LSA is not received. The no version restores the default value. retransmit-interval retransInterval no retransmit-interval Mode(s): retransInterval a number in the range 03600 seconds; default value is 5 seconds
Syntax:
rib-out disable
Description: Disables storage of routes to the Adj-RIBs-Out tables (disables rib-out) for all BGP peers. Storage is disabled by default. The no version enables the route storage. The default version removes the explicit global configuration for all peers and reestablishes inheritance of the feature configuration. Note: If you enable or disable rib-out globally and this action changes the current configuration, all sessions are automatically bounced. Syntax: Mode(s): [ no | default ] rib-out disable Router Configuration
372
route-map
route-map
Description: Specifies a route map for DVMRP or RIP, or defines the conditions for applying routing policies to filter or modify routes redistributed into or propagated by a routing protocol. The no version deletes the route map. Specifying for DVMRP or RIP: [ no ] route-map mapTag [ interfaceType interfaceSpecifier ] mapTag a string of up to 32 alphanumeric characters. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
Defining a route map: [ no ] route-map mapTag [ permit | deny ] [ sequence ] mapTag string of up to 32 alphanumeric characters. The redistribute Router Configuration command uses this string to reference this route map. Multiple route maps may share the same map tag. permit if the match criteria are met for this route map and permit is specified, the route is redistributed as controlled by the set actions. deny if the match criteria are met for the route map and deny is specified, the route is not redistributed, and no further route maps sharing the same map tag are examined. sequence number in the range 065535 that indicates the position a new route map is to have in the list of route maps already configured with the same map tag. If given with the no version of this command, it specifies the position of the route map that should be deleted.
Mode(s):
router bgp
Description: Configures the BGP routing process. Allows you to set up a distributed routing core that automatically guarantees the loop-free exchange of routing information between ASs. The no version removes a routing process. [ no ] router bgp autonomousSystem Mode(s): autonomousSystem number in the range 14294967295; the AS number that identifies the router to other BGP routers
Syntax:
router dvmrp ERX Edge Routers
373
router dvmrp
Description: Syntax: Mode(s): Creates and enables DVMRP on a virtual router; accesses DVMRP router configuration mode. The no version deletes DVMRP from a virtual router. [ no ] router dvmrp Global Configuration
router igmp
Description: Syntax: Description: Creates and enables IGMP on a virtual router; accesses IGMP router configuration mode. The no version disables IGMP on a virtual router. [ no ] router igmp Global Configuration
router isis
Description: Syntax: Enables the IS-IS routing protocol and specifies an IS-IS process for IP. The no version disables IS-IS routing. [ no ] router isis [ tag ] tag meaningful name for a routing process; name must be unique among all IP router processes for a given router; if not specified, a null tag is assumed, and the process is referenced with a null tag
Mode(s):
router ospf
Description: Syntax: Configures an OSPF routing process. The no version disables an OSPF routing process. [ no ] router ospf processId [ vrf vrfName ] Mode(s): processId number in the range 165535 that identifies the OSPF process vrfName name of the VRF; string of 132 alphanumeric characters; available only in virtual router context, not VRF context
374
router pim
router pim
Description: Syntax: Mode(s): Creates and enables PIM on a virtual router; accesses PIM router configuration mode. The no version deletes PIM from a virtual router. [ no ] router pim Global Configuration
router rip
Description: Syntax: Mode(s): Enables RIP routing protocol configuration. The no version deletes the RIP process and removes the configuration from the system. [ no ] router rip Global Configuration
route-target
Description: Creates or adds to a list of VPN extended communities used to determine which routes are imported by a VRF. If at least one route target in the route-target export list contained in the update message advertising a route matches a route target in the route-target import list associated with a VRF, that route is installed in the VRFs forwarding table. The no version removes a route target from the specified list. [ no ] route-target { import | export | both } extendedCommunity import adds the route target to the current VRFs import list; the VRF accepts only routes that have at least one route target that matches a route target in the import list export adds the route target to the current VRFs export list; all routes advertised from this VRF are associated with the export list; at least one route target in the export list must match a route target in the import list of a VRF receiving the route for the route to be installed in the VRFs forwarding table both adds the route target to both the import list and export list of the current VRF extendedCommunity two-part number of the format number1:number2 that identifies an extended community of VPNs where:
Syntax:
number1 an AS number or an IP address number2 a unique integer; 32 bits if number1 is an AS number; 16 bits
if number1 is an IP address Mode(s): VRF Configuration
rtr ERX Edge Routers
375
rtr
Description: Sets the number of the RTR operation to be configured and accesses the RTR Configuration mode. The no version removes all configuration information for a given RTR operation. [ no ] rtr rtrIndex no rtr Mode(s): rtrIndex number of the operation to be configured; there is no default
Syntax:
rtr reaction-configuration
Description: Syntax: This command has only a no version. The no version clears all traps for all the rtr reaction-configuration command options. no rtr reaction-configuration rtrIndex Mode(s): rtrIndex number of the operation configured
rtr reaction-configuration action-type

Description: Sets certain actions to occur based on events under control of the RTR. The default is that traps of enabled events are taken. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex [ action-type actionType ] rtrIndex number of the operation to be configured actionType one of the following types:
Syntax:
none no action; selecting this option clears all traps for the given
operation
trapOnly trap only action; this is the default; enabled events trigger the
trap Mode(s): Global Configuration
376
rtr reaction-configuration operation-failure
rtr reaction-configuration operation-failure

Description: Enables operation-failure reaction. When the type of RTR entry is echo, you can also configure a value that triggers the operation-failure trap. When the type of RTR entry is pathEcho, you cannot configure the operation-failure trap. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex operation-failure [ operationFailureValue ] Mode(s): rtrIndex number of the operation to be configured operationFailureValue number in the range 015; default is 1
Syntax:
rtr reaction-configuration path-change

Description: Enables path change reaction. When the type of RTR entry is echo, you cannot configure the path-change trap. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex path-change Mode(s): rtrIndex number of the operation to be configured; no default
Syntax:
rtr reaction-configuration test-completion

Description: Syntax: Enables test completion reaction. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex test-completion Mode(s): rtrIndex number of the operation to be configured
rtr reaction-configuration test-failure

Description: Enables test failure reaction to occur. When the type of RTR entry is echo, you can also configure a value that triggers the test-failure trap. See the rtr reaction-configuration command. There is no no version. rtr reaction-configuration rtrIndex test-failure [ testFailureValue ] Mode(s): rtrIndex number of the operation to be configured testFailureValue number in the range 015; default is 1
Syntax:
rtr reset ERX Edge Routers
377
rtr reset
Description: Syntax: Mode(s): Shuts down all RTR operations and clears the RTR configuration for the given virtual router. The no version negates the reset operation. [ no ] rtr reset Global Configuration
rtr schedule
Description: Configures the RTR time parameters for an RTR operation. The no version stops the operation by putting it in the pending state. The no version also resets the restart-time attribute and the life attribute. [ no ] rtr schedule rtrIndex Mode(s): rtrIndex number of the operation to be configured
Syntax:
rtr schedule life

Description: Syntax: Specifies the length of the test. There is no no version. rtr schedule rtrIndex life lifeValue rtrIndex number of the operation to be configured life value that depends on the type of the RTR entry; not a length of time:
If the type is echo, life relates to the number of operations sent until a
test finishes. The default is 90. If you use 60 operations * 60 seconds, the frequency between each operation that a test completes is 3,600 seconds (one hour).
If the type is pathEcho, life relates to the maximum number of hops used
by the traceRoute trap. The default is 30. If you use 30 (as the maximum hops) * 3 (operations per hop) * 60 seconds frequency between each operation, a test is completed within 3,600 seconds. If a destination is reached in fewer than 30 hops, the test is completed earlier. Mode(s): lifeValue number of operations or maximum TTL in the range 12147483647
378
rtr schedule restart-time
rtr schedule restart-time

Description: Syntax: Specifies the tests restart in seconds. There is no no version. rtr schedule rtrIndex restart-time restartValue Mode(s): rtrIndex number of the operation to be configured restartValue default is 0; 0 calls for no restart after the test finishes
rtr schedule start-time

Description: Syntax: Configures an entrys start. There is no no version. rtr schedule rtrIndex start-time { now | pending } Mode(s): rtrIndex number of the operation to be configured now RTR immediately begins to collect information. pending RTR does not begin to collect information. This is the default.
run
Description: Syntax: Allows you to issue a command that operates in User Exec mode from any CLI mode. There is no no version. run userExecCommand userExecCommand a CLI command that you can issue from User Exec mode Mode(s): All modes
samples-of-history-kept ERX Edge Routers
379
samples-of-history-kept
Description: Syntax: Sets the number of entries kept in the history table for each RTR operation. The no version restores the default value. samples-of-history-kept samples no samples-of-history-kept Mode(s): samples number of entries for each RTR index in the history table. The default is 16 for a pathEcho type and 1 for an echo type.
RTR Configuration
scheduler-profile
Description: Syntax: Configures a scheduler profile. The no version deletes the scheduler profile. [ no ] scheduler-profile schedulerProfileName Mode(s): schedulerProfileName name for the scheduler profile
scramble
Description: Enables cell scrambling on a T3 Frame interface. The no version disables cell scrambling on the interface. If you issue this command, be sure to issue the dsu mode and dsu bandwidth commands. Otherwise, the interface may drop packets unexpectedly. [ no ] scramble Controller Configuration
Syntax: Mode(s):
sdh
Description: Syntax: Mode(s): Specifies that the interface supports SDH. The no version restores SONET operation on this interface. [ no ] sdh Controller Configuration
380
send
send
Description: Sends a message to one or more terminals. If you begin the message on the same line as the command, the first character is a delimiter; you must end the message with the same delimiter. If you begin the message on another line, you must enter <Ctrl+Z> to end the message. There is no no version. send { * | absoluteLineNumber | console consoleLineNumber | vty vtyLineNumber } [ message ] Mode(s): * sends the message to all terminals absoluteLineNumber line number of a terminal to which the message is sent consoleLineNumber line number of a console to which the message is sent vtyLineNumber line number of a vty to which the message is sent message text of message to send; a string of up to 1023 alphanumeric characters
Syntax:
Privileged Exec
send-more-specific-routes-disable
Description: Specifies that RIP does not send a more-specific route if it has a less-specific route with any metric. The no version restores the default condition, wherein RIP always sends a more-specific route even if a less-specific route with a metric is available. [ no ] send-more-specific-routes-disable Router Configuration
Syntax: Mode(s):
send version
Description: Restricts the RIP version that the system can send on a remote-neighbor interface. The no version sets the remote-neighbor interface back to the default value, sending only RIP version 1. send version [ 1 | 2 | off ] no send version [ 1 | 2 | off ] Mode(s): 1 specifies RIP version 1 only 2 specifies RIP version 2 only off turns reception off
Syntax:
server-address ERX Edge Routers
381
server-address
Description: Syntax: Sets the DHCP server address that is sent to DHCP clients. The no version removes server address. server-address address no server-address [ address ] address DHCP server address Mode(s): Pool Configuration
server-name
Description: Syntax: Specifies the hostname expected from the L2TP LNS or the L2F home gateway when you set up a tunnel. The no version removes the server name. server-name serverName no server-name Mode(s): serverName hostname; can be up to 64 characters in length (no spaces)
service ctrl-x-reboot
Description: Enables the <Ctrl+X> key combination to reboot the system at all times, except that the key combination has no effect if you are accessing the system via a Telnet session. The no version restores the default condition, disabled. [ no ] service ctrl-x-reboot Global Configuration
Syntax: Mode(s):
service dhcp-local
Enables the DHCP local server. The no version disables the DHCP local server, and does not save the previous settings. [ no ] service dhcp-local [ equal-access | standalone ] equal-access enables the DHCP local server to work with the SDX (formerly SSC) or HTTP local server for non-PPP equal access, the default option. standalone configures the system as a DHCP local server
Syntax:
Mode(s):
382
service manual-commit
service manual-commit
Description: Stops the system from automatically saving configuration changes to nonvolatile storage. Places the system into Manual Commit mode; this mode has no effect on the CLI prompt. Causes an immediate save of configuration data not yet committed to nonvolatile storage. The no version returns the ERX system to Automatic Commit mode (with no effect on the CLI prompt). [ no ] service manual-commit Global Configuration
Syntax: Mode(s):
service password-encryption
Description: Directs the system to encrypt passwords that are saved in the configuration file. The command should be used as a simple cipher to prevent unauthorized users from viewing passwords. [ no ] service password-encryption Global Configuration
Syntax: Mode(s):
service timestamps
Description: Syntax: Formats timestamps associated with log messages. The no version removes timestamps from log messages. service timestamps log datetime [ show-timezone [ localtime ] ] no service timestamps [ log ] Mode(s): log indicates that a timestamp will appear on log messages datetime displays the date and time show-timezone displays the time zone localtime displays the timestamp in local time
service unattended password-recovery

Description: Allows you to delete all passwords and secrets from the console without being physically present at the router. When executed, this command changes the behavior of the erase secrets command, which will not take any parameters and will not be available through a vty session. The no version reverts erase secrets to factory default settings. [ no ] service unattended-password-recovery Global Configuration
Syntax: Mode(s):
set as-path prepend ERX Edge Routers
383
set as-path prepend

Description: Syntax: Prepends one or more AS numbers or a list of AS numbers to the AS path for BGP routes. The no version removes the set clause from a route map. set as-path prepend { list listName | asPathNumber [ asPathNumber ] * } no set as-path prepend listName name of a list of AS path numbers; string of up to 32 characters asPathNumber a number in the range 165535 that appends the string following the keyword prepend to the as-path of the route that is matched by the route map. Applies to outbound BGP route maps. * indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s):
set automatic-tag
Description: Syntax: Mode(s): Automatically computes the tag value. The no version removes the set clause from a route map. [ no ] set automatic-tag Route Map Configuration
set comm-list delete

Description: Removes communities specified by the community list from the community attribute of routes matching the route map. The no version removes the set clause from a route map. set comm-list { communityList | regularExpression } delete no set comm-list Mode(s): communityList community list identifier; a string of up to 32 characters regularExpression the regular expression that matches the community
Syntax:
384
set community
set community
Description: Sets the BGP community attribute to one or more community numbers or a list of community numbers. The no version removes the set clause from a route map. set community { list communityListName [ additive ] | none } set community { communityNumber | knownCommunity | asCommunityNumber } [ communityNumber | knownCommunity | asCommunityNumber ]* [ additive ] no set community communityListName name of a community; a string of up to 32 characters additive adds the community number to the community list none removes the community attribute communityNumber a number in the range 1 4294967295 that specifies the community number knownCommunity any of the following well-known communities; the internet community is not an option:
Syntax:
local-as prevents advertisement outside of the local AS no-advertise prevents advertisement to any peer no export prevents advertisement beyond the BGP confederation
boundary asCommunityNumber AS community number in the format AA:NN:
AA number in the range 165535 that identifies an AS NN number in the range 165535 that uniquely identifies a community
within an AS Mode(s): * indicates that one or more parameters can be repeated multiple times in a list in the command line
set dampening ERX Edge Routers
385
set dampening
Description: Enables route flap dampening and optionally specifies dampening parameters for routes passing through the route map. The no version removes the set clause from a route map. set dampening halfLife reuse suppress maxSuppressTime [ halfLifeUnreachable ] no set dampening halfLife half-life period in minutes in the range 145. The default is 10. When a BGP route has been assigned a penalty, the penalty is decreased by half after each half-life period. Each time a route flaps, the router configured for route flap dampening assigns the route a penalty. Penalties are cumulative. BGP stores the penalty for all reachable and unreachable routes that have experienced recent flaps. reuse reuse limit in the range 120000. The default is 750. As the penalty for a flapping route decreases and falls below this reuse limit, the route is unsuppressed. That is, the route is added back to the BGP table and used for forwarding. suppress suppress limit in the range 120000. A route is suppressed when its penalty exceeds this limit. The default value is 2000. maxSuppressTime maximum suppression time in minutes in the range 1255. This value is the maximum amount of time a route can be suppressed. The default value is 60. halfLifeUnreachable the alternate half-life period in minutes for unreachable routes; a number in the range 145. The default value is 20. If you do not specify this value, the system uses the same half-life period for both reachable and unreachable routes.
Syntax:
Mode(s):
386
set dhcp relay
set dhcp relay

Description: Adds a new DHCP/BOOTP server. The no version disables the specified server or disables the addition of the relay agent information. If you specify the no version, all DHCP servers are deleted from the list. set dhcp relay { dhcpServerAddress | agent [ circuit-ID-only | remote-ID-only ] | discard-access-routes { interface interfaceType interfaceSpecifier | all } no set dhcp relay { [ dhcpServerAddress | agent } Mode(s): dhcpServerAddress IP address of the DHCP server agent adds the agent information suboptions (circuit-ID and remote-ID) to every packet the system relays from a DHCP client to a DHCP server circuit-ID-only specifies circuit ID suboption only remote-ID-only specifies remote-ID suboption only discard-access-routes removes existing access routes for an interface from the routing table and from NVS interfaceType interface type whose access routes should be discarded; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
Syntax:
set distance
Description: Configures an administrative distance to apply to routes that match the route map. The no version removes the set clause from a route map.
Note: Setting a distance in a route map is useful only when it is set on a route being installed into the routing table. Distance is used to establish preference between routes to the same prefix to identify the best route to that prefix. Setting distance is any other circumstance has no effect.
Syntax:
set distance distance no set distance distance administrative distance, ranging from 0255
Mode(s):
set extcommunity ERX Edge Routers
387
set extcommunity
Description: Syntax: Sets the BGP extended communities attribute. The no version removes the set clause from a route map. set extcommunity { rt | soo } extCommValue [ extCommValue ]* [ additive ] no set extcommunity rt specifies a route-target extended community, which consists of one or more routers that can receive a set of routes advertised by BGP that carry the extended-community attribute soo specifies a site-of-origin extended community, which consists of one or more routers that inject into BGP a set of routes that carry the extended-community attribute extCommValue number identifying the extended community in one of the following formats:
AS:nn 16-bit autonomous system number followed by a 32-bit integer AS:nn 32-bit autonomous system number followed by a 16-bit integer ipAddress:nn IP address followed by a 16-bit integer
extCommValue number identifying the extended community; in the format AA:NN, where any of the following is true:
AA is an AS number in the range 165535 and NN is an integer in the

range 14294967295; for example, 320:72358
AA is an AS number in the range 14294967295 and NN is an integer in

the range 165535; for example, 84511:45
AA is a dotted decimal IP address and NN is an integer in the range

165535; for example, 10.10.21.5:1256 * indicates that one or more parameters can be repeated multiple times in a list in the command line additive adds the specified extended communities to any previously configured for the attribute; if omitted, the specified extended communities replace any previously configured for the attribute
Mode(s):
388
set ip next-hop
set ip next-hop
Description: Syntax: Indicates where to send packets that pass a match clause of a route map for policy routing. The no version removes the set clause from a route map. set ip next-hop { ipAddress | interface interfaceType interfaceSpecifier | peerAddress } no set ip next-hop [ ipAddress | peerAddress] ipAddress IP address of next hop to which packets are sent; does not need to be an adjacent router interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide peerAddress on outbound route maps, disables the next hop calculation by setting the next hop to the IP address of the BGP speaker; on inbound route maps, overrides any third-party next hop configuration by setting the next hop to the IP address of the peer
Mode(s):
set level
Description: Syntax: Specifies where to import routes when all of a route maps match criteria are met. The no version removes the set clause from a route map. set level atLevel no set level atLevel specifies one of the following levels:
level-1 imports routes into a level 1 area level-1-2 imports routes into a level 1 and a level 2 area level-2 imports routes into a level 2 subdomain stub-area imports routes into an OSPF NSSA area backbone imports routes into an OSPF backbone area
Mode(s): Route Map Configuration
set local-preference ERX Edge Routers
389
set local-preference
Description: Syntax: Specifies a preference value for the AS path. The no version removes the set clause from a route map. set local-preference value no set local-preference Mode(s): value preference number in the range 04294967295
set metric
Description: Modifies the metric value (for BGP, the MED) for a route that matches the route map by applying a relative or absolute metric. The no version removes the set clause from a route map. Note: You cannot have an absolute and relative metric within the same route map sequence. Issuing either command overrides any previously configured metric in the route map. Syntax: set metric [ signrelValue absValue ] no set metric sign one of the following values:
+ specifies that the value is added to the metric for routes matching the
route map; immediately precedes the metric value with no intervening space
- specifies that the value is subtracted from the metric for routes
matching the route map; immediately precedes the metric value with no intervening space Mode(s): relValue number of a single standard access list; string up to 32 characters (a number in the range 04294967295) absValue number in the range 0294967295
390
set metric-type
set metric-type
Description: Syntax: Sets the metric type for the destination routing protocol. The no version removes the set clause from a route map. set metric-type atMetric no set metric-type atMetric specifies the metric type from the following choices: For BGP:
external reverts to the normal BGP rules for propagating the MED; this
is the BGP default
internal sets the MED of a received route that is being propagated to

an external peer equal to the IGP cost of the indirect next hop For IS-IS:
external only the metric of the route itself is considered for comparison internal both the metric of the route and the cost to the router that
advertised the route are considered for comparison; this is the IS-IS default For OSPF:
1 cost of the external routes is equal to the sum of all internal costs
and the external cost
2 cost of the external routes is equal to the external cost alone; this is
the OSPF default Mode(s): Route Map Configuration
set origin
Description: Syntax: Sets the BGP origin of an advertised route. The no version removes the set clause from a route map. set origin atOrigin no set origin atOrigin specifies the origin from the following choices:
egp remote exterior gateway protocol igp local interior gateway protocol incomplete origin unknown
Mode(s): Route Map Configuration
set-overload-bit ERX Edge Routers
391
set-overload-bit
Description: Configures the system in IS-IS to signal other routers not to use it as an intermediate hop in their SPF calculations. The no version removes the designation. By default, the overload bit is not set. set-overload-bit [ on-startup period ] no set-overload-bit on-startup specifies that the overload bit is set for a period of time after system reboot. Use to prevent other routers from routing through the system before it is fully operational. The overload bit is cleared when the period expires. period duration in seconds of period after system reboot that overload bit is set; ranges from 586400 seconds
Syntax:
Mode(s):
set route-type
Description: Syntax: Sets routes of the specified type. The no version removes the set clause from a route map. set route-type { internal | internal-intra | internal-inter | external } no set route-type Mode(s): internal internal route (including OSPF intra-area and interarea) internal-intra intra-area route internal-inter interarea route external external route (BGP and OSPF type 1/2)
set tag
Description: Syntax: Sets the tag value of the destination routing protocol. The no version removes the set clause from a route map. set tag tagValue no set tag Mode(s): tagValue preference number in the range 04294967295
392
set weight
set weight
Description: Specifies the BGP weight for the routing table. Overrides the weights assigned using the neighbor weight and neighbor filter-list commands. The no version removes the set clause from a route map. [ no ] set weight value no set weight Mode(s): value weight value in the range 04294967295
Syntax:
shaping-rate
Description: Syntax: Sets the shaping rate in bits per second. The no version deletes the shaping rate. shaping-rate shapingRate [ burst burstSize ] no shaping-rate Mode(s): shapingRate range 640001,000,000,000 burstSize range 819232767
Scheduler Profile Configuration
show aaa
Description: Syntax: Displays accounting or authentication information regarding PPP. show aaa { accounting | authentication } ppp default [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa accounting

Description: Syntax: Displays the name of the virtual router for which duplication accounting records are sent to the accounting server. show aaa accounting [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa accounting interval ERX Edge Routers
393
show aaa accounting interval

Description: Syntax: Displays information on the accounting interval. show aaa accounting interval [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa delimiters

Description: Syntax: Displays the domain name and realm name delimiters configured on the system. show aaa delimiters [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa domain-map

Description: Syntax: Displays the mapping between user domains and virtual routers. show aaa domain-map [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa duplicate-address-check

Description: Syntax: Configures AAA to query the routing table for duplicate address assignment before granting access. show aaa duplicate-address-check [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa model

Description: Syntax: Displays AAA model. show aaa model [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
394
show aaa name-servers
show aaa name-servers

Description: Syntax: Displays the IP addresses of the primary and secondary DNS and WINS name servers. show aaa name-servers [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa profile

Description: Syntax: Displays AAA profile names and the actions associated with each specified AAA profile name. show aaa profile [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa statistics

Description: Syntax: Displays the authentication and authorization statistics. show aaa statistics [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa subscriber per-port-limit

Description: Syntax: Displays the number of active subscribers on each interface. show aaa subscriber per-port-limit [ filter ] filter see Filtering show Commands in About This Guide Mode(s): Privileged Exec
show aaa subscriber per-vr-limit

Description: Syntax: Displays the number of active subscribers on each virtual router. show aaa subscriber per-vr-limit [ filter ] filter see Filtering show Commands in About This Guide Mode(s): Privileged Exec
show aaa timeout ERX Edge Routers
395
show aaa timeout

Description: Syntax: Displays information on the idle or session timeout. show aaa timeout [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show aaa tunnel-parameters

Description: Syntax: Displays default tunnel parameters that are configured for tunnel definitions. show aaa tunnel-parameters [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show access-list
Description: Syntax: Displays access list information about the access list specified. show [ ip ] access-list [ accessListName ] [ detail ] [ filter ] Mode(s): accessListName string of up to 32 alphanumeric characters detail displays detailed information about the access list filter see Filtering show Commands in About This Guide
Privileged Exec
show aps
Description: Syntax: Displays information about APS/MSP interfaces or groups. show aps [ group [ groupNumber ] ] groupNumber number of the APS/MSP group Mode(s): Privileged Exec
396
show arp
show arp
Description: Syntax: Displays information about the Address Resolution Protocol cache. show [ ip ] arp [ vrfName ] [ ipAddress ] [ interfaceType interfaceSpecifier ] [ all ] [ filter ] Mode(s): vrfName name of the VRF ipAddress ARP entries matching this IP address are displayed interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide all displays all ARP entries filter see Filtering show Commands in About This Guide
show atm aal5 interface

Description: Syntax: Displays configuration information about an ATM AAL interface. show atm aal interface atm interfaceSpecifier [ filter ] Mode(s): atm specify an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
Privileged Exec, User Exec
show atm interface ERX Edge Routers
397
show atm interface

Description: Syntax: Displays configuration information about an ATM interface or a brief description of all ATM (major) interfaces configured in the system. show atm interface {atm interfaceSpecifier [ signalling-stats ] | brief } [ delta ] [ filter ] atm specifies an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; subinterfaces are not supported by the syntax signalling-stats displays signalling statistics for the ATM interface delta displays baselined statistics brief displays the status and number of configured VCs for all ATM interfaces configured in the system filter see Filtering show Commands in About This Guide
Mode(s):
show atm map

Description: Syntax: Displays the list of all configured ATM static maps to remote hosts on an ATM network. show atm map [ mapName ] [ brief ] [ filter ] Mode(s): mapName name of the map list to display information for brief display information in a condensed format filter see Filtering show Commands in About This Guide
show atm oam

Description: Syntax: Displays F4 OAM statistics. show atm oam interfaceSpecifier [ vpi ] [ segment | end-to-end ] [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vpi virtual path identifier segment displays information on segment F4 OAM circuits end-to-end displays information on end-to-end F4 OAM circuits filter see Filtering show Commands in About This Guide
398
show atm ping
show atm ping

Description: Displays a summary of the results (number of ping cells sent, number of ping cells received, success rate) of the ping operation. These results are overwritten when a new ATM ping is invoked for the circuit. If you do not specify any of the options, the command shows ping entries for the entire system. show atm ping [atm interfaceSpecifier [ vpi vci ] ] [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vpi shows details of the last ping atm command on this VPI vci shows details of the last ping atm command on this VCI filter see Filtering show Commands in About This Guide
Syntax:
show atm subinterface

Description: Syntax: Displays current state of all ATM subinterfaces you specify. show atm subinterface [ atm interfaceSpecifier ] [ summary interfaceType interfaceSpecifier ] [ filter ] Mode(s): atm specifies an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide summary specifies that summary information is displayed filter see Filtering show Commands in About This Guide
show atm vc ERX Edge Routers
399
show atm vc
Description: Syntax: Displays a summary of all configured ATM virtual circuits. show atm vc [ interfaceType interfaceSpecifier ] [ vpi vpi ] [ category categoryType ] [ status statusType ] [ delta ] [ filter ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vpi displays VCs on a specific VPI category displays VCs that have a specific service category categoryType one of the following:
cbr nrt-vbr rt-vbr ubr ubr-pc

Mode(s): status displays VCs with a certain status statusType specify up or down delta displays baselined statistics filter see Filtering show Commands in About This Guide
show atm vc atm

Description: Syntax: Displays OAM statistics on a VC. You can specify the circuit to display by entering the VCD or the VPI and VCI. show atm vc atm interfaceSpecifier { vcd | vpi-vci vpi vci } [ delta ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vcd specify the circuit by entering the VCD vpi-vci specify the circuit by entering the VPI and VCI delta displays baselined statistics
400
show atm vp-tunnel
show atm vp-tunnel

Description: Syntax: Displays a summary of all configured ATM virtual path tunnels. show atm vp-tunnel [ interfaceSpecifier ] [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show bandwidth oversubscription

Description: Syntax: Displays the bandwidth oversubscription status. show bandwidth oversubscription [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show boot
Description: Syntax: Displays the configuration and system settings that are used at startup. show boot [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats
Description: Syntax: Displays bulkstats statistical information. show bulkstats [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats collector description

Description: Syntax: Displays the collectors file description. show bulkstats collector description [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats collector interval ERX Edge Routers
401
show bulkstats collector interval

Description: Syntax: Displays the time for which the system transfers data to the receivers. show bulkstats collector interval [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats collector max-size

Description: Syntax: Displays the maximum size of the bulkstats file. show bulkstats collector max-size [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats collector transfer-mode

Description: Syntax: Displays the way in which the system transfers data to the receivers. show bulkstats collector transfer-mode [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats interface-type

Description: Syntax: Displays information on the collection of statistical data for the particular interface type (for example, ATM). show bulkstats interface-type [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats receiver

Description: Syntax: Displays the configuration of the receivers remote files. show bulkstats receiver [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
402
show bulkstats schema
show bulkstats schema

Description: Syntax: Use to display data on the selected schema. show bulkstats schema [ filter ] Mode(s): filter if-stack or if-stats; see Filtering show Commands in About This Guide
show bulkstats statistics

Description: Syntax: Displays information on statistics counters. show bulkstats statistics [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show bulkstats traps

Description: Syntax: Displays information on bulkstats traps. show bulkstats traps [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show cac
Description: Syntax: Displays global call admission control configuration. show cac [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show cac interface ERX Edge Routers
403
show cac interface

Description: Syntax: Displays all interfaces on which TE accounting is configured, or information only for the specified interface. show cac interface [ brief | interfaceType interfaceSpecifier ] [ filter ] Mode(s): brief displays summary information about the interface interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show cbf connection

Description: Syntax: Displays all configured CBF connections. show cbf connection [ all ] [ filter ] Mode(s): all does not combine parallel unidirectional connections filter see Filtering show Commands in About This Guide
Privileged Exec
show cbf interface

Description: Syntax: Displays status information and statistics about CBF interfaces. show cbf interface [ brief | full ] [ interfaceType [ interfaceSpecifier ] ] [ delta ] [ filter ] Mode(s): brief displays only an interfaces name and up/down status full displays an interfaces name, full status information, and statistics If you do not specify the brief or full keyword, the software displays an interfaces name and full status. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
404
show classifier-list
show classifier-list
Description: Syntax: Displays information about classifier control lists. show classifier-list [ classifierName [ classifierNumber ] ] [ brief | detailed ] [ filter ] Mode(s): classifierName classifier list name classifierNumber classifier list number brief display information in a condensed format detailed display detailed information filter specify a CLI output filter. See Filtering show Commands in About This Guide.
Privileged Exec
show clns
Description: Syntax: Displays information about the CLNS network show clns [ es-neighbors | is-neighbors ] [ interfaceType interfaceSpecifier ] [ detail ] [ filter ] es-neighbors displays IS-IS related information for IS-IS end-system adjacencies. Neighbor entries are sorted according to the area in which they are located. is-neighbors displays IS-IS related information for IS-IS intermediate-system adjacencies. Neighbor entries are sorted according to the area in which they are located. interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide detail displays area addresses and IP addresses; if not specified, a summary display is provided filter see Filtering show Commands in About This Guide
Mode(s):
show clns interface ERX Edge Routers
405
show clns interface

Description: Syntax: Lists the Connectionless Network Service information about each interface. show clns interface [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show clns neighbors

Description: Syntax: Displays both ES and IS neighbors. show clns neighbors [ interfaceType interfaceSpecifier ] [ detail ] [ filter ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide detail when specified, the area addresses advertised by the neighbor in the hello messages are displayed; otherwise, a summary display is provided filter see Filtering show Commands in About This Guide
Mode(s):
show clns protocol

Description: Syntax: Lists the protocol-specific information for each IS-IS routing process in the router. show clns protocol [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
406
show clns traffic
show clns traffic

Description: Syntax: Lists the IS-IS protocol statistics seen by the specified system. show clns traffic [ detail | interfaceType interfaceSpecifier ] [ delta ] [ filter ] Mode(s): detail when specified, interface statistics are displayed; otherwise, only global statistics are displayed interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide
show clock
Description: Syntax: Displays the systems clock source. show clock [ detail ] [ filter ] Mode(s): detail provides expanded information about the clock settings, rather than a summary filter see Filtering show Commands in About This Guide
show columns
Description: Displays configuration information of bridged Ethernet over ATM, IP over ATM, PPP, or PPPoE static and dynamic interface columns. It is designed to categorize interface subscribers into PPP, PPPoE, bridged, or routed. show columns User Exec, Privileged Exec
Syntax: Mode(s):
show configuration ERX Edge Routers
407
show configuration
Description: Displays the current (running) configuration of the system, a specified virtual router, or a specified interface within the current VR context. You can create a configuration script from this output by saving it as a file with the .scr extension. This command was formerly documented as show config; that abbreviation is still supported. show configuration [ [ interface interfaceType interfaceSpecifier ] | [ virtual-router routerName ] [ exclude-category interfaceType ]* ] [ include-defaults ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide routerName name of the virtual router exclude-category excludes information associated with a particular type of interface include-defaults includes commands that set default values for various parameters filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
show controllers e3
Description: Syntax: Displays information about E3 controller interfaces. show controllers e3 { interfaceSpecifier [ brief | all | summary ] | serial [ interfaceSpecifier ] } [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of E3 controller information all detailed display of all available E3 controller information summary displays link status summary serial displays information about serial interfaces filter see Filtering show Commands in About This Guide
408
show controllers sonet
show controllers sonet

Description: Syntax: Displays the statistics or the configuration for the different layers of channelized SONET and SDH interfaces. show controllers sonet { [ brief ] | slot/port [ :controllerSpecifier ] { [ configuration ] | layerType [ interval | total [ delta ] ] | controllerType [ interval ] | all [ total [ delta ] ] } } [ filter ] brief displays a summary of information about all controllers slot number of the chassis slot of the line module in the range 013 (ERX-1400 series) and 06 (ERX-700 series) port port number on the I/O module There is no controllerSpecifier for a section or line. For a path, controllerSpecifier is the number of the path. For a tributary, controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ] For an E1 or a DS1 controller, controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ] [ /channelGroup ] For a DS3 controller, controllerSpecifier has the format pathChannel ds3-channel-number [ ds1-channel-number ] [ subchannelNumber ]
pathChannel number of the path pathPayload number of the payload within the path. In SONET mode,
pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.
tributaryGroup number of the tributary group within the path. In

SONET mode, tributary group is the number of the VT group. In SDH mode, tributary group is the number of the TUG-2 group.
tributaryNumber number of the tributary within the group. In SONET

mode, tributaryNumber is the number of the VT. In SDH mode, tributaryNumber is the number of the TUG-1 group or tributary unit.
channelGroup number of the channel group ds3-channel-number number of the ds3 channel ds1-channel-number number of the ds1 channel in the range 128 subchannelNumber number of the subchannel in the range 124
configuration displays the configuration of each controller at the specified level and above layerType type of SONET/SDH layer
section section layer of an interface line line layer of an interface
show controllers sonet ERX Edge Routers
409
path SONET or SDH path

interval number of 15-minute intervals over which the system monitors information; a value between 1 and 96. The default is the current interval, number 1. controllerType type of interface or channel
tributary SONET or SDH virtual tributary e1 E1 channel over SDH virtual tributary ds1 T1 channel over SONET/SDH virtual tributary ds3 T3 over channelized SONET interface t1 T1 channel on T3 over channelized SONET interface
Mode(s): total displays the MIB statistics for all intervals delta displays baselined statistics for all intervals all shows statistics for all time intervals, rather than statistics for selected time intervals filter see Filtering show Commands in About This Guide
410
show controllers sonet remote
show controllers sonet remote

Description: Displays information about the statistics on the remote device when MDL is configured on a T3 over channelized SONET interface or FDL is configured on either a T1 channel on a T3 over channelized SONET interface or a T1 over SONET/SDH interface. show controllers sonet { slot/port [ :controllerSpecifier ] remote [ all ] } [ filter ] slot number of the chassis slot of the line module in the range 013 (ERX-1400 series) and 06 (ERX-700 series) port port number on the I/O module There is no controllerSpecifier for a section or line. For a T3 over channelized SONET interface, controllerSpecifier has the format pathChannel ds3-channel-number [ ds1-channel-number ] [ subchannelNumber ] For a T1 over SONET/SDH interface., controllerSpecifier has the format pathChannel [ /pathPayload ] [ /tributaryGroup ] [ /tributaryNumber ] [ /channelGroup ]
Syntax:
pathChannel number of the path pathPayload number of the payload within the path. In SONET mode,
pathPayload is always 1. In SDH mode, pathPayload is the number of the TUG-3 group.
tributaryGroup number of the tributary group within the path. In

SONET mode, tributary group is the number of the VT group. In SDH mode, tributary group is the number of the TUG-2 group.
tributaryNumber number of the tributary within the group. In SONET

mode, tributaryNumber is the number of the VT. In SDH mode, tributaryNumber is the number of the TUG-1 group or tributary unit.
channelGroup number of the channel group ds3-channel-number number of the ds3 channel ds1-channel-number number of the ds1 channel in the range 128 subchannelNumber number of the subchannel in the range 124
Mode(s): all shows statistics for all time intervals, rather than statistics for selected time intervals filter see Filtering show Commands in About This Guide
show controllers t1 | e1 ERX Edge Routers
411
show controllers t1 | e1
Description: Syntax: Displays information about the CT1 or CE1 controller interfaces. show controllers { t1 | e1 } { { fractional | serial } [ interfaceSpecifier ] | interfaceSpecifier [ brief | all | summary ] } [ filter ] Mode(s): fractional displays information about T1 or E1 fractional interfaces serial displays information about T1 or E1 serial interfaces interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of CT1 or CE1 controller information all shows statistics for all time intervals, rather than statistics for selected time intervals summary displays link status summary filter see Filtering show Commands in About This Guide
show controllers t1 remote

Description: Syntax: Displays information about the T1 statistics at the remote end when you configure FDL on an interface. show controllers t1 interfaceSpecifier remote [ all ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide all shows statistics for all time intervals, rather than statistics for selected time intervals
412
show controllers t3
show controllers t3
Description: Syntax: Displays information about the T3 controller interfaces. show controllers t3 { interfaceSpecifier [ brief | all | summary ] | { ft1 | serial } [ interfaceSpecifier ] } [ filter ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief abbreviated display of T3 controller information all shows statistics for all time intervals, rather than statistics for selected time intervals summary displays link status summary ft1 displays information about fractional T1 subchannels serial displays information about serial interfaces filter see Filtering show Commands in About This Guide
show controllers t3 remote

Description: Syntax: Displays information about the statistics on the remote device when MDL is configured on a T3 interface or FDL is configured on a T1 channel. show controllers t3 interfaceSpecifier remote [ all ] Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide all shows statistics for all time intervals, rather than statistics for selected time intervals
show cops info

Description: Syntax: Displays information about SDX (formerly SSC) sessions and about the COPS layer created for SDX sessions. show cops info [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show dhcp ERX Edge Routers
413
show dhcp
Description: Syntax: Displays the IP address(es) and statistics of the configured DHCP server or relay agent. show dhcp { server | relay } [ statistics [ delta ] ] [ filter ] Mode(s): server DHCP Proxy Client configuration relay DHCP Relay configuration statistics displays statistics for the DHCP server or relay agent delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show dvmrp tunnel

Description: Syntax: Displays information about DVMRP tunnels. show dvmrp tunnel [ detail ] [ state tunnelStatus ] [ tunnelName | [ virtual-router vrName ] ip ipAddress [ tunnelName ] ] [ filter ] detail shows detailed tunnel information about DVMRP tunnels state shows information about tunnels in the specified state tunnelStatus state of the tunnel, as follows:
disabled tunnel is disabled down tunnel is not operational enabled tunnel is enabled lower-down an interface layer below the tunnel is not operational not-present TSM is not in slot up tunnel is operational
Mode(s): tunnelName name of a tunnel for which you want to display information virtual-router displays information about tunnels on the specified virtual router vrName name of a virtual router ip displays information about tunnels associated with the specified IP address ipAddress IP address tunnelName name of a tunnel for which you want to display information filter see Filtering show Commands in About This Guide
Privileged Exec
414
show dvmrp tunnel summary
show dvmrp tunnel summary

Description: Syntax: Displays a summary of information about DVMRP tunnels. show dvmrp tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show environment
Description: Syntax: Displays information on the systems physical environment, such as power and temperature. show environment [ all ] [ table ] [ filter ] Mode(s): all displays system environment information and temperature status table table displays temperature status table only filter see Filtering show Commands in About This Guide
show exception dump

Description: Syntax: Displays the parameters for transferring core dump files. show exception dump [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show fabric-queue
Description: Syntax: Displays forwarded and dropped statistics for the queues in the fabric. show fabric-queue [ traffic-class trafficClassName [ detail ] | [ egress-slot egressSlotNumber | detail | traffic-class trafficClassName egress-slot egressSlotNumber ] [ filter ] Mode(s): trafficClassName name of the traffic class detail provides detailed information about the queues in the fabric egressSlotNumber number of the egress slot filter see Filtering show Commands in About This Guide
show flash ERX Edge Routers
415
show flash
Description: Syntax: Mode(s): Displays information about the NVS card. show flash Privileged Exec, User Exec
show frame-relay interface

Description: Syntax: Displays Frame Relay statistics for interfaces. show frame-relay interface [ interfaceType interfaceSpecifier ] [ members ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
hssi serial pos mlframe-relay tunnel GRE tunnel

interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide members displays the status of MFR links
displays the status of all MFR links if you specify the interface type
mlframe-relay without a specifier for an MFR bundle
displays the status of MFR links in an MFR bundle if you specify that
bundle Mode(s): brief displays a summary of interface information delta displays baselined statistics filter see Filtering show Commands in About This Guide
416
show frame-relay lip
show frame-relay lip

Description: Syntax: Displays Link Integrity Protocol state and statistics for a link in an MFR bundle. show frame-relay lip [ interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
serial pos
interfaceSpecifier specifies the location of the interface in the format slot/port:link
slot number of the chassis slot of the line module in the range 013
(ERX-1400 series) and 06 (ERX-700 series)
port port number in the range 02 link number of a link in the range 18
Mode(s): brief summarized format delta displays baselined statistics filter see Filtering show Commands in About This Guide
show frame-relay lmi ERX Edge Routers
417
show frame-relay lmi

Description: Syntax: Displays state and statistics for the local management interface. show frame-relay lmi [ interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief summarized format delta displays baselined statistics filter see Filtering show Commands in About This Guide
show frame-relay map

Description: Syntax: Displays the current Frame Relay map entries and information about the Frame Relay connections. show frame-relay map [ filter ] Mode(s): filter specifies a CLI output filter. See Filtering Show Commands in About This Guide.
418
show frame-relay multilinkInterface
show frame-relay multilinkInterface

Description: Syntax: Displays statistics about all MFR interfaces or the specified MFR interfaces. show frame-relay multilinkInterface [ interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
serial pos
Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays a summary of interface information delta displays baselined statistics filter see Filtering show Commands in About This Guide
show frame-relay pvc

Description: Syntax: Displays permanent virtual circuit statistics for Frame Relay or MFR interfaces. show frame-relay pvc [ dlci | interface interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] dlci DLCI number to be used on the specified subinterface to identify a virtual circuit in the range 161007 interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide

Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays the abbreviated version of the command output delta displays baselined statistics filter see Filtering show Commands in About This Guide
show frame-relay subinterface ERX Edge Routers
419
show frame-relay subinterface

Description: Syntax: Displays statistics about Frame Relay subinterfaces. show frame-relay subinterface [ interfaceType interfaceSpecifier ] [ brief ] [ delta ] [ filter ] interfaceType one of the following types of interface; for more details, see Interface Types and Specifiers in About This Guide
serial pos mlframe-relay

Mode(s): interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays a summary of subinterface information delta displays baselined statistics filter see Filtering show Commands in About This Guide
show frame-relay summary

Description: Syntax: Scans all defined Frame Relay interfaces and circuits and reports aggregate status counts. show frame-relay summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show ftp-server
Description: Syntax: Mode(s): Use to display information about the FTP server. show ftp-server Privileged Exec
420
show gre tunnel
show gre tunnel

Description: Syntax: Displays information about GRE tunnels. show gre tunnel [ detail ] [ state tunnelStatus ] [ tunnelName | [ virtual-router vrName ] ip ipAddress ] [ filter ] detail shows detailed tunnel information about GRE tunnels state shows information about tunnels in the specified state tunnelStatus state of the tunnel, as follows:
disabled tunnel is disabled down tunnel is not operational enabled tunnel is enabled lower-down an interface layer lower below the tunnel is not operational not-present TSM is not in slot up tunnel is operational
Mode(s): tunnelName name of a tunnel for which you want to display information virtual-router displays information about tunnels on the specified virtual router vrName name of a virtual router ip displays information about tunnels associated with the specified IP address ipAddress IP address filter see Filtering show Commands in About This Guide
Privileged Exec
show gre tunnel summary

Description: Syntax: Displays a summary of information about GRE tunnels. show gre tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show hardware ERX Edge Routers
421
show hardware
Description: Syntax: Displays information about the modules installed in the system. show hardware [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
422
show hdlc interface
show hdlc interface

Description: Syntax: Displays statistics about specified Cisco HDLC interfaces. show hdlc interface [ { dataRestriction }* | full ] [ delta ] [ stateRestriction ] [ { interfaceType } interfaceSpecifier ] [ filter ] dataRestriction specify one or more of the following keywords:
config displays information on the HLDC interface configuration status displays information on the HLDC interface operational status statistics displays information on the HLDC interface statistics
* indicates that one or more parameters can be repeated multiple times in a list in the command line full displays configuration, status, and statistics information; equivalent to specifying config status statistics delta displays baselined statistics stateRestriction specify only one of the following keywords:
open displays an interface that is administratively enabled, which

means that the no ppp shutdown command is operational
closed displays an interface that is administratively disabled, which

means that the ppp shutdown command is operational
up displays an interface that is up, which means that the LCP has
been negotiated
down displays an interface that is down, which means that the LCP
has not been negotiated, the negotiations have failed, or the connection has been terminated
lower-layer-down displays an interface that is not up and is waiting for

the lower layer to come up to initiate negotiations for LCP
not present displays an interface on which traffic cannot flow because

hardware is unavailable Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show host ERX Edge Routers
423
show host
Description: Syntax: Mode(s): Displays the IS-IS name-to-NSAP mappings defined with the clns host command. show host User Exec, Privileged Exec
show hosts
Description: Syntax: Displays a list of configured network servers. show hosts [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show ike policy-rule

Description: Syntax: Mode(s): Displays configuration of IKE phase 1 policy rules. show ike policy-rule Privileged Exec
show ike sa
Description: Syntax: Mode(s): Displays IKE phase 1 SAs running on the system. show ike sa Privileged Exec
424
show interfaces
show interfaces
Description: Syntax: Displays current state of all interfaces or the interface you specify. show interfaces interfaceType interfaceSpecifier [ delta ] [ brief ] [ filter ] interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide; for ATM, subinterfaces are not supported by the syntax delta displays baselined statistics brief displays a brief summary of the interface filter see Filtering show Commands in About This Guide
Mode(s):
show ip
Description: Syntax: Mode(s): Displays general information for IP. show ip User Exec, Privileged Exec
show ip address
Description: Syntax: Displays interface information for the specified IP address. show ip address [ vrfName ] [ brief | detail ] localAddress Mode(s): vrfName name of the VRF brief displays summary information about the interface detail displays detailed information about the interface localAddress IP address of the specific interface
show ip as-path-access-list ERX Edge Routers
425
show ip as-path-access-list
Description: Syntax: Displays information about AS-path access lists. show ip as-path-access-list [ accessListName ] [ filter ]
accessListName name of an AS-path access list; string of up to 32

characters
filter see Filtering show Commands in About This Guide

Mode(s): User Exec, Privileged Exec
426
show ip bgp
show ip bgp
Description: Displays filtered information about a specified network, or all networks, in the BGP routing table associated with a specified address family. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields route command. show ip bgp [ addressFamilyIdentifier ] [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of address family, which determines the routing table for which information is displayed, in the format [ ipv4 { unicast | multicast } | vpnv4 { all | vrf vrfName } ]
Syntax:
ipv4 unicast the IPv4 unicast routing table; the default option ipv4 multicast the IPv4 multicast routing table vpnv4 all all IPv4 VPN routing and forwarding instances vpn4 vrf vrfname the IPv4 VPN routing and forwarding instance with
the name vrfname network displays the route that best matches this IP address; if no network is specified, displays the fields for all networks networkMask address mask to be applied to the network address longer-prefixes displays all routes with a prefix that is equal to or more specific than the specified prefix fields displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them fieldOptions field(s) to be displayed, in the format all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | in-label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi | unknown-types | weight ]*

afi address family identifier aggregator AS number and IP address of aggregator as-path AS path through which this route bas been advertised atomic-aggregate whether the atomic aggregate attribute is present best whether this is the best route for the prefix clusters list of cluster IDs through which the route has been advertised communities community number associated with the route extended-communities extended community imported whether the route was imported
show ip bgp ERX Edge Routers
427

in-label MPLS label for the route; the label received with incoming
MPLS frames; typically, but not always, this is the label advertised to MP-BGP peers
loc-pref local preference for the route med multiexit discriminator for the route next-hop IP address of the next router that is used when forwarding a

origin origin of the route originator-id router ID of the router in the local AS that originated the
route
out-label MPLS label for the route; the label sent with outgoing MPLS
frames; also the label received from MP-BGP peer; typically, but not always, this is the label received from MP-BGP peers
peer IP address of BGP peer from which route was learned peer-type type of BGP peer: internal, external, or confederation rd route distinguisher safi subsequent address family identifier unknown-types attribute codes for unknown path attributes weight weight of the route * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): filter see Filtering show Commands in About This Guide
428
show ip bgp advertised-routes
show ip bgp advertised-routes

Description: Displays the routes in the Adj-RIBs-Out table of the specified peer or peer group. For peers, displays routes that have been previously advertised to the peer and the attributes for the routes prior to the application of outbound policy. For peer groups, displays routes that will be advertised to the peer group, but includes the full set of route attributes associated with the routes after the application of outbound policy. This command returns an error message unless you first enable rib-out via the no neighbor rib-out disable command or the no rib-out disable command. show ip bgp [ addressFamilyIdentifier ] { neighbors ipAddress | peer-group peerGroupName } advertised-routes [ network [ networkMask [ longer-prefixes ] ] ] [ fields { fieldOptions } ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned peerGroupName name of a BGP peer group network displays the route that best matches this IP address; if no network is specified, displays the fields for all networks networkMask address mask to be applied to the network address longer-prefixes displays all routes with a prefix that is equal to or more specific than the specified prefix fieldOptions field(s) to be displayed. See the show ip bgp command. delta displays baselined statistics filter see Filtering show Commands in About This Guide
Syntax:
show ip bgp aggregate-address

Description: Syntax: Displays information about aggregate addresses. show ip bgp [ addressFamilyIdentifier ] aggregate-address [ ipAddress mask ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress aggregate address mask aggregate address mask filter see Filtering show Commands in About This Guide
show ip bgp cidr-only ERX Edge Routers
429
show ip bgp cidr-only

Description: Syntax: Displays information only about routes having nonnatural network masks. show ip bgp [ addressFamilyIdentifier ] cidr-only [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
show ip bgp community

Description: Syntax: Displays routes that belong to the specified BGP community. show ip bgp [ addressFamilyIdentifier ] community { communityNumber | local-as | no-advertise | no-export } [ communityNumber | local-as | no-advertise | no-export ] * [ exact-match ] [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. communityNumber filters routes according to this community number, specified either as a number in the range 14294967295 or in AA:NN format (autonomous system number:community number); displays only routes that are members of the specified community local-as displays only routes belonging to the local-AS community no-advertise displays only routes belonging to the no-advertise community no-export displays only routes belonging to the no-export community * indicates that one or more parameters can be repeated multiple times in a list in the command line exact-match displays only routes that have exactly the specified communities fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
Mode(s):
430
show ip bgp community-list
show ip bgp community-list

Description: Syntax: Displays routes that belong to the BGP community specified by the community list. show ip bgp [ addressFamilyIdentifier ] community-list communityListName [ exact-match ] [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. communityListName filters routes according to community list; displays only routes that are members of a community on the specified list exact-match displays only routes that have exactly the specified communities fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
show ip bgp dampened-paths

Description: Syntax: Displays information on dampened BGP routes. show ip bgp [ addressFamilyIdentifier ] dampened-paths [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
show ip bgp filter-list

Description: Syntax: Displays all routes whose AS path matches the specified AS path access list. show ip bgp [ addressFamilyIdentifier ] filter-list asPathAccessListName [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. asPathAccessListName name of AS path access list to filter routes; displays only routes that have AS paths matching the specified list fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
show ip bgp flap-statistics ERX Edge Routers
431
show ip bgp flap-statistics

Description: Syntax: Displays information about routes that are dampened. show ip bgp [ addressFamilyIdentifier ] flap-statistics [ network [ networkMask ] ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. network IP address of the network for which you want information displayed; if no network is specified, the fields are displayed for all networks networkMask address mask to be applied to the network address filter see Filtering show Commands in About This Guide
Mode(s):
show ip bgp inconsistent-as

Description: Syntax: Displays information only about routes with inconsistent AS paths. show ip bgp [ addressFamilyIdentifier ] inconsistent-as [ fields { fieldOptions } ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
show ip bgp neighbors

Description: Syntax: Displays information about the BGP neighbors. show ip bgp [ addressFamilyIdentifier ] neighbors [ ipAddress ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned delta displays baselined statistics filter see Filtering show Commands in About This Guide
432
show ip bgp neighbors dampened-routes
show ip bgp neighbors dampened-routes

Description: Syntax: Displays information about routes with a dampening history for the specified BGP neighbor. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress dampened-routes [ fields { fieldOptions } ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned fieldOptions field(s) to be displayed. See the show ip bgp command. delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip bgp neighbors paths

Description: Syntax: Displays path information for the specified BGP neighbor. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress paths [ regularExpression ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned regularExpression regular expression to match the AS path. See show ip bgp regexp for information on regular expressions. filter see Filtering show Commands in About This Guide
show ip bgp neighbors received prefix-filter

Description: Syntax: Displays prefix-list outbound route filters received from the neighbor. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress received prefix-filter [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned filter see Filtering show Commands in About This Guide
show ip bgp neighbors received-routes ERX Edge Routers
433
show ip bgp neighbors received-routes

Description: Syntax: Displays routes originating from the specified BGP neighbor before inbound policy is applied. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress received routes [ fields { fieldOptions } ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned fieldOptions field(s) to be displayed. See the show ip bgp command. delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip bgp neighbors routes

Description: Syntax: Displays routes originating from the specified BGP neighbor after inbound policy is applied. show ip bgp [ addressFamilyIdentifier ] neighbors ipAddress routes [ fields { fieldOptions } ] [ delta ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress address of a neighbor whose routes the system has learned fieldOptions field(s) to be displayed. See the show ip bgp command. delta displays baselined statistics filter see Filtering show Commands in About This Guide
434
show ip bgp network
show ip bgp network

Description: Syntax: Displays information about a potentially originated prefix that was configured with the network command. show ip bgp [ addressFamilyIdentifier ] network [ networkNumber [ mask networkMask ] ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. networkNumber IP address of the network for which you want information displayed; if no network is specified, the fields are displayed for all networks networkMask address mask to be applied to the network address filter see Filtering show Commands in About This Guide
Mode(s):
show ip bgp next-hops

Description: Syntax: Displays information about BGP next hops. show ip bgp [ addressFamilyIdentifier ] next-hops [ ipAddress ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. ipAddress displays information only for this indirect next hop filter see Filtering show Commands in About This Guide
show ip bgp paths

Description: Syntax: Displays information about BGP AS paths. show ip bgp paths [ regularExpression ] [ filter ] regularExpression regular expression to match that specifies the desired AS paths. See show ip bgp regexp for information on regular expressions. filter see Filtering show Commands in About This Guide
Mode(s):
show ip bgp peer-group ERX Edge Routers
435
show ip bgp peer-group

Description: Syntax: Displays information about BGP peer groups. show ip bgp [ addressFamilyIdentifier ] peer-group [ peerGroupName ] [ filter ] Mode(s): addressFamilyIdentifier type of BGP address family. See the show ip bgp command. peerGroupName name of the BGP peer group filter see Filtering show Commands in About This Guide
436
show ip bgp quote-regexp
show ip bgp quote-regexp

Description: Displays information about BGP routes whose AS path matches the specified regular expression. Regular expressions match numbers for which the specified path is a substringfor example, if you specify 20, 200 matches because 20 is a substring of 200. You can disallow substring matching by using the underscore (_) metacharacter to constrain matching to the specified pattern; for example, _20_. You can use output filtering on the display. show ip bgp [ addressFamilyIdentifier ] quote-regexp pathExpression [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. quote-regexp indicates that only a single element is matched pathExpression regular expression string describing the AS path or community to be matched. You must enclose elements containing a space within double quotes (one element). Each element is either an AS number, a metacharacter, or a combination: ^ Matches the beginning of the path unless appearing as the first character within brackets; see below
Syntax:
[^ ] Matches any AS number except the ones specified within the brackets $ { } ( ) . * + ? Matches the end of the path Matches the beginning of an AS_SET Matches the end of an AS_SET Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ Matches any single character Matches zero or more occurrences of the preceding character Matches one or more occurrences of the preceding character Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.
show ip bgp quote-regexp ERX Edge Routers
437
()
Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash: matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ matches the end of an AS_CONFED_SET or AS_CONFED_SEQ. Matches any enclosed character; specifies a range of single characters Used within brackets to specify a range of AS numbers Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above. Matches characters on either side of the metacharacter; logical OR
 [] _
| Mode(s):
fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
438
show ip bgp regexp
show ip bgp regexp

Description: Displays information about BGP routes whose AS path matches the specified regular expression. Regular expressions match numbers for which the specified path is a substringfor example, if you specify 20, 200 matches because 20 is a substring of 200. You can disallow substring matching by using the underscore (_) metacharacter to constrain matching to the specified pattern; for example, _20_. You can use output filtering on the display. show ip bgp [ addressFamilyIdentifier ] regexp pathExpression [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. regexp indicates that multiple elements can be matched pathExpression regular expression string describing the AS paths to be matched. You do not have to enclose elements containing a space within quotation marks (one element). Each element is either an AS number, a metacharacter, or a combination: ^ Matches the beginning of the path unless appearing as the first character within brackets; see below
Syntax:
[^ ] Matches any AS number except the ones specified within the brackets $ { } ( ) . * + ? Matches the end of the path Matches the beginning of an AS_SET Matches the end of an AS_SET Matches the start of an AS_CONFED_SET or AS_CONFED_SEQ Matches the end of an AS_CONFED_SET or AS_CONFED_SEQ Matches any single character Matches zero or more occurrences of the preceding character Matches one or more occurrences of the preceding character Matches zero or one occurrence of the preceding character. To use the ? metacharacter in a regular expression, you must enter the following key sequence: <Ctrl-v-?>. Otherwise, the CLI considers this to be a request for assistance in completing the command, rather than understanding it as a metacharacter.
show ip bgp regexp ERX Edge Routers
439
()
Used with a multiplier metacharacter (*, +, ?) to specify patterns for multiple use. You can specify that a parenthesis be construed as a literal token instead of a metacharacter by immediately preceding it with a backslash: matches the beginning of an AS_CONFED_SET or AS_CONFED_SEQ matches the end of an AS_CONFED_SET or AS_CONFED_SEQ. Matches any enclosed character; specifies a range of single characters Used within brackets to specify a range of AS numbers Matches a ^, a $, a comma, a space, a {, or a }. Placed on either side of a string to specify a literal and disallow substring matching. Numerals enclosed by underscores can be preceded or followed by any of the characters listed above. Matches characters on either side of the metacharacter; logical OR
 [] _
| Mode(s):
fieldOptions field(s) to be displayed. See the show ip bgp command. filter see Filtering show Commands in About This Guide
440
show ip bgp summary
show ip bgp summary

Description: Displays filtered information about the status of all BGP connections. Only those fields that you specify are displayed, except that the Prefix field is always displayed. Default fields can be set with the default-fields peer command. show ip bgp [ addressFamilyIdentifier ] summary [ fields { fieldOptions } ] [ delta ] [ filter ] addressFamilyIdentifier type of BGP address family. See the show ip bgp command. fields displays only the specified fields; the display order of the fields is hard-coded and not affected by the order in which you enter them fieldOptions field(s) to be displayed, in the format all | [ intro | last-reset-reason | messages-received | messages-sent | peer-type | prefixes-received | remote-as | state | times-up | up-down-time | updates-received | updates-sent ]
Syntax:

last-reset-reason reason for most recent reset messages-received total number of messages received from the peer messages-sent total number of messages sent to the peer peer-type type of BGP peer: internal, external, or confederation prefixes-received number of unique prefixes received from the peer remote-as the remote AS number of the peer state state of the BGP session times-up number of times the session has been established up-down-time how long the session has been up or down updates-received number of update messages received from the peer updates-sent number of update messages sent to the peer
Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip community-list ERX Edge Routers
441
show ip community-list
Description: Syntax: Displays community list information. show ip community list [ listName ] [ filter ] Mode(s): listName name of a community list filter see Filtering show Commands in About This Guide
show ip demux interface

Description: Syntax: Displays information about a subscriber interface. show ip demux interface interfaceType interfaceSpecifier [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
Privileged Exec
show ip dhcp-local binding

Description: Syntax: Displays the mapping between the token or enduring IP address and the MAC address of the non-equal PPP subscribers computer. show ip dhcp-local binding ipAddress [ filter ] Mode(s): ipAddress IP address of the subscribers personal computer filter see Filtering show Commands in About This Guide
Privileged Exec
show ip dhcp-local cable-modem

Description: Syntax: Displays the configuration and statistics for cable modem DHCP servers configured on the system. show ip dhcp-local cable-modem { dhcp-servers | statistics } [ delta ] [ filter ] Mode(s): dhcp-servers displays a list of cable modem DHCP servers configured on the system statistics displays statistics on responses and requests received from external DHCP servers and cable modems
Privileged Exec
442
show ip dhcp-local excluded
show ip dhcp-local excluded

Description: Displays IP addresses that have been excluded. These are addresses that the DHCP local server does not allocate because they are already used by devices on the subnet. show ip dhcp-local excluded [ filter ] Privileged Exec
Syntax: Mode(s):
show ip dhcp-local limits

Description: Syntax: Displays the maximum number of leases available for each VPI, VCI, VLAN, and Ethernet Subnet from the DHCP local server. show ip dhcp-local limits [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show ip dhcp-local pool

Description: Syntax: Displays the configuration of DHCP local pools. show ip dhcp-local pool [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show ip dhcp-local reserved

Description: Displays the static IP address/MAC address pairs that the DHCP local
server supplies in standalone mode. This command does not display address pairs that the DHCP local server supplies in non-PPP equal access mode.
Syntax: show ip dhcp-local reserved [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show ip dhcp-local statistics ERX Edge Routers
443
show ip dhcp-local statistics

Description: Syntax: Displays statistics for the DHCP local server. show ip dhcp-local statistics [ delta ] [ filter ] Mode(s): ipAddress IP address delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show ip domain-lookup
Description: Syntax: Displays the name servers that you have specified on the system with the ip name-server command. show ip domain-lookup [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show ip dvmrp
Description: Syntax: Displays DVMRP information for a virtual router. show ip dvmrp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
444
show ip dvmrp interface
show ip dvmrp interface

Description: Syntax: Displays dvmrp parameters for the specified interfaces. show ip dvmrp interface [ brief ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): brief specifies that a summary rather than detailed information is displayed delta displays baselined statistics interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show ip dvmrp mroute

Description: Syntax: Displays information about DVMRP routes to multicast groups. show ip dvmrp mroute [ group [ sourceAddress [ sourceMask ] ] ] [ filter ] Mode(s): group IP address of a specific multicast group sourceAddress IP address of the network on which the source resides sourceMask subnet mask filter see Filtering show Commands in About This Guide
show ip dvmrp neighbor ERX Edge Routers
445
show ip dvmrp neighbor

Description: Syntax: Displays information about DVMRP neighbors. show ip dvmrp neighbor [ interfaceType interfaceSpecifier [ ipAddress ] ] [ brief ] [ delta ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide ipAddress displays information about the neighbor at this IP address brief specifies that a summary rather than detailed information is displayed delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip dvmrp route

Description: Syntax: Displays information about DVMRP routes. show ip dvmrp route [ ipAddress [ addressMask ] | interfaceType interfaceSpecifier ] [ brief ] [ filter ] Mode(s): ipAddress displays the best route for this IP address addressMask displays the route that exactly matches this IP address and subnet mask interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide brief displays a summary rather than detailed information filter see Filtering show Commands in About This Guide
446
show ip dvmrp routeNextHop
show ip dvmrp routeNextHop

Description: Syntax: Displays information about the next hop. show ip dvmrp routeNextHop [ ipAddress [ addressMask [ interfaceType interfaceSpecifier ] ] ] [ filter ] Mode(s): ipAddress IP address of the network for which you want to display information addressMask mask for the subnet for which you want display information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show ip dynamic-interface-prefix
Description: Syntax: Displays the prefix for the names of dynamic IP shared interfaces. show ip dynamic-interface-prefix [ vrfName ] Mode(s): vrfName name of the VRF
show ip explicit-paths
Description: Displays all explicit paths or a particular explicit path in a non-ERX implementation. See the show mpls explicit-paths command for a complete description and syntax.
show ip extcommunity-list
Description: Syntax: Displays all extended-community lists or a specific extended-community list. show ip extcommunity-list [ listName ] [ filter ] Mode(s): listName name of the extended-community list filter see Filtering show Commands in About This Guide
Privileged Exec
show ip forwarding-table slot ERX Edge Routers
447
show ip forwarding-table slot

Description: Syntax: Displays information on routing table memory, load errors, and status for the forwarding table of a specific line module. show ip forwarding-table slot slotNumber Mode(s): slotNumber number of the slot containing the line module for which the table is displayed
show ip http
Description: Displays information about HTTP local servers, information about the parameters configured for the HTTP local server, and statistics about the connections to the HTTP local server. show ip http [ scalar | server | statistics [ delta ] ] [ filter ] Mode(s): scalar display only information about the connections to the HTTP local server server display only information about the parameters configured for the HTTP local server statistics display only statistics about the connections to the HTTP local server delta displays baselined statistics filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
show ip igmp
Description: Syntax: Displays IGMP information for a virtual router. show ip igmp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
448
show ip igmp groups
show ip igmp groups

Description: Syntax: Displays information about statically joined and directly connected groups learned via IGMP. show ip igmp groups [ count ] [ groupAddress [ interfaceType interfaceSpecifier ] ] [ filter ] Mode(s): count displays the total number of groups learned groupAddress IP address of a group for which you want to display information interfaceType type of interface associated with the group address; for interface types, see Interface Types and Specifiers in About This Guide interfaceSpecifier specifier for the interface associated with the group address; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show ip igmp interface

Description: Syntax: Displays IGMP information for interfaces on which you enabled IGMP. show ip igmp interface [ brief | count ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): brief displays a summary of the information count displays the total number of interfaces on which you enabled IGMP delta displays baselined statistics interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show ip igmp-proxy
Description: Syntax: Use to display IGMP proxy parameters on a virtual router. show ip igmp-proxy [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show ip igmp-proxy groups ERX Edge Routers
449
show ip igmp-proxy groups

Description: Syntax: Displays information about multicast groups that IGMP proxy interfaces reported. show ip igmp-proxy groups [ groupAddress | count ] [ filter ] Mode(s): groupAddress IP address of a group for which you want to display information count displays the number of groups that IGMP proxy reported filter see Filtering show Commands in About This Guide
show ip igmp-proxy interface

Description: Syntax: Display information about the interface on which you configured IGMP proxy. show ip igmp-proxy interface [ brief ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): brief displays summarized information delta displays baselined statistics interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
450
show ip interface
show ip interface
Description: Syntax: Displays current state of all IP interfaces or the IP interfaces you specify. The default is all interface types and all interfaces. show ip interface [ vrf vrfName ] { { [ brief | detail ] { other | [ interfaceType interfaceSpecifier ] } } | summary } [ delta ] [ filter ] Mode(s): vrfName name of the VRF brief displays a brief summary of IP status and configuration information detail shows a detailed display of IP status and configuration information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide summary shows a detailed summary of IP status and configuration delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip interface shares

Description: Syntax: Displays information about shared IP interfaces for all IP interfaces or for the IP interfaces you specify. The default is all interface types and all interfaces. show ip interface shares [ vrf vrfName ] [ brief | detail ] [ interfaceType interfaceSpecifier ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF brief displays a brief summary of IP status and configuration information detail shows a detailed display of IP status and configuration information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip interface vrf ERX Edge Routers
451
show ip interface vrf

Description: Syntax: Displays current state of all interfaces on the specified VRF. show ip interface vrf vrfName [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
show ip local pool

Description: Syntax: Displays information about the local address pools configured on your system. show ip local pool [ [ name ] | [ statistics | group [ delta ] ] ] [ filter ] Mode(s): name name of a specific local address pool (default is all pools) statistics specifies that local pool statistics are to be shown group specifies that local pool groups are to be shown delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show ip mac-validate interface

Description: Syntax: Displays the status of MAC address validation on the physical interface that you specify. show ip mac-validate interface interfaceType interfaceSpecifier ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers filter see Filtering show Commands in About This Guide
Privilege Exec
452
show ip mroute
show ip mroute
Description: Syntax: Displays information about all or specified multicast routes. show ip mroute [ groupIpAddress [ sourceIpAddress ] ] [ summary | count | statistics ] [ filter ] groupIpAddress IP address of a multicast group sourceIpAddress IP address of a multicast source summary displays brief information about the multicast routes count displays the number of groups and sources statistics displays statistics for packets received through multicast routes that the system has added to the multicast routing table and established on the appropriate line modules filter see Filtering show Commands in About This Guide
Mode(s):
show ip multicast routing

Description: Syntax: Displays information about the status of multicast routing on the system. show ip multicast routing Mode(s): filter see Filtering show Commands in About This Guide
show ip multicast protocols

Description: Syntax: Displays information about the multicast protocols enabled on the system. show ip multicast protocols [ brief ] [ filter ] Mode(s): brief displays a summary rather than detailed information filter see Filtering show Commands in About This Guide
show ip nfs
Description: Syntax: Displays information about the interface that the current virtual router uses to exchange messages with the NFS server. show ip nfs [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show ip ospf ERX Edge Routers
453
show ip ospf
Description: Syntax: Displays general information about OSPF routing processes. show ip ospf [ vrf vrfName ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip ospf border-routers

Description: Syntax: Displays routing table entries for area border and AS boundary routers. show ip ospf border-routers [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
show ip ospf database

Description: Syntax: Displays either the full IP OSPF database or a summary of the database. show ip ospf database [ vrf vrfName ] [ database-summary | { asbr-summary | external | network | nssa-external | router | summary | opaqueArea } [ ipAddress | internal ] ] [ filter ] Mode(s): vrfName name of the VRF database-summary a summary of the database asbr-summary ASBR summary link states external external link states network network link states nssa-external NSSA External link states router router link states summary network summary link states opaqueArea traffic-engineering opaque LSA states ipAddress a link state IP address internal internal LSA information filter see Filtering show Commands in About This Guide
454
show ip ospf interface
show ip ospf interface

Description: Syntax: Displays a list of OSPF interfaces. show ip ospf interface [ vrf vrfName ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): vrfName name of the VRF interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show ip ospf internal-statistics

Description: Syntax: Displays internal OSPF statistics. show ip ospf internal-statistics [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
show ip ospf neighbors

Description: Syntax: Displays a list of OSPF neighbors. show ip ospf neighbors [ vrf vrfName ] [ neighborAddress ] [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): vrfName name of the VRF neighborAddress router ID of a specified neighbor interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show ip ospf remote-neighbor interface ERX Edge Routers
455
show ip ospf remote-neighbor interface

Description: Syntax: Displays interfaces associated with OSPF remote neighbors. show ip ospf remote-neighbor [ ipAddress ] interface [ vrf vrfName ] [ filter ] Mode(s): ipAddress source IP address of a remote neighbor vrfName name of the VRF filter see Filtering show Commands in About This Guide
show ip ospf spf-log

Description: Syntax: Displays how often and why the router has run a full SPF calculation. show ip ospf spf-log [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
show ip ospf virtual-links

Description: Displays the parameters and the current state of OSPF virtual links. A virtual link is a logical connection between two systems. To establish or maintain connectivity to the backbone, you can configure virtual links through nonbackbone areas. Virtual links serve to connect physically separate components of the backbone. The two endpoints of a virtual link are area border routers. show ip ospf virtual-links [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
Syntax:
show ip pim auto-rp

Description: Syntax: Displays information about rendezvous point routers and the RP mapping agent in a PIM-SM environment. show ip pim auto-rp [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
456
show ip pim dense-mode sg-state
show ip pim dense-mode sg-state

Description: Syntax: Displays information for each SG entry that PIM-DM knows about. show ip pim dense-mode sg-state [ group groupAddress [ source sourceAddress ] ] [ filter ] Mode(s): groupAddress IP address of a multicast group sourceAddress IP address of a multicast source filter see Filtering show Commands in About This Guide
show ip pim interface

Description: Syntax: Displays information about each PIM-DM interface. show ip pim interface [ interfaceType interfaceSpecifier ] [ count ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide count displays the number of incoming and outgoing PIM control packets filter see Filtering show Commands in About This Guide
show ip pim neighbor

Description: Syntax: Displays information about each PIM neighbor that the system has discovered. show ip pim neighbor [ interfaceType interfaceSpecifier ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show ip pim remote-neighbor ERX Edge Routers
457
show ip pim remote-neighbor

Description: Syntax: Displays information about all PIM remote neighbors or the specified remote neighbor. show ip pim remote-neighbor [ ipAddress ] [ count ] [ filter ] Mode(s): ipAddress ipAddress of a remote neighbor count display the number of remote neighbors filter see Filtering show Commands in About This Guide
Privileged Exec
show ip pim rp
Description: Syntax: Displays information about PIM group-to-RP mappings. show ip pim rp { groupAddress | mapping } [ filter ] Mode(s): groupAddress address of a group for which you want to view group-to-RP mappings mapping displays all RP-to-group mappings that the system has recorded filter see Filtering show Commands in About This Guide
show ip pim rp-hash

Description: Syntax: Shows which RP a multicast group is using. show ip pim rp-hash groupAddress [ filter ] Mode(s): group IP address of multicast group for which you want to view the RP filter see Filtering show Commands in About This Guide
458
show ip pim sparse-mode sg-state
show ip pim sparse-mode sg-state

Description: Syntax: Displays information for each SG entry that PIM-SM knows about. show ip pim sparse-mode sg-state [ group groupAddress [ source sourceAddress ] | rp rpAddress ] [ count ] [ filter ] Mode(s): groupAddress IP address of a multicast group sourceAddress IP address of a multicast source rpAddress IP address of an RP router count displays the number of SG entries filter see Filtering show Commands in About This Guide
show ip pim sparse-mode unicast-route

Description: Syntax: Displays the unicast routes that PIM-SM is using. show ip pim sparse-mode unicast-route [ routeAddress routeMask ] [ count ] [ filter ] Mode(s): routeAddress IP address associated with a unicast route routeMask network mask associated with a unicast route count shows the number of unicast routes that PIM-SM is using. filter see Filtering show Commands in About This Guide
show ip pim spt-threshold

Description: Syntax: Displays the threshold for switching to the shortest-path-tree at a PIM DR. show ip pim spt-threshold [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show ip prefix-list ERX Edge Routers
459
show ip prefix-list
Description: Syntax: Displays information about prefix lists. show ip prefix-list [ listName [ seq seqNum | ipPrefix [ longer | first-match ] ] ] [ filter ] Mode(s): listName displays information for the prefix list having this name seqNum displays the information for the prefix list entry having this sequence number ipPrefix displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24 longer displays all entries for a prefix that are equal to or more specific than the specified prefix first-match displays only an entry that matches the specified prefix filter see Filtering show Commands in About This Guide
Privileged Exec
show ip prefix-list summary | detail

Description: Syntax: Displays detailed or summary information about one or all prefix lists. show ip prefix-list { summary | detail } [ listName ] [ filter ] Mode(s): summary displays summary information detail displays detailed information listName name of the prefix list filter see Filtering show Commands in About This Guide
Privileged Exec
show ip prefix-tree
Description: Syntax: Displays information about prefix trees. show ip prefix-tree [ treeName [ ipPrefix [ longer ] ] ] [ filter ] Mode(s): treeName name of the prefix tree ipPrefix displays the information for the prefix list entry having this prefix, in the format IPbaseaddress/length; for example, 10.10.10.0/24 longer displays all entries for a prefix that are equal to or more specific than the specified prefix filter see Filtering show Commands in About This Guide
Privileged Exec
460
show ip prefix-tree summary | detail
show ip prefix-tree summary | detail

Description: Syntax: Displays detailed or summary information about one or all prefix trees. show ip prefix-tree {summary | detail } [ treeName ] [ filter ] Mode(s): summary displays summary information detail displays detailed information treeName name of the prefix tree filter see Filtering show Commands in About This Guide
Privileged Exec
show ip profile
Description: Syntax: Displays information on a specific IP profile. show ip profile profileName [ filter ] Mode(s): profileName name of the profile you want to display filter see Filtering show Commands in About This Guide
User Exec, Privilege Exec
show ip protocols
Description: Syntax: Displays detailed information on IP protocols currently configured on the router. show ip protocols [ vrf vrfName ] [ summary ] [ filter ] Mode(s): vrfName displays information on protocols only for the specified VRF summary displays only a list of currently configured protocols filter see Filtering show Commands in About This Guide
show ip redistribute
Description: Syntax: Displays configured route redistribution policy. show ip redistribute [ vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
show ip rip ERX Edge Routers
461
show ip rip
Description: Syntax: Displays limited RIP general status information. show ip rip [ vrf vrfName ] [ brief ] [ ifconfig ] [ ipAddress ] [ filter ] Mode(s): vrfName name of the VRF brief displays limited information ifconfig displays address and interface configuration information instead of the default operational data ipAddress displays information only for specific RIP network filter see Filtering show Commands in About This Guide
show ip rip database

Description: Syntax: Displays route entries in the RIP routing table (RIP database). show ip rip database [ vrf vrfName ] [ all ] [ inactive ] [ filter ] Mode(s): vrfName name of the VRF all displays active and inactive routes learned via RIP updates inactive displays routes the system will discard in the immediate future filter see Filtering show Commands in About This Guide
show ip rip network

Description: Syntax: Displays the networks associated with the RIP routing process. show ip rip network [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
462
show ip rip peer
show ip rip peer

Description: Syntax: Displays all RIP neighbors with limited information about each peer. show ip rip peer [ vrf vrfName ] [ filter ] Mode(s): vrfName name of the VRF filter see Filtering show Commands in About This Guide
show ip rip statistics

Description: Syntax: Displays global statistics associated with the RIP routing process. If you specify an IP address, additionally displays statistics for that interface. show ip rip statistics [ vrf vrfName ] [ ipAddress ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF ipAddress address of IP interface where RIP is running; identifies RIP network delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip rip summary-address

Description: Syntax: Displays RIP summary addresses. show ip rip summary-address [ vrf vrfName ] [ ipAddress [ ipMask ] ] [ filter ] Mode(s): vrfName name of the VRF ipAddress address of IP interface where RIP is running ipMask IP mask of the specific address filter see Filtering show Commands in About This Guide
show ip route ERX Edge Routers
463
show ip route
Description: Syntax: Displays current state of the routing table. show ip route [ vrf vrfName ] [ ipAddress [ ipMask ] [ detail ] ] [ all ] [ bgp | isis | local | ospf | other | rip | static ] [ filter ] show ip route summary [ vrf vrfName ] [ filter ] Mode(s): vrfName displays the contents of the IP routing table associated with a VRF name displays the best route to the IP address resolved from this domain name ipAddress specifies the IP address or domain name to show domainName displays information for the IP address resolved from the specified domain name ipMask IP mask of the specific address to show detail displays detailed information about the specific prefix; currently shows the tag added via the ip route command all displays all routes in the routing table inserted from all protocols (not just the best routes that are used for forwarding) bgp displays the best BGP routes in the routing table isis displays the best IS-IS routes in the routing table local displays the best locally connected routes in the routing table ospf displays the best OSPF routes owned by in the routing table other displays the best internal control routes in the routing table rip displays the best RIP routes in the routing table static displays the best static routes added by network management to the routing table summary displays summary counters for all routes in the IP routing table filter see Filtering show Commands in About This Guide
464
show ip route slot
show ip route slot

Description: Syntax: Displays the interface and next hop for an IP address in the routing table of a line module. show ip route slot slotNumber [ vrf vrfName ] ipAddress Mode(s): slotNumber number of slot containing the line module for which the information is displayed vrf specifies a VRF context vrfName name of the VRF ipAddress IP address to look up in the routing table
show ip rpf-route
Description: Syntax: Displays routes that the system can use to verify source addresses in multicast packets. show ip rpf-route [ ipAddress [ ipMask ] ] [ protocol ] [ filter ] ipAddress specific IP address to show ipMask IP mask of the specific address to show protocol one of the following options
access displays access-server routes (BGP) access-internal displays internal routes to directly connected clients
(BGP)
bgp displays routes owned by BGP isis displays routes owned by IS-IS local displays locally connected routes ospf displays routes owned by OSPF other displays internal control routes rip displays routes owned by RIP static displays static routes added by network management
Mode(s): filter see Filtering show Commands in About This Guide User Exec, Privileged Exec
show ip ssh ERX Edge Routers
465
show ip ssh
Description: Syntax: Displays the current state of the SSH server. show ip ssh [ detail ] [ filter ] Mode(s): detail displays detailed information filter see Filtering show Commands in About This Guide
Privileged Exec
show ip static
Description: Syntax: Displays general status information for static routes added by network management to the routing table. show ip static [ vrfName ] [ ipAddress ipMask [ all ] ] [ filter ] Mode(s): vrfName name of the VRF ipAddress an IP address to show ipMask an IP mask of the specific address to show all displays all routes starting at the specified prefix filter see Filtering show Commands in About This Guide
show ip tcp statistics

Description: Syntax: Displays TCP statistics. show ip tcp statistics [ vrf vrfName ] [ brief | detailed ] [ delta ] [ localAddress [ localPort [ remoteAddress [ remotePort ] ] ] ] [ filter ] Mode(s): vrfName name of the VRF brief displays a brief summary of each TCP connection detailed displays detailed statistics for each TCP connection delta displays baselined statistics localAddress displays TCP connections to and from the IP address on this system localPort displays TCP connections to/from the port on this router remoteAddress displays TCP connections to and from the remote IP address remotePort displays TCP connections to and from the remote port filter see Filtering show Commands in About This Guide
466
show ip traffic
show ip traffic
Description: Syntax: Displays statistics about IP traffic. show ip traffic [ vrfName ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip tunnel reassembly statistics

Description: Syntax: Displays statistics on the reassembly of fragmented tunnel packets within the current virtual router context. show ip tunnel reassembly statistics [ detail ] [ all ] [ filter ] Mode(s): detail displays detailed reassembly statistics that include packets reassembled or discarded per protocol all displays reassembly statistics for all virtual routers on the system filter see Filtering show Commands in About This Guide
show ip udp statistics

Description: Syntax: Displays UDP statistics. show ip udp statistics [ vrfName ] [ delta ] [ filter ] Mode(s): vrfName name of the VRF delta displays baselined statistics filter see Filtering show Commands in About This Guide
show ip vrf ERX Edge Routers
467
show ip vrf
Description: Syntax: Displays information for a specified VRF and its associated interfaces or all VRFs and their associated interfaces for the current virtual router context. show ip vrf [ [ detail ] [ vrfName ] [ filter ] | interfaces [ detail ] ] Mode(s): vrfName - name of the VRF for which information is displayed detail - displays detailed information filter see Filtering show Commands in About This Guide interfaces - displays all VRFs in the virtual router and their associated interfaces
show ip vrrp
Description: Displays detailed summary of VRID configured on interface identified. If the VRID is not identified, a detailed summary of all VRIDs configured on interface identified is provided. show ip vrrp [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
show ip vrrp brief

Description: Syntax: Displays brief summary of VRIDs configured on the interface identified. show ip vrrp brief [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 filter see Filtering show Commands in About This Guide
Privileged Exec
468
show ip vrrp neighbor
show ip vrrp neighbor

Description: Syntax: Displays summary of all neighbors known to the VRRP router configured on the interface identified. show ip vrrp neighbor [ interface interfaceType interfaceSpecifier [ vrid ] ] [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 filter see Filtering show Commands in About This Guide
Privileged Exec
show ip vrrp statistics

Description: Syntax: Displays either global statistics and/or per interface and VRID pair statistics. show ip vrrp statistics [ global | [ interface interfaceType interfaceSpecifier [ vrid ] ] [ delta ] [ filter ] Mode(s): global specify for global counters interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide vrid virtual router ID; a number in the range 1255 delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show ip vrrp summary

Description: Syntax: Mode(s): Displays a summary count on all VRIDs configured. show ip vrrp summary Privileged Exec
show ipsec lifetime ERX Edge Routers
469
show ipsec lifetime

Description: Syntax: Mode(s): Displays the configured default lifetime of phase II SAs. show ipsec lifetime Privileged Exec
show ipsec local-endpoint

Description: Syntax: Displays the address and transport virtual router of local endpoints. show ipsec local-endpoint [ transport-virtual-router transportVirtualRouter ] Mode(s): transportVirtualRouter name of virtual router that includes source and/or destination addresses assigned to tunnel interfaces
Privileged Exec
show ipsec transform-set

Description: Syntax: Displays transform sets configured on the system. show ipsec transform-set [ transformSetName ] Mode(s): transformSetName displays information on a specific transform set
Privileged Exec
470
show ipsec tunnel
show ipsec tunnel

Description: Syntax: Displays information on tunnels that are configured on a specific virtual router. show ipsec tunnel [ tunnelName | [ virtual-router vrName ] ip ipAddress ] [ state { adminState | operStatus } ] [ filter ] [ detail ] [ delta ] Mode(s): tunnelName displays information for the specified tunnel vrName name of virtual router on which tunnels are configured ip display tunnels that are using a particular IP address state restricts display to tunnels in a particular state adminState displays tunnels in an administrative state of enabled or disabled operStatus displays tunnels in an operational state of up, down, lower-down, or not-present detail displays configuration and statistics of tunnels delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show ipsec tunnel summary

Description: Syntax: Displays a summary of all tunnels configured on the system. show ipsec tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show isis database ERX Edge Routers
471
show isis database

Description: Syntax: Displays the IS-IS link state database. show isis database [ level-1 | level-2 | l1 | l2 | lspid | detail | verbose ]* [ filter ] Mode(s): level-1 displays the IS-IS link state database for level 1 level-2 displays the IS-IS link state database for level 2 l1 displays the IS-IS link state database for level 1 l2 displays the IS-IS link state database for level 2 lspid link state PDU identifier in the form xxxx.xxxx.xxxx.yy.zz; when specified, displays the contents of a single link state PDU by its ID number detail additionally displays contents of each link state PDU; if not specified, a summary display is provided verbose additionally displays MPLS traffic engineering information * indicates that one or more parameters can be repeated multiple times in a list in the command line filter see Filtering show Commands in About This Guide
show isis mpls adjacency-log

Description: Syntax: Displays a log of the last 20 IS-IS adjacency changes. show isis mpls [ traffic-eng ] adjacency-log [ filter ] Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations filter see Filtering show Commands in About This Guide
show isis mpls advertisements

Description: Syntax: Displays the last record flooded from MPLS. show isis mpls [ traffic-eng ] advertisements [ filter ] Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations filter see Filtering show Commands in About This Guide
472
show isis mpls tunnel
show isis mpls tunnel

Description: Syntax: Displays information about tunnels used in the calculation of IS-IS next hops. show isis mpls [ traffic-eng ] tunnel [ filter ] Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations filter see Filtering show Commands in About This Guide
show isis spf-log

Description: Syntax: Displays how often and why the router has run a full SPF calculation. show isis spf-log [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show isis summary-addresses

Description: Syntax: Displays aggregate address information for IS-IS. show isis summary-addresses [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show isis topology

Description: Syntax: Displays the paths to all intermediate systems. show isis topology [ [ level-1 | level-2 | l1 | l2 ]* [ nsap ] | [ nsap ] [ level-1 | level-2 | l1 | l2 ]* ] [ filter ] Mode(s): level-1 displays paths to all level 1 routers in the area level-2 displays paths to all level 2 routers in the domain l1 displays paths to all level 1 routers in the area l2 displays paths to all level 2 routers in the domain * indicates that one or more parameters can be repeated multiple times in a list in the command line nsap the NSAP address filter see Filtering show Commands in About This Guide
show l2f ERX Edge Routers
473
show l2f
Description: Syntax: Displays global configuration and status information for L2F on the system. show l2f [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show l2f destination

Description: Syntax: Displays information about selected L2F destinations. show l2f destination [ detail ] [ destinationName | | virtual-router vrName | ip ipAddress ] [ filter ] Mode(s): detail provides complete information about the specified destinations destinationName name the system assigns to the peer at the other end of the tunnel vrName name of the virtual router on which the destination exists ipAddress IP address of the peer at the other end of the tunnel filter see Filtering show Commands in About This Guide
Privileged Exec
show l2f destination summary

Description: Syntax: Displays the configured and operational status of all L2F destinations. show l2f destination summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
474
show l2f session
show l2f session

Description: Syntax: Displays detailed information about selected L2F sessions. show l2f session [ detail ] [ state { adminState | operStatus } ] [ sessionName | [ virtual-router vrName ] ip ipAddress [ sessionName ] ] [ filter ] Mode(s): detail provides complete information about the specified sessions state displays information on sessions that are in a particular administrative state or operational status adminState use the online Help to see a list of possible administrative states operStatus use the online Help to see a list of possible selections for operational status sessionName a session name vrName name of the virtual router on which the session exists ipAddress IP address of the peer at the other end of the session filter see Filtering show Commands in About This Guide
Privileged Exec
show l2f session summary

Description: Syntax: Displays the configured and operational status of all L2F sessions. show l2f session summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show l2f tunnel ERX Edge Routers
475
show l2f tunnel

Description: Syntax: Displays detailed information on the configured and operational status of selected L2F tunnels. show l2f tunnel [ detail ] [ state { adminState | operStatus } ] [ tunnelName | [ virtual-router vrName ] ip ipAddress [ tunnelName ] ] [ filter ] Mode(s): detail provides complete information about the specified tunnels state displays information on tunnels that are in a particular administrative state or operational status adminState use the online Help to see a list of possible administrative states operStatus use the online Help to see a list of possible selections for operational status tunnelName name of an L2F tunnel vrName name of the virtual router on which the tunnel exists ipAddress IP address of the peer at the other end of the tunnel filter see Filtering show Commands in About This Guide
Privileged Exec
show l2f tunnel summary

Description: Syntax: Displays the configured and operational status of all L2F tunnels. show l2f tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show l2tp
Description: Syntax: Displays information about the L2TP configuration on the system. show l2tp [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
476
show l2tp destination
show l2tp destination

Description: Syntax: Displays information about selected L2TP destinations. show l2tp destination [ detail ] [ destinationName | [ virtual-router vrName ] ip ipAddress ] [ filter ] Mode(s): detail provides complete information about the specified destinations, including destination profiles destinationName name the system assigns to the peer at the other end of the tunnel vrName name of the virtual router on which the destination exists ipAddress IP address of the peer at the other end of the tunnel filter see Filtering show Commands in About This Guide
Privileged Exec
show l2tp destination profile

Description: Syntax: Displays destination profile configuration. show l2tp destination profile [ profileName ] Mode(s): profilename provides detailed information on a designated profile
Privileged Exec
show l2tp destination summary

Description: Syntax: Displays the configured and operational status of all L2TP destinations. show l2tp destination summary [ filter ] Mode(s): filter see Filtering show Commands in About This GuideEdinburgh5.0
Privileged Exec
show l2tp session ERX Edge Routers
477
show l2tp session

Description: Syntax: Displays detailed information about selected L2TP sessions. show l2tp session [ detail ] [ state { adminState | ifOperStatus } ] [ l2tpName | [ virtual-router vrName ] ip ipAddress [ l2tpNameNoDest ] ] [ filter ] Mode(s): detail provides complete information about the specified sessions state restricts display to sessions in a specific state adminState effective administrative state ifOperStatus operational state l2tpName session name vrName name of the virtual router on which the session exists ipAddress IP address l2tpNameNoDest name of the session filter see Filtering show Commands in About This Guide
Privileged Exec
show l2tp session summary

Description: Syntax: Displays the configured and operational status of all L2TP sessions. show l2tp session summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
478
show l2tp tunnel
show l2tp tunnel

Description: Syntax: Displays detailed information on the configured and operational status of selected L2TP tunnels. show l2tp tunnel [ detail ] [ state { adminState | ifOperStatus } ] [ l2tpName | [ virtual-router vrName ] ip ipAddress [ l2tpNameNoDest ] ] [ filter ] detail provides complete information about the specified sessions, including the L2TP host profile name state restricts display to tunnels in one of the following specific states:
adminState effective administrative state ifOperStatus operational state

Mode(s): l2tpName tunnel name vrName the name of the virtual router on which the tunnel exists ipAddress IP address l2tpNameNoDest tunnel name filter see Filtering show Commands in About This Guide
Privileged Exec
show l2tp tunnel summary

Description: Syntax: Displays the configured and operational status of all L2TP tunnels. show l2tp tunnel summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show last-reset
Description: Syntax: Displays information describing the reason for the systems last reload, whether specified by the user or resulting from a system problem. show last-reset [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show license b-ras ERX Edge Routers
479
show license b-ras

Description: Syntax: Displays the b-ras license string. show license b-ras [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show license ipsec-tunnels

Description: Syntax: Displays the IPSec tunnel license string. show license ipsec-tunnel [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show line console 0

Description: Syntax: Displays the speed configured for all future console sessions and the current console session. show line console 0 [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show line vty

Description: Syntax: Displays the configuration of vty lines. show line vty lineNumber [ filter ] Mode(s): lineNumber number of the vty line; only line numbers that you have configured are available for display filter see Filtering show Commands in About This Guide
Privileged Exec
480
show log configuration
show log configuration

Description: Syntax: Displays information on the logging configuration settings for a selected category. show log configuration [ category eventCategory ] [ filter ] Mode(s): category limits the display to a specific log category eventCategory the log category to be displayed; refer to the CLI online help for available options filter see Filtering show Commands in About This Guide
show log data

Description: Syntax: Displays the system log. show log data [ nv-file | category eventCategory ] [ severity { severityValue | severityNumber } ] [ delta ] [ filter ] nv-file displays the nv-file log category limits the display to a specific log category eventCategory log category to display; refer to the CLI online help for available options severity minimum severity of the log messages displayed; described either by a descriptive termseverityValueor by a corresponding numberseverityNumberin the range 07; the lower the number, the higher the priority:
Mode(s): delta limits the display to events that occurred after the baseline filter see Filtering show Commands in About This Guide
show mpls ERX Edge Routers
481
show mpls
Description: Syntax: Displays status and configuration information about MPLS on the router or on specific interfaces. show mpls [ interface [ shim ] [ state not-up ] [ brief | interfaceType interfaceSpecifier ] ] [ filter ] Mode(s): interface displays information only for the MPLS interfaces; if not specified, only global information is displayed shim displays information about shim interfaces state not-up displays information only about interfaces that are not up brief displays limited interface information interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
482
show mpls binding
show mpls binding

Description: Syntax: Displays label bindings for routes that are used for forwarding; from the MPLS label information base. show mpls [ ip ] binding [ ldp | cr-ldp | layer2-vc ] [ destAddr [ maskLength | maskAddress ] [ longer-prefixes ] ] [ interface interfaceType interfaceSpecifier ] [ neighbor ipAddress ] [ generic | atm ] [ local | remote ] [ label { atm vpi vci | implicit-null-label | labelNumber [ labelRangeEnd ] } ] [ brief ] [ filter ] ip optional keyword for compatibility with non-ERX implementations ldp displays binding information for routes learned via LDP cr-ldp displays binding information for routes learned via CR-LDP layer2-vc displays binding information for routes learned via layer 2 over MPLS destAddr destination address for which you want information displayed; if not specified, displays all fields maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface

About This Guide

interface type; see Interface Types and Specifiers in About This Guide ipAddress displays information for neighbor with this IP address generic displays information only for generic labels atm displays information only for ATM VPI/VCI labels local displays information only for local labels remote displays information only for remote labels atm displays information for the specified ATM VPI/VCI labels
vpi specifies ATM VPI that partially designates a label vci specifies ATM VCI that partially designates a label
implicit-null-label displays binding information for the implicit null label
show mpls explicit-paths ERX Edge Routers
483
Mode(s):
labelNumber displays information for this label only; a number in the range 161048575 labelRangeEnd when specified, displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 161048575 brief displays limited information filter see Filtering show Commands in About This Guide
show mpls explicit-paths

Description: Syntax: Displays all explicit paths or a particular explicit path. show { mpls | ip } explicit-paths [ detail | { name pathName | identifier pathNum } ] [ filter ] Mode(s): ip keyword for compatibility with non-ERX implementations mpls specify this keyword for our MPLS implementation detail specifies a verbose display [not currently supported] pathName name that identifies an explicit path pathNum number that identifies an explicit path filter see Filtering show Commands in About This Guide
484
show mpls forwarding
show mpls forwarding

Description: Syntax: Displays statistics and configuration forwarding information for LSPs created on the LSR. show mpls forwarding [ ldp | cr-ldp | rsvp-te | layer2-vc ] [ label { atm vpi vci | implicit-null-label | labelNumber [ labelRangeEnd ] } ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ] ldp displays LDP-specific forwarding information cr-ldp displays CR-LDPspecific forwarding information rsvp-te displays RSVP-TEspecific forwarding information layer2-vc displays layer-2-over-MPLSspecific forwarding information atm displays information for the specified ATM VPI/VCI labels
vpi specifies ATM VPI that partially designates a label vci specifies ATM VCI that partially designates a label
implicit-null-label displays forwarding information for the implicit null label labelNumber displays information for this label only; a number in the range 161048575 labelRangeEnd displays information for labels ranging from labelNumber to labelRangeEnd; a number in the range 161048575 destAddress destination address of tunnels to be displayed maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface

About This Guide

interface type; see Interface Types and Specifiers in About This Guide Mode(s): ipAddress displays information for next hop with this IP address brief displays only brief or summary information about the tunnels count-only displays a count of entries that match the specified conditions delta displays baselined statistics filter see Filtering show Commands in About This Guide
show mpls ldp targeted session ERX Edge Routers
485
show mpls ldp targeted session

Description: Syntax: Displays information about the LDP targeted sessions. show mpls ldp targeted session [ all | receive | send ] Mode(s): all displays all targeted sessions receive displays only targeted receive sessions send displays only targeted send sessions
486
show mpls minor-interface
show mpls minor-interface

Description: Syntax: Displays status and configuration for all minor interfaces or a specific minor interface in the current router context. show mpls [ traffic-eng ] minor-interface [ name interfaceName ] [ role { all | head | tail | middle | remote | lower } | up | down ] [ source-id sourceAddress [ srcId ] ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ] interfaceName name of minor interface to be displayed role displays tunnels in which the system has a specified role:
all displays all tunnels of which the system is a part head displays tunnels where the system is the ingress router, or tunnel
head end
tail displays tunnels where system is the egress router, or tunnel tail
end (endpoint or destination of the tunnel)
middle displays tunnels where system is a transit router on the tunnel remote displays tunnels where system is a transit router or egress
router (tail end)
lower displays tunnels with stacked upper tunnels

up displays tunnels that are up down displays tunnels that are down sourceAddress source address of tunnels to be displayed srcId local ID associated with source address of tunnels to be displayed, an integer from 0 to 65535 destAddress destination address of tunnels to be displayed maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface

About This Guide
show mpls profile ERX Edge Routers
487

interface type; see Interface Types and Specifiers in About This Guide Mode(s): ipAddress displays information for next hop with this IP address brief displays only brief or summary information about the tunnels count-only displays a count for entries that match the specified conditions delta displays baselined statistics filter see Filtering show Commands in About This Guide
show mpls profile

Description: Syntax: Displays a specific LDP, RSVP-TE, or tunnel profile, or all LDP, RSVP-TE, or tunnel profiles. show mpls { ldp | rsvp | tunnels } profile [ profileName ] [ filter ] Mode(s): ldp specifies LDP profile rsvp specifies RSVP-TE profile tunnels specifies the tunnel profile profileName name of the profile to be displayed filter see Filtering show Commands in About This Guide
show mpls rsvp

Description: Syntax: Displays RSVP path control blocks, reservation state control blocks, or complete RSVP session information for the virtual router. show mpls rsvp { psb | rsb | sessions } Mode(s): psb displays path state control blocks rsb displays reservation state control blocks sessions displays RSVP session information
488
show mpls tunnels
show mpls tunnels

Description: Syntax: Displays status and configuration for all tunnels or for a specific tunnel in the current router context. show mpls [ traffic-eng ] tunnels [ name tunnelName ] [ role { all | head | tail | middle | remote | lower } | up | down ] [ source-id sourceAddress [ srcId ] ] [ destination destAddr [ { maskLength | maskAddress } [ longer-prefixes ] ] ] [ interface interfaceType interfaceSpecifier ] [ nexthop ipAddress ] [ brief | count-only ] [ filter ] traffic-eng optional keyword for compatibility with non-ERX implementations tunnelName name of tunnel or minor interface to be displayed role displays tunnels in which the system has a specified role:
all displays all tunnels of which the system is a part head displays tunnels where the system is the ingress router, or tunnel
head end
tail displays tunnels where system is the egress router, or tunnel tail
end (endpoint or destination of the tunnel)
middle displays tunnels where system is a transit router on the tunnel remote displays tunnels where system is a transit router or egress
router (tail end)
lower displays tunnels with stacked upper tunnels

up displays tunnels that are up down displays tunnels that are down sourceAddress source address of tunnels to be displayed srcId local ID associated with source address of tunnels to be displayed, an integer from 0 to 65535 destAddress destination address of tunnels to be displayed maskLength prefix length for the destination address maskAddress address mask to be applied to the destination address longer-prefixes displays information for prefixes that are equal to or more specific than the specified prefix interface displays information for the specified interface

About This Guide
show multicast group limit ERX Edge Routers
489

interface type; see Interface Types and Specifiers in About This Guide Mode(s): ipAddress displays information for next hop with this IP address brief displays only brief or summary information about the tunnels count-only displays a count for entries that match the specified conditions delta displays baselined statistics filter see Filtering show Commands in About This Guide
show multicast group limit

Description: Syntax: Displays the number of IGMP groups associated with a port, and if configured, the maximum number of groups that a port can accept. show multicast group limit [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show nbma arp

Description: Syntax: Displays ARP table entries for NBMA interfaces. show nbma arp [ interfaceType interfaceSpecifier ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
show ntp associations

Description: Syntax: Displays information about NTP servers. show ntp associations [ detail ] [ filter ] Mode(s): detail provides expanded information about the ntp servers, rather than a summary filter see Filtering show Commands in About This Guide
490
show ntp status
show ntp status

Description: Syntax: Displays the NTP configuration and status for the system. show ntp status [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show nvs
Description: Syntax: Displays information about NVS. show nvs summary [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show policy-list
Description: Syntax: Displays information on policy lists. show policy-list [ policyName [ precedence precValue [ rule ruleNumber ] ] ] [ brief ] [ filter ] Mode(s): policyName policy name to be displayed precValue policy rule precedence to be displayed ruleNumber policy rule to be displayed brief display information in a condensed format filter see Filtering show Commands in About This Guide
show ppp interface

Description: Syntax: Displays information about the PPP interface type that you specify. show ppp interface [ interfaceType interfaceSpecifier ] [ full | { dataRestriction }* [ protocolRestriction ]* ] [ state stateRestriction ] [ delta ] [ filter ] For multilinked PPP interfaces, the following options are additionally available: show ppp interface mlppp [ interfaceSpecifier ] members [ filter ] show ppp interface mlppp links [ filter ]
show ppp interface ERX Edge Routers
491
interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide full displays configuration, status, and statistics information for the interface, including information specific to LCP, IPCP, OSINLCP, MPLSNLCP, PAP, and CHAP; equivalent to specifying config status statistics dataRestriction one or more of the following keywords; you can repeat a keyword without effect
config displays information on the PPP interface configuration status displays information on the PPP interface operational status statistics displays information on the PPP interface statistics
* indicates that one or more parameters can be repeated multiple times in a list in the command line protocolRestriction one or more of the following keywords
lcp displays LCP-specific information ip displays IPCP-specific information osi displays OSINLCP-specific information mpls displays MPLSNLCP-specific information pap displays PAP-specific information chap displays CHAP-specific information
stateRestriction information is displayed only for interfaces in one of the following specified states:
open interface is administratively enabled, meaning that the no ppp

shutdown command is operational
closed interface is administratively disabled, meaning that the ppp

shutdown command is operational
up interface on which the LCP has been negotiated down interface on which the LCP has not been negotiated, the
negotiations have failed, or the connection has been ended
lower-layer-down interface that is not up and is waiting for the lower

layer to come up to initiate negotiations for LCP
not-present interface that is not present because the hardware is not

available. When the interface is in this state, no detailed information is available.
passive interface with the operational status passive tunneled tunneled PPP interfaces
492
show ppp interface
no-ip interface on which IPCP is not configured ip-open interface on which IPCP is administratively enabled, meaning
that the no ppp shutdown ip command is operational
ip-closed interface on which IPCP is administratively disabled,

meaning that the ppp shutdown ip command is operational
ip-up interface on which the IPCP has been negotiated ip-down interface on which the IPCP has not been negotiated, the
negotiations failed, or the connection has been ended
no-osi interface on which OSINLCP is not configured osi-open interface on which OSINLCP is administratively enabled,
meaning that the no ppp shutdown osi command is operational
osi-closed interface on which OSINLCP is administratively disabled,

meaning that the ppp shutdown osi command is operational
osi-up interface on which the OSINLCP has been negotiated osi-down interface on which the OSINLCP has not been negotiated,
the negotiations failed, or the connection has been ended
no-mpls interface on which MPLSNLCP is not configured mpls-open interface on which MPLSNLCP is administratively enabled,
meaning that the no ppp shutdown mpls command is operational
mpls-closed interface on which MPLSNLCP is administratively

disabled, meaning that the ppp shutdown mpls command is operational
mpls-up interface on which the MPLSNLCP has been negotiated mpls-down interface on which the MPLSNLCP has not been
negotiated, the negotiations failed, or the connection has been ended Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide members lists all MLPPP member links, or only those for a specified MLPPP bundle links lists the MLPPP bundles and the PPP interfaces contained within them.
show ppp interface summary ERX Edge Routers
493
show ppp interface summary

Description: Syntax: Displays a summary of all nonmultilinked and multilinked PPP interfaces configured on the system. show ppp interface summary [ config | admin | oper ] [ filter ] Mode(s): config displays summary information about PPP configuration status admin displays summary information about PPP administration status oper displays summary information about PPP operational status filter see Filtering show Commands in About This Guide
show pppoe interface

Description: Syntax: Displays information on the PPPoE interface you specify. Use the summary keyword to display information for all configured PPPoE interfaces. show pppoe interface [ { fastEthernet | gigabitEthernet | serial | atm } interfaceSpecifier ] [ delta ] [ filter ] show pppoe interface [ summary ] [ full ] Mode(s): fastEthernet specifies an FE interface gigabitEthernet specifies a GE interface serial specifies a serial interface; however, PPPoE is not currently supported on serial interfaces atm specifies an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide summary displays administrative and operational status of all configured PPPoE interfaces full displays configuration, status, and statistics information
494
show pppoe subinterface
show pppoe subinterface

Description: Displays all available data for a specific PPPoE subinterface. Use the summary keyword to display information for all configured PPPoE subinterfaces. show pppoe subinterface [ { fastEthernet | gigabitEthernet | serial | atm } interfaceSpecifier ] [ delta ] [ filter ] show pppoe subinterface [ summary ] [ full ] Mode(s): fastEthernet specifies an FE interface gigabitEthernet specifies a GE interface serial specifies a serial interface; however, PPPoE is not currently supported on serial interfaces atm specifies an ATM interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide delta displays baselined statistics filter see Filtering show Commands in About This Guide summary displays administrative and operational status of all configured PPPoE subinterfaces full displays configuration, status, and statistics information
Syntax:
show processes
Description: Syntax: Use to show memory or CPU resources used by system processes and to force the system to release available memory on the SRP module. show processes [ cpu | memory ] [ filter ] cpu displays CPU utilization; default display if you omit any keyword memory displays system memory used and forces the system to release available memory Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show profile ERX Edge Routers
495
show profile
Description: Displays information about a specific IP profile, such as the available PPPoE profile information: PPPoE URL string, PPPoE MOTM string, or both. If neither exists, the fields do not appear in the display. show profile profileName [ filter ] Mode(s): profileName name of the profile you want to display filter see Filtering show Commands in About This Guide
Syntax:
User Exec, Privilege Exec
show profile brief

Description: Syntax: Lists the names of all IP profiles. show profile brief [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show qos interface-hierarchy

Description: Syntax: Displays information on the systems QoS interface hierarchy. show qos-interface-hierarchy interfaceType interfaceSpecifier [ filter ] Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
show qos-port-type-profile
Description: Syntax: Displays information on the QoS port-type profile for particular interface type. show qos-port-type-profile [ interfaceType ] [ filter ] interfaceType specifies one of the following interface types to be associated with the QoS port-type profile: atm, ethernet, serial, server-port filter see Filtering show Commands in About This Guide
Mode(s):
496
show qos-profile
show qos-profile
Description: Syntax: Displays information on QoS profile(s) configured on the ERX system. show qos-profile [ qosProfileName ] [ brief | references ] [ filter ] Mode(s): qosProfileName name of the QoS profile brief display information in a condensed format references display interface profiles which reference this profile filter see Filtering show Commands in About This Guide
show qos queue-thresholds

Description: Displays the color-based thresholds for queues on each egress slot. Displaying queue thresholds by queue-profile shows buffer memory information by queue-profile, and, within that profile, shows the thresholds for each region. Displaying queue thresholds by region organizes the buffer memory information by queue region, and, within each region, shows the buffer allocations for each queue-profile. Syntax: show qos queue-thresholds egress-slot egressSlot [ queue-profile [ queueProfileName ] | region [ regionNumber ] ] [ filter ] Mode(s): queue-thresholds displays color-based thresholds for queues on an egress-slot egress-slot displays color-based thresholds for an egress-slot queue-profile displays thresholds for each region of the queue profile queueProfileName name of the queue profile region displays egress memory or buffer region oversubscription regionNumber number identifying the egress memory or buffer region on the line card; range 0 7
show queue-profile ERX Edge Routers
497
show queue-profile
Description: Syntax: Displays information on queue profile(s) configured on the ERX system. show queue-profile [ queueProfileName ] [ brief | references ] [ filter ] Mode(s): queueProfileName name of the queue profile brief display information in a condensed format references display QoS profiles that reference this profile filter see Filtering show Commands in About This Guide
show radius
Description: Syntax: Displays information on RADIUS authentication and accounting servers. show radius [ authentication | accounting ] { servers | statistics [ delta ] } [ filter ] Mode(s): authentication displays authentication information only accounting displays accounting information only servers displays a list of authentication and/or accounting servers statistics displays authentication and/or accounting statistics delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show radius acct-session-id-format

Description: Syntax: Displays RADIUS Acct-Session-Id format used for RADIUS attribute 44, Acct-Session-Id. show radius acct-session-id-format [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius algorithm

Description: Syntax: Displays the RADIUS algorithm that the RADIUS servers use. show radius algorithm [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
498
show radius attributes-ignored
show radius attributes-ignored

Description: Displays whether RADIUS attribute 9, framed-ip-netmask, is accepted or ignored by the RADIUS server. See radius ignore framed-ip-netmask command. show radius attributes-ignored [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
show radius attributes-included

Description: Display the RADIUS attributes that are included in and excluded from Access-Request, Acct-Start, and Acct-Stop messages. You configure attribute inclusion using the radius include commands. show radius attributes-included [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
show radius calling-station-delimiter

Description: Syntax: Displays the delimiter used in RADIUS attribute 30, Calling-Station-Id, for the authenticated ATM PPP users. show radius calling-station-delimiter [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius calling-station-format

Description: Syntax: Displays the format of RADIUS attribute 31, Calling-Station-Id. show radius calling-station-format [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius dsl-port-type ERX Edge Routers
499
show radius dsl-port-type

Description: Syntax: Displays the DSL port type used in RADIUS attribute 61, NAS-Port-Type, for ATM users. show radius dsl-port-type [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius ethernet-port-type

Description: Syntax: Display RADIUS attribute 61, NAS-Port-Type, for Ethernet interfaces. show radius ethernet-port-type [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius nas-identifier

Description: Syntax: Displays the RADIUS clients value for RADIUS attribute 32, NAS-Identifier. show radius nas-identifier [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius nas-port-format

Description: Syntax: Displays the format used for RADIUS attribute 5, NAS-Port. show radius nas-port-format [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius override

Description: Displays whether the RADIUS client (LNS) uses RADIUS attribute 66, Tunnel-Client-Endpoint (LAC) IP address for RADIUS attribute 4, NAS-IP-Address. show radius override [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Syntax:
Privileged Exec
500
show radius rollover-on-reject
show radius rollover-on-reject

Description: Syntax: Displays the configuration of the rollover on reject feature. show radius rollover-on-reject [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius tunnel-accounting

Description: Syntax: Displays information on RADIUS accounting for L2TP tunnels. show radius tunnel-accounting [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius udp-checksum

Description: Syntax: Displays information on UDP checksums. show radius udp-checksum [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show radius update-source-addr

Description: Syntax: Displays the IP source address of the RADIUS client. show radius update-source-addr [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show rate-limit-profile
Description: Syntax: Displays information on rate-limit-profiles. show rate-limit-profile [ rateLimitProfileName ] [ filter ] Mode(s): rateLimitProfileName name of a rate limit profile filter see Filtering show Commands in About This Guide
show reboot-history ERX Edge Routers
501
show reboot-history
Description: Syntax: Displays information about the reboot history of the system. show reboot-history [ fileName.hty ] [ filter ] Mode(s): fileName name of a history file to display; if not specified, displays the current reboot.hty file filter see Filtering show Commands in About This Guide
show redundancy
Description: Syntax: Displays the way you configured the system for line module redundancy. show redundancy [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show reload
Description: Syntax: Displays the reload status on the router. show reload [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show route-map
Description: Syntax: Displays all the route maps or the route map you specify. The default is all route maps. show route-map [ listName ] [ filter ] Mode(s): listName specifies the route map name filter see Filtering show Commands in About This Guide
Privileged Exec
502
show rtr application
show rtr application

Description: Syntax: Displays RTR application information. show rtr application [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show rtr collection-statistics

Description: Syntax: Displays RTR collection information. show rtr collection-statistics [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide
show rtr configuration

Description: Syntax: Displays the configuration for all RTR entries or for a specified entry. show rtr configuration [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide
show rtr history

Description: Syntax: Displays the history collected for all RTR entries or for a specified entry. show rtr history [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide
show rtr hops ERX Edge Routers
503
show rtr hops

Description: Syntax: Displays information discovered on each of the hops. show rtr hops [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide
show rtr operational-state

Description: Syntax: Displays the operational state for all RTR entries or for a specified entry. show rtr operational-state [ rtrIndex ] [ filter ] Mode(s): rtrIndex number of the operation filter see Filtering show Commands in About This Guide
show running-configuration
Description: Syntax: Displays the configuration currently running on the system. Available only if the system is in Manual Commit mode. show running-configuration [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show scheduler-profile
Description: Syntax: Displays information on scheduler profile(s) configured on the ERX system. show scheduler-profile [ schedulerProfileName ] [ brief | references ] [ filter ] Mode(s): schedulerProfileName name of the scheduler profile brief displays information in a condensed format references displays QoS profiles that reference this profile filter see Filtering show Commands in About This Guide
504
show secrets
show secrets
Description: Syntax: Displays passwords and secrets. show secrets [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show smds interface

Description: Syntax: Displays the status and statistical information of SMDS interfaces. show smds interface [ dataRestriction ] [ delta ] [ interfaceType interfaceSpecifier ] [ filter ] dataRestriction specify one of the following keywords:
full displays full status information and statistics statistics displays statistics information
Mode(s): delta displays baselined statistics interfaceType displays statistics for SMDS interface configured on the interface type, hssi or tunnel interfaceSpecifier location of the interface in the appropriate format; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
Privileged Exec
show snmp
Description: Syntax: Displays information on the status of communications between the SNMP agent and the SNMP manager. show snmp [ delta ] [ filter ] Mode(s): delta displays baselined statistics filter see Filtering show Commands in About This Guide
show snmp access ERX Edge Routers
505
show snmp access

Description: Syntax: Displays information about the groups you configured. show snmp access [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show snmp community

Description: Syntax: Displays information on configured communities. show snmp community [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show snmp interfaces

Description: Syntax: Displays the configuration of your SNMP interface tables. show snmp interfaces [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show snmp trap

Description: Syntax: Displays information on configured traps and trap destinations. show snmp trap [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show snmp user

Description: Syntax: Displays information about users. show snmp user [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
506
show snmp view
show snmp view

Description: Syntax: Displays information about the views you created. show snmp view [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show sscc info

Description: Syntax: Displays information about SDX (formerly SSC) servers and SDX client (formerly SSCC) statistics. show sscc info [ brief ] [ filter ] Mode(s): brief abbreviated display of SDX client and server information filter see Filtering show Commands in About This Guide
show sscc version

Description: Syntax: Displays the SDX client (formerly SSCC) version number. show sscc version [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show statistics tacacs

Description: Syntax: Displays TACACS+ server or TACACS+ statistics information. show statistics tacacs [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show subscribers ERX Edge Routers
507
show subscribers
Description: Syntax: Displays the authenticated PPP users. Use the summary keyword to display all PPP subscribers for each virtual router, port, or domain. show subscribers [ username userName | domain domainName | virtual-router vrName | port interfaceLocation ] [ filter ] show subscribers summary [ domain | port | virtual-router ] [ filter ] summary active PPP subscribers per virtual router userName active PPP subscriber whose names match the username; 64 character string maximum domainName active PPP subscribers whose usernames have that domain name; 64 character string maximum vrName active PPP subscribers whose interfaces are bound to a specific virtual router; 513 character string maximum port displays active PPP subscribers for the port interfaceLocation location of the port in slot/port format; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
Mode(s):
Privileged Exec
show subsystems
Description: Syntax: Displays the names of subsystem files in the current software release or in a specified release file. show subsystems [ file fileName.rel ] [ filter ] fileName name of the software release file; you can specify a file on a remote server by including the path as part of the filename; absence of a path indicates a local file filter see Filtering show Commands in About This Guide
Mode(s):
Privileged Exec
508
show tacacs
show tacacs
Description: Syntax: Displays general or detailed TACACS+ information. show tacacs [ statistics | delta ] [ filter ] Mode(s): statistics specifies TACACS+ server statistics delta displays baselined statistics filter see Filtering show Commands in About This Guide
Privileged Exec
show telnet
Description: Syntax: Mode(s): Displays telnet daemons. show telnet Privileged Exec
show terminal
Description: Syntax: Displays information about terminal configuration settings for the current terminal line. show terminal [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show timing
Description: Syntax: Displays system timing settings and operational status. show timing [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show traffic-class ERX Edge Routers
509
show traffic-class
Description: Syntax: Displays information on traffic class(es) configured on the ERX system. show traffic-class [ trafficClassName ] [ brief | references ] [ filter ] Mode(s): trafficClassName name of the traffic class brief displays information in a condensed format references displays QoS profiles that reference this profile filter see Filtering show Commands in About This Guide
show traffic-class-group
Description: Syntax: Displays information on a traffic class group configured on the ERX system. show traffic-class-group [ trafficClassGroupName ] [ filter ] Mode(s): trafficClassGroupName name of the traffic class group filter see Filtering show Commands in About This Guide
show tunnel-server
Description: Syntax: Displays information about the tunnels that a specific Tunnel Service module or all Tunnel Service modules support. show traffic-server slot/port [ filter ] Mode(s): slot slot in which the Tunnel Service module resides port internal port on the module to which the tunnels are assigned filter see Filtering show Commands in About This Guide
Privileged Exec
show users
Description: Syntax: Displays information about users of the vty lines. show users [ detail ] [ all ] [ filter ] Mode(s): detail displays detailed information all displays information about all lines filter see Filtering show Commands in About This Guide
Privileged Exec
510
show utilization
show utilization
Description: Displays information about the resources that the installed modules consume and forces the system to release available memory on the SRP module. Note: When you issue this command, the system releases available memory on the SRP module immediately; however, the display appears a few seconds later. Syntax: show utilization [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
Privileged Exec
show version
Description: Syntax: Displays armed and running releases for every slot in the system and also displays each modules operational status. show version [ filter ] Mode(s): filter see Filtering show Commands in About This Guide
show virtual-router
Description: Syntax: Displays virtual routers configured on your system. show virtual-router [ routerName ] [ detail ] [ filter ] Mode(s): routerName name of the virtual router filter see Filtering show Commands in About This Guide detail displays detailed information about the virtual router
Privileged Exec
show vlan subinterfaces ERX Edge Routers
511
show vlan subinterfaces

Description: Syntax: Displays status of VLAN subinterfaces on FE and GE modules. show vlan subinterface [ { fastEthernet | gigabitEthernet } interfaceSpecifier ] [ filter ] Mode(s): fastEthernet specifies an FE interface gigabitEthernet specifies a GE interface interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide filter see Filtering show Commands in About This Guide
Privileged Exec
shutdown
Description: In Controller Configuration Mode, disables CE1, CT1, CT3, E3, SONET, and T3 controllers. These controllers are disabled by default. In Interface Configuration mode, disables Ethernet interfaces, HSSI interfaces, X.21/V.35 interfaces, the HDLC layer of serial interfaces, and the SONET layer of ATM or POS interfaces. These interfaces are enabled by default. In Subinterface Configuration mode, disables ATM 1483, Ethernet, Frame Relay, PPPoE, and VLAN subinterfaces. These subinterfaces are enabled by default. The no version restarts disabled controllers, interfaces, and subinterfaces. [ no ] shutdown Controller Configuration, Interface Configuration, Subinterface Configuration
Syntax: Mode(s):
sleep
Description: Syntax: Causes the CLI to pause for a specified period of time. There is no no version. sleep sleepFor Mode(s): sleepFor number of seconds in the range 04294967295
All modes
512
slot accept
slot accept
Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command after you have installed a different type of line module in a slot. There is no no version. slot accept slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 06; for an ERX-1400 series system, a number in the range 013
Syntax:
slot disable
Description: Syntax: Disables the module installed in the specified slot. There is no no version. slot disable slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 26; for an ERX-1400 series system, a number in the range 05 or 813
slot enable
Description: Syntax: Enables the module installed in the specified slot. There is no no version. slot enable slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 26; for an ERX-1400 series system, a number in the range 05 or 813
slot erase
Description: Erases from NVS the type and configuration of the previous line module in the specified slot, allows you to configure a new module. Issue this command before you install a different type of line module in a slot. There is no no version. slot erase slotNum Mode(s): slotNum for an ERX-700 series system, a number in the range 06; for an ERX-1400 series system, a number in the range 013
Syntax:
snmp trap ip link-status ERX Edge Routers
513
snmp trap ip link-status

Description: Syntax: Enables link status traps on an IP interface. The no version disables link status traps on an IP interface. snmp trap ip link-status no snmp trap ip Mode(s): Interface Configuration
snmp trap link-status

Description: Syntax: Mode(s): Enables processing of SNMP link status information on an interface. The no version disables the processing of SNMP link status information. [ no ] snmp trap link-status Controller Configuration, Interface Configuration
snmp-server
Description: Syntax: Mode(s): Enables the SNMP agent operation. The no version disables this operation. [ no ] snmp-server Global Configuration
514
snmp-server community
snmp-server community
Description: Configures an authorized SNMP community and associates SNMPv1/v2c communities with SNMPv3 views. The no version removes an authorized community from the list of communities. snmp-server community commString [ view viewName ] [ priv ] [ accessListName ] no snmp-server community commString Mode(s): commString name of the SNMPv1/v2c community viewName name of the SNMPv3 view priv Privileged Exec level ro (read-only); rw (read-write); admin (administrator) accessListName IP access list name to filter SNMP clients
Syntax:
snmp-server contact
Description: Syntax: Sets the systems contact information. The no version clears the systems contact information. snmp-server contact text no snmp-server contact Mode(s): text string of text that describes the systems contact person
snmp-server enable traps

Description: Syntax: Enables and configures global SNMP trap generation. The no version disables SNMP trap generation. [ no ] snmp-server enable traps [ trapCategory | snmp authentication ] [ trapfilters trapFilter ] trapCategory the SNMP trap category
addrPool local address pool traps atmPing ERX system proprietary ATM ping traps bgp BGP state change traps bulkstats bulkstats file full and nearly full traps cliSecurityAlert security alerts traps dvmrp DVMRP traps
snmp-server enable traps ERX Edge Routers
515
dvmrpUni ERX system proprietary DVMRP traps environment power/temperature/fan traps fileXfer file transfer status change traps inventory system inventory/status traps link SNMP linkUp/linkDown traps log system log capacity traps ntp ERX system proprietary traps ospf OSPF traps ping ping operation traps (in disman remops MIB) snmp SNMP coldstart, warmstart, link, authenticationFailure traps traceroute traceroute operation traps (in disman remops MIB)
snmp specifies the SNMP coldStart, warmStart, and authenticationFailure traps authentication specifies the SNMP authenticationFailure trap trapfilters filters traps according to severity level trapFilter minimum severity level of traps generated
alert severity level 1 critical severity level 2 debug severity level 7 emergency severity level 0 error severity level 3 informational severity level 6 notice severity level 5 warning severity level 4
516
snmp-server host
snmp-server host
Description: Syntax: Configures the host(s) that should receive an SNMP trap. The no version removes the specified host from the list of recipients. snmp-server host ipAddress [ version ver ] securityString [ udp-port port ] [ trapCategory ]* [ trapFilters trapFilter ] no snmp-server host ipAddress ipAddress IP address of the SNMP trap recipient ver SNMP protocol version for traps sent to host: v1, v2c, or v3 securityString SNMP community string port UDP port number of SNMP trap recipient trapCategory SNMP trap category
addrPool local address pool traps atmPing ERX system proprietary ATM ping traps bgp BGP state change traps bulkstats bulkstats file full and nearly full traps cliSecurityAlert security alerts traps dvmrp DVMRP traps dvmrpUni ERX system proprietary DVMRP traps environment power/temperature/fan traps fileXfer file transfer status change traps inventory system inventory/status traps link SNMP linkUp/linkDown traps log system log capacity traps ospf OSPF traps ping ping operation traps (in disman remops MIB) radius RADIUS traps snmp SNMP coldstart, warmstart, link, authenticationFailure traps traceroute traceroute operation traps (in disman remops MIB)
trapfilters filters traps according to severity level trapFilter minimum severity level of traps sent to this host
alert severity level 1 critical severity level 2 debug severity level 7 emergency severity level 0
snmp-server interfaces compress ERX Edge Routers
517
error severity level 3 informational severity level 6 notice severity level 5 warning severity level 4
snmp-server interfaces compress

Description: Removes a set of sublayers from the ifTable and the ifStackTable. You can enter this command multiple times to remove multiple interfaces. The no version negates the compression. [ no ] snmp-server interfaces compress [ interfaceLayer ]* interfaceLayer specifies the interface layer you want to remove from the ifTable and the ifStackTable. If you do not specify an interface layer, the following interface layers are removed:
Syntax:
ip ppp ethernetSubinterface hdlc pppoeInterface ipLoopback ipVirtual pppLinkInterface slepInterface/ciscoHdlc

snmp-server interfaces compress-restriction

Description: Syntax: Mode(s): Excludes interfaces from the ifTable and the ifStackTable if the ifAdminStatus of the interfaces is down. The no version negates the restriction. [ no ] snmp-server interfaces compress-restriction ifAdminStatusDown Global Configuration
518
snmp-server interfaces description-format common
snmp-server interfaces description-format common

Description: Enables the conventional industry method of encoding the SNMP ifDescr and ifName objects. The no version returns the encoding method to a proprietary encoding scheme. [ no ] snmp interfaces description-format common Global Configuration
Syntax: Mode(s):
snmp-server interfaces rfc1213

Description: Specifies that the system bases numbering in the IfTable on RFC 1213. The no version restores the default value, which is to use RFC 1573 style numbering in interface tables. Caution: Reducing the value of the maxIfIndex, the maxIfNumber, or both, causes the system to automatically reboot to factory default settings. The system does not reboot to factory defaults if you: Syntax: Increase the values of maxIfIndex and/or maxIfNumber. Issue a no version of the snmp-server interfaces rfc1213 command when the system is already set up for RFC 1573 style numbering. Enter the snmp-server interfaces rfc1213 command with the same options multiple times.
snmp interfaces rfc1213 [ maxIfIndex ] [ maxIfNumber ] [ no ] snmp interfaces rfc1213 maxIfIndex maximum value of index numbers in the interface tables; range is 100524800; default is 65535 maxIfNumber maximum number of interfaces in each interface table; range is 100524800; default is 65535
Mode(s):
snmp-server location
Description: Syntax: Sets information on the systems location. The no version clears this information. snmp-server location text no snmp-server location Mode(s): text string of text that describes the systems location
snmp-server packetsize ERX Edge Routers
519
snmp-server packetsize
Description: Syntax: Specifies the maximum SNMP packet size in bytes. The no version restores the default value. snmp-server packetsize byteCount no snmp-server packetsize Mode(s): byteCount size of an SNMP packet (in bytes)
snmp-server trap-proxy
Description: Syntax: Use to enable or disable the SNMP trap proxy. [ no ] snmp-server trap-proxy state Mode(s): trap-proxy specifies this agent as the SNMP trap proxy state enable or disable
snmp-server trap-source
Description: Syntax: Specifies the interface whose IP address is the source address for SNMP traps. The no version disables this feature. snmp-server trap-source interfaceType interfaceSpecifier no snmp-server trap-source Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
520
snmp-server user
snmp-server user
Description: Syntax: Use to create and modify SNMPv3 users. The no version removes the user. snmp-server user userName group groupName [ authentication authType authKey ] [ privacy privType privKey ] no snmp-server user userName userName name of the SNMPv3 user groupName name of the group to which the user belongs
one of the three predefined groups (admin, public, or private) or a

custom group created via SNMPv3 commands authType authorization protocol required for this user
md5 HMAC-MD5-96 authorization protocol sha HMAC-SHA-96 authorization protocol

authKey SNMP user authentication key
authPassword password for the authentication procedure; use a

16-character password for HMAC-MD5-96 and a 20-character password for HMAC-SHA-96 privType privacy protocol required for this user
des CBC-DES encryption algorithm for privacy

privKey users privacy key
privPassword password for the privacy verification; use a16-character

password for CBC-DES Mode(s): Global Configuration
source-address
Description: For L2TP, specifies a source IP address for the LAC tunnel endpoint. For L2F, specifies a source IP address for the home gateway tunnel endpoint. The no version removes the source address. source-address sourceAddress no source-address Mode(s): sourceAddress address of the local tunnel endpoint (the LAC)
Syntax:
speed ERX Edge Routers
521
speed
Description: When used from Line Configuration mode, sets the speed for the current and all new console sessions immediately. The no version reverts to the default value of 9600 bps. When used from Interface Configuration mode, specifies the line speed for an Ethernet interface. The no version specifies the default, automatically negotiate. This command works in conjunction with the duplex command; if you set or accept the automatically negotiate setting for either duplex mode or speed, the system negotiates both parameters with the remote device. This command is not available for the Ethernet interface on the SRP module. For console sessions: speed baudRate no speed baudRate terminal speed for the current console session. Possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200 For Ethernet interfaces on line modules: speed speedValue no speed speedValue value of the line speed
Syntax:
automatically negotiate specifies that the system negotiates the line

speed with the remote device
10 specifies that the system uses a line speed of 10 Mbps on a

Fast Ethernet interface (not valid for GE interfaces)
Fast Ethernet interface (not valid for GE interfaces)
Gigabit Ethernet interface (not valid for FE interfaces) Mode(s): Line Configuration, Interface Configuration
522
spf-interval
spf-interval
Description: Controls the minimum interval between the shortest path first calculation for IS-IS. The no version restores the default interval of 5 seconds. If you do not specify a level, the interval applies to both level 1 and level 2. spf-interval [ level-1 | level-2 ] seconds no spf-interval [ level-1 | level-2 ] Mode(s): seconds number in the range 0120; the minimum time between SPF calculations in seconds; the default value is 5 level1 level 1 SPF level2 level 2 SPF
Syntax:
split-horizon
Description: Controls the split horizon and poison reverse features for RIP remote neighbors. Split horizon is enabled by default; poison reverse routing updates are disabled by default. The no version disables the split horizon and enables poison reverse routing updates which set the metric for routes originating on the interface to infinity to explicitly advertise that the network is unreachable, reducing the possibility of routing loops. [ no ] split-horizon Remote Neighbor Configuration
Syntax: Mode(s):
srp switch
Description: Switches from the primary SRP module to the standby. This command is equivalent to the redundancy force-failover command with the srp option. There is no no version. srp switch [ [ force ] [ reason ] ] force prompts the user to confirm that the system should switch from the primary SRP module to the standby if the SRP modules are in certain states, such as writing configuration data to NVS, that could lead to loss of configuration data or corruption of NVS. reason reason for the change
Syntax:
Mode(s):
Privileged Exec
sscc address ERX Edge Routers
523
sscc address
Description: Configures the SDX client (formerly SSCC) with the IP addresses of the SDX servers and the ports on which the servers listen for activity. The no version removes the specified server (primary, secondary, or tertiary) from the list of SDX servers. [ no ] sscc { primary | secondary | tertiary } address ipAddress port portNumber Mode(s): primary primary SDX server secondary secondary SDX server tertiary tertiary SDX server ipAddress IP address of an SDX server portNumber SDX server port number on which the server listens for activity
Syntax:
sscc enable
Description: Syntax: Mode(s): Enables the SDX (formerly SSC). The no version disables the feature. [ no ] sscc enable Global Configuration
sscc retryTimer
Description: Configures the delay period during which the SDX client (formerly SSCC) waits for a response from an SDX (formerly SSC) server. When the timer expires, the client submits the request to the next server and waits again for the timer to expire. The request is sent to each timer in rotation until there is a response. The no version restores the default delay period of 90 seconds. [ no ] sscc retryTimer timer Mode(s): timer time in seconds from 5 to 300
Syntax:
sscc sourceAddress
Description: Syntax: Specifies a fixed source address for the TCP/COPS connection. [ no ] sscc sourceAddress ipAddress Mode(s): ipAddress the source (or local) IP address of the TCP/COPS connection
524
sscc transportRouter
sscc transportRouter
Description: Syntax: Configures the router on which the TCP/COPS connection is to be established. [ no ] sscc transportRouter name Mode(s): name the transport routers name
strict-priority
Description: Syntax: Mode(s): Sets strict-priority scheduling for the scheduler node. The no version deletes the strict priority setting. [ no ] strict-priority Scheduler Profile Configuration
strip-domain
Description: Use to strip the domain name from the username before sending an access-request message to the RADIUS server. The domain name is the text after the last @ character. For example, xyz.com is the domain name of the following: fred@abc.com@xyz.com. To stop stripping the domain name, use the disable keyword. The no version resets the default, disable. strip-domain { enable | disable } no strip domain Mode(s): Domain Map Configuration
Syntax:
subscriber ERX Edge Routers
525
subscriber
Description: Configures a local subscriber (when one cannot be obtained externally, as in PPP) on the ERX to support authentication and configuration from the RADIUS server. The no version negates the command. subscriber upperInterfaceType userNameUsage userName domain domainName [ passwordUsage password ] no subscriber upperInterfaceType upperInterfaceType upper interface type, bridged Ethernet or IP userNameUsage specifies how the supplied username is used for authentication purposes: as specified or postpended with the interface physical location userName RADIUS username domainName domain name passwordUsage specifies how the supplied password is used for authentication purposes: as specified or postpended with the interface physical location; password usage is optional password RADIUS password; password usage is optional
Syntax:
Mode(s):
526
summary-address
summary-address
Description: Syntax: Creates aggregate addresses for IS-IS or aggregates external routes at the border of the OSPF domain. The no version restores the default. ISIS: summary-address address mask [ level-1 | level-1-2 | level-2 ] [ metric ] no summary-address address mask [ level-1 | level-1-2 | level-2 ] address summary IP address designated for a range of addresses mask IP subnet mask used for the summary route level-1 redistributed routes into level 1 are summarized; when distributing routes domain wide, routes leaked from level 2 into level 1 are summarized level 1-2 summary route is applied both when redistributing routes into level 1 and level 2 IS-IS, and when routes are leaked between levels level-2 routes learned by level 1 routing are summarized into the level 2 backbone with the configured address/mask value; redistributed routes into level 2 IS-IS are also summarized metric number in the range 116777215; the default metric value; the summary uses this value when advertising the summary address. When no metric is supplied, uses the value of the lowest-cost route that this is summarizing (default)
OSPF: [ no ] summary-address address mask Mode(s): address summary address designated for a range of addresses mask IP subnet mask used for the summary route
suppress-default
Description: Suppresses an IS-IS level 1-2 router from indicating that it can reach destinations outside the area, thus preventing level 1 routers from installing a default route to the level 1-2 router. The no version disables suppression of default routes. [ no ] suppress-default Router Configuration
Syntax: Mode(s):
svlan id ERX Edge Routers
527
svlan id
Description: Syntax: Specifies an S-VLAN. There is no no version. svlan id S-VlanIdValue VlanIdValue Mode(s): S-VlanIdValue S-VLAN ID number in the range of 04095, which is unique within the Ethernet interface VlanIdValue VLAN ID number in the range of 04095, which is unique within the Ethernet interface
svlan ethertype
Description: Syntax: Specifies the Ethertype of an S-VLAN. The no version removes the Ethertype. [ no ] svlan ethertype { 9100 | 9200 } Mode(s): 9100 specifies Ethertype value 0x9100 9200 specifies Ethertype value 0x9200
synchronization
Description: Syntax: Mode(s): Enables synchronization between BGP and your IGP. The no version advertises a network route without waiting for the IGP. [ no ] synchronization Address Family Configuration, Router Configuration
synchronize
Description: Syntax: Mode(s): Forces the NVS file system of the redundant SRP module to synchronize with the NVS file system of the primary SRP module. There is no no version. synchronize Privileged Exec
528
t1 bert
t1 bert
Description: Syntax: Enables bit error rate tests using the specified pattern on a T1 line on a CT3 module. The no version stops the test that is running. t1 channel bert pattern pattern interval time [ unframed ] no t1 channel bert channel T1 channel number in the range 128 pattern one of the following test patterns
0s repetitive test pattern of all zeros, 00000... 1s repetitive test pattern of all ones, 11111... 2^11 pseudorandom test pattern, 2048 bits in length 2^15 pseudorandom 0.151 test pattern, 32768 bits in length 2^20-O153 pseudorandom 0.153 test pattern, 1048575 bits in length 2^20-QRSS pseudorandom QRSS 0.151 test pattern, 1048575 bits in
length
2^23- pseudorandom 0.151 test pattern, 8388607 bits in length alt-0-1 repetitive alternating test pattern of zeros and ones,
01010101...
time interval between test patterns, ranging from 114,400 minutes

unframed the test bit pattern occupies all bits on the link, overwriting the framing bits. If you do not specify the unframed keyword, then the test bit pattern only occupies T1 payload bits.
Mode(s):
t1 clock source ERX Edge Routers
529
t1 clock source
Description: Syntax: Determines which end of the T1 interface provides clocking. The no version uses the default value, line. t1 channel clock source { line | internal { module | chassis } } no t1 channel clock source channel T1 channel number in the range 128 line interface transmits data from a clock recovered from the lines receive data stream internal interface transmits data using its internal clock. You must specify one of the following for internal clocking:
t1 fdl
Description: Syntax: Specifies the FDL standard used by a specific T1 channel on the CT3 interface. The no version restores the default, none. t1 channel fdl { ansi | att | all | none } no t1 channel fdl [ ansi | att | all ] Mode(s): channel T1 channel number in the range 128 ansi specifies ANSI T1.403 Standard for extended superframe FDL exchange support att specifies AT&T Technical Reference 54016 for extended superframe FDL exchange support all specifies both the AT&T and ANSI mode for extended superframe FDL exchange support none removes the current FDL mode settings
530
t1 fdl carrier
t1 fdl carrier
Description: Specifies that an interface is used in the carrier environment of a T1 channel on a CT3 interface. The no version restores the default situation, in which an interface does not operate in the carrier environment. [ no ] t1 channel fdl carrier Mode(s): channel T1 channel number in the range 128
Syntax:
t1 fdl string
Description: Defines an FDL message on a T1 channel on a CT3 interface as defined in the ANSI T1.403 specification. Currently, FDL strings can only be configured locally. The no version restores the default value to the specified FDL message or to all FDL messages. t1 channel fdl string { eic eicValue | fic ficValue | lic licValue | unit unitValue | pfi pfiValue | port portValue | generator generatorValue } no t1 channel fdl string { eic | fic | lic | unit | pfi | port | generator } Mode(s): channel T1 channel number in the range 128 eicValue equipment identification code; 110 characters; default is the null value licValue line identification code; 110 characters; default is the null value ficValue frame identification code; 110 characters; default is the null value unitValue unit identification code; 16 characters; default is the null value. pfiValue facility identification code to send in the FDL path message; 138 characters; default is the null value. portValue equipment port number to send in the FDL idle signal message; 138 characters; default is the null value. generatorValue generator number to send in the FDL test signal message; 138 characters; default is the null value.
Syntax:
t1 fdl transmit ERX Edge Routers
531
t1 fdl transmit
Description: Configures the system to send the specified FDL message on a T1 channel on a CT3 interface. The no version stops the system from sending the specified FDL message or all FDL messages. [ no ] t1 channel fdl transmit { path-id | idle-sIgnal | test-signal } no t1 channel fdl transmit Mode(s): channel T1 channel number in the range 128 path-id transmits a path identification message every second idle-sIgnal transmits an idle signal every 10 seconds test-signal transmits a test signal every 10 seconds
Syntax:
t1 framing
Description: Syntax: Specifies the type of framing used by a specific T1 channel on the CT3 interface. The no version uses the default value, esf. t1 channel framing { esf | sf } no t1 channel framing Mode(s): channel T1 channel number in the range 128 esf specifies extended superframe sf specifies superframe
t1 lineCoding
Description: Syntax: Specifies the type of line coding used by a specific T1 channel on the CT3. The no version uses the default value, b8zs. t1 channel lineCoding { ami | b8zs } no t1 channel lineCoding Mode(s): channel T1 channel number in the range 128 ami specifies alternate mark inversion b8zs specifies bipolar with eight-zero substitution
532
t1 loopback
t1 loopback
Description: Configures a loopback test for a T1 line on a CT3 module. The no version deactivates the loopback test; if you specify the remote keyword, the no version sends the 16-bit ESF data link code word or inband pattern to deactivate the loopback at the remote end based on the last activate request sent to the remote end. If you do not specify the remote keyword, the no version clears the local loopback configuration. t1 channel loopback [ local | network { line | payload } | remote { line { fdl { ansi | bellcore } | inband } payload [ fdl ] [ansi ] } ] no t1 channel loopback [ remote ] channel T1 channel number in the range 128 local loops the router output data back toward the router at the T1 framer and sends an alarm indication signal out toward the network. This is the default setting if you specify no optional keywords. network { line | payload } Specify the line keyword to loop the data back toward the network before the T1 framer and automatically set a local loopback at the HDLC controllers. Specify the payload keyword to loop the payload data back toward the network at the T1 framer and automatically set a local loopback at the HDLC controllers. remote line fdl ansi sends a repeating 16-bit ESF data link code word (00001110 11111111) to the remote end requesting that it enter into a network line loopback. Specify the ansi keyword to enable the remote line FDL ANSI bit loopback on the T1 channel, according to the ANSI T1.403 specification. remote line fdl bellcore sends a repeating 16-bit ESF data link code word (00010010 11111111) to the remote end requesting that it enter into a network line loopback. Specify the bellcore keyword to enable the remote line FDL Bellcore bit loopback on the T1 channel, according to the Bellcore TR-TSY-000312 specification. remote line inband sends a repeating 5-bit inband pattern (00001) to the remote end requesting that it enter into a network line loopback remote payload [ fdl ] [ ansi ] sends a repeating 16-bit ESF data link code word (00010100 11111111) to the remote end requesting that it enter into a network payload loopback. Enables the remote payload FDL ANSI bit loopback on the T1 channel. You can optionally specify fdl and ansi, but it is not necessary.
Syntax:
Mode(s):
t1 remote-loopback ERX Edge Routers
533
t1 remote-loopback
Description: Syntax: Enables the acceptance of remote loopback requests. The no version restores the default value, which is to reject remote loopback requests. [ no ] t1 channel remote-loopback Mode(s): channel T1 channel number in the range 128
t1 shutdown
Description: Syntax: Disables a T1 or fractional T1 channel on the CT3. The no version restarts a disabled interface. [ no ] t1 channel | channel/subchan shutdown Mode(s): channel T1 channel number in the range 128 subchan FT1 subchannel on a T1 interface in the range 124
t1 snmp trap link-status

Description: Enables processing of SNMP link status information on a T1 or fractional T1 channel on the CT3. The no version disables the processing of SNMP link status information. [ no ] t1 channel | channel/subchan snmp trap link-status Mode(s): channel T1 channel number in the range 128 subchan specifies the FT1 subchannel on a T1 interface in the range 124
Syntax:
534
t1 timeslots
t1 timeslots
Description: Syntax: Configures the timeslots and data rate used on each T1 channel on the CT3 interface. The no version deletes the fractional T1 circuit. t1 channel/subchan timeslots range [ speed { 56 | 64 } ] no t1 subchan channel T1 channel number in the range 128 subchan subchannel specifies the logical subchannel on a T1 in the range 124 range specifies the timeslot assigned to the T1 channel in the range 124. A dash represents a range of timeslots, and a comma separates timeslots. For example, 1-10, 15-18 assigns timeslots 1 through 10 and 15 through 18. speed specifies the data rate for the T1 channel. Values are 56 Kbps or 64 Kbps. The default is 64 Kbps.
Mode(s):
t1 yellow
Description: Generates or detects a yellow alarm for a T1 channel on the CT3 interface. The no version restores the default value, to not generate or to not detect a yellow alarm. [ no ] t1 channel yellow { generate | detect } Mode(s): channel T1 channel number in the range 128
Syntax:
table-map ERX Edge Routers
535
table-map
Description: Applies the specified route map to all BGP, OSPF, or RIP routes about to be added to the IP routing table. The no version halts application of the route map. table-map mapTag no table-map [ mapTag ] mapTag name of the route map; a string of up to 32 alphanumeric characters; for each protocol, the route map can set only the values as specified below: BGP: distance, IP next hop, level, metric, metric type, route type, and tag values OSPF: distance, metric, metric type, route type, and tag values RIP: distance, metric, and tag values Mode(s): Address Family Configuration (BGP), Router Configuration (BGP, OSPF, RIP)
Syntax:
tacacs-server host
Description: Adds or deletes a host to or from the list of TACACS+ servers. If host is not assigned as primary host, the system assigns an existing host as the primary. The no version deletes the host from the list of TACACS+ servers. tacacs-server host ipAddress [ port portNumber ] [ timeout timeoutValue ] [ key keyValueString ] [ primary ] no tacacs-server host ipAddress Mode(s): ipAddress IP address of the TACACS+ server portNumber TACACS+ servers TCP port number in the range 1655535 timeoutValue specifies response timeout interval for the TACACS+ client to server exchange; number in the range 1 to 255; default is 5 keyValueString specifies the secret used in TACACS+ client to server exchange; value string can be up to 100 characters primary assigns the host as the primary host
Syntax:
536
tacacs-server key
tacacs-server key
Description: Sets or resets the authentication and encryption key value shared by all TACACS+ servers that do not have a server-specific key set up by the tacacs-server host command. The no version removes the key value shared by all TACACS+ servers. tacacs-server key keyValueString no tacacs-server key Mode(s): Global Configuration
Syntax:
tacacs-server source-address
Description: Syntax: Sets or resets an alternative source address to be used for TACACS+ server communications. The no version removes the address. tacacs-server source-address ipAddress no tacacs-server source-address Mode(s): ipAddress IP address used as source by the TACACS+ server
tacacs-server timeout
Description: Sets the interval in seconds that the server waits for the TACACS+ server host to reply. This value is shared by those TACACS+ servers that do not have a timeout interval set by the tacacs-server host command. The no version resets the timeout interval shared by all TACACS+ servers. tacacs-server timeout timeoutValue no tacacs-server timeout Mode(s): timeoutValue specifies response timeout interval for the TACACS+ client to server exchange; number in the range 1 to 255; default is 5
Syntax:
tag ERX Edge Routers
537
tag
Description: Syntax: Specifies a user-defined tag. The no version removes the tag from the operation. You can configure a tag for both echo and echoPath types. tag tagValue no tag Mode(s): tagValue name of a group that the operation belongs to: 0255 ASCII characters; the default is to have no tag
RTR Configuration
538
telnet
telnet
Description: Syntax: Enables connections to remote systems via the embedded Telnet client. There is no no version. telnet IpAddress | hostname [ vrf vrfName ] [ ipPortNumber | ipPortType ] [ source-interface interfaceType interfaceSpecifier | noecho | line | debug | verbose ]* ipAddress IP address of the remote system hostname name of the remote system vrfName name of the VRF to which the command applies; string of 132 alphanumeric characters ipPortNumber number in the range 065535 of the port for the connection to the remote system. The default is port number 23, the Telnet port. For more information on port numbers and associated processes, see www.iana.org. ipPortType name of a well-known port, as follows:
bgp Border Gateway Protocol (port 179) chargen character generator (port 19) cmd remote commands (port 514) daytime daytime (port 13) discard discard (port 9) domain Domain Name Service (port 53) echo echo (port 7) exec exec (port 512) finger finger (port 79) ftp File Transfer Protocol (port 21) ftp-data FTP data connections (port 20) gopher gopher (port 70) hostname NIC hostname server (port 101) ident Ident Protocol (port 113) irc Internet Relay Chat (port 194) klogin Kerberos login (port 543) kshell Kerberos shell (port 544)
telnet ERX Edge Routers
539
login Login (port 513) lpd printer service (port 515) nntp Network News Transport Protocol (port 119) pim-auto-rp Protocol Independent Multicast Auto RP (port 496) pop2 Post Office Protocol version 2 (port 109) pop3 Post Office Protocol version 2 (port 110) smtp Simple Mail Transport Protocol (port 25) sunrpc Sun Remote Procedure Call (port 111) syslog Syslog (port 514) tacacs Terminal Access Concentrator Access Control System (port 49) talk Talk (port 517) telnet Telnet (port 23) time Time (port 37) uucp Unix-to-Unix Copy Program (port 540) whois nickname (port 43) www World Wide Web (port 80)
source-interface forces Telnet to use the IP address of the specified interface as the source address for the Telnet connection
interfaceType type of interface to use to obtain the source address for

the Telnet connection; see Interface Types and Specifiers in About This Guide
interfaceSpecifier number of interface to use to obtain the source

address for the Telnet connection; format varies according to interface type; see Interface Types and Specifiers in About This Guide Mode(s): noecho disables local echo of user input line enables line mode debug enables debugging verbose enables verbose mode * indicates that one or more parameters can be repeated multiple times in a list in the command line
Privileged Exec
540
telnet listen
telnet listen
Description: Syntax: Sets the Telnet daemon to listen in a virtual router other than the default. The no version deletes the Telnet daemon. telnet listen [ port portValue ] no telnet listen Mode(s): portValue TCP port on which the Telnet daemon listens; if not specified, the default port 23 is used
terminal data-character-bits
Description: Syntax: Sets the number of data bits available for characters for the current session on the terminal screen. There is no no version. terminal data-character-bits { 7 | 8 } Mode(s): 7 7 data bits per character; this setting supports only characters in the standard ASCII set 8 8 data bits per character; default setting, supports the full set of 8-bit international characters
terminal length
Description: Syntax: Sets the number of lines on the current terminal screen for the current session. There is no no version. terminal length value value number for the screen length in the range 0512. If 0, the router does not pause between screens of output. If not 0, the router pauses between screens.
Mode(s):
terminal speed
Description: Syntax: Sets the speed for the current console session. There is no no version. terminal speed baudRate baudRate terminal speed for the current console session; possible values are: 2400, 4800, 9600, 14400, 19200, 28800, 38400, 57600, 115200
Mode(s):
Privileged Exec
terminal width ERX Edge Routers
541
terminal width
Description: Syntax: Sets the number of character columns on the current terminal screen for the current line for a session. There is no no version. terminal width value Mode(s): value number of characters in the range 30512
test aaa
Description: Verifies RADIUS authentication and accounting and IP address assignment setup. The test uses a username and password and attempts to authenticate a user, get an address assignment, and issue a start accounting request. The test immediately terminates the session by issuing a stop accounting request and an address release. Optionally, a virtual router context may be specified. test aaa { ppp | mlppp } userName [ password ] [ virtual-router vrContext ] [ aaa-profile profileName ] [ zero-stats ] ppp indicates a PPP user mlppp simulates Multilink PPP userName username to test password password to associate with username; password is optionalwhen omitted, the RADIUS access request has no User-Password attribute vrContext virtual router context in which to authenticate the user aaa-profile specifies the AAA profile for the user profileName specifies the AAA profile name zero-stats specifies that accounting statistics should be set to zero for this test
Syntax:
Mode(s):
Privileged Exec
542
test ip bgp neighbor
test ip bgp neighbor

Description: Syntax: Tests BGP policy for routes advertised to or received from peers without implementing the policy. There is no no version. test ip bgp [ addressFamilyIdentifier ] neighbor { ipAddress | peerGroupName } {advertised-routes | routes } [ routeAddr [ routeMask [ route-rd distinguisher ] ] ] [ distribute-list accessListName | filter-list asPathAccessListName [ weight weightValue ] | route-map mapTag | prefix-list prefixListName | prefix-tree prefixTreeName ] [ fields { fieldOptions } ] [ filter ] addressFamilyIdentifier type of address family, which determines the routing table for which information is displayed, in the format [ ipv4 { unicast | multicast } | vpnv4 { all | vrf vrfName } ]
ipv4 unicast the IPv4 unicast routing table; the default option ipv4 multicast the IPv4 multicast routing table vpnv4 all all IPv4 VPN routing and forwarding instances vpn4 vrf vrfname the IPv4 VPN routing and forwarding instance with
the name vrfname ipAddress neighbors IP address peerGroupName name of BGP peer group. If you specify a BGP peer group by using the peer-group-name argument, all the members of the peer group inherit the characteristic configured with this command, unless it is overridden for a specific peer. advertised-routes tests only outgoing advertisements to the specified neighbor routes tests only the incoming advertisements from the specified neighbor routeAddr prefix advertised by BGP routeMask subnet mask associated with prefix; if not specified, a best match on routeAddr is performed distinguisher unique two-part identifier of the format number1:number2 where:
number1 AS number or an IP address number2 unique integer; 32 bits if number1 is an AS number; 16 bits if
number1 is an IP address If not specified, considers all destinations with the same routeAddress and routeMask. accessListName name of an access list used as a distribute list to filter routes by prefix; string of up to 32 alphanumeric characters
test ip bgp neighbor ERX Edge Routers
543
asPathAccessListName name of a single AS path access list used to filter routes by AS path; string of up to 32 characters weightValue weight to set for the filtered incoming route; an integer in the range 04294967295 mapTag name of a route map; a string of up to 32 alphanumeric characters prefixListName name of a BGP prefix list used to filter routes by prefix prefixTreeName name of a BGP prefix tree used to filter routes by prefix fields displays only the specified fields fieldOptions field(s) to be displayed, in the format all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities | extended-communities | imported | intro | label | loc-pref | med | next-hop | next-hop-cost | origin | originator-id | peer | peer-type | rd | safi | unknown-types | weight ]*

afi address family identifier aggregator AS number and IP address of aggregator as-path AS path through which this route bas been advertised atomic-aggregate whether the atomic aggregate attribute is present best whether this is the best route for the prefix clusters list of cluster IDs through which the route has been advertised communities community number associated with the route extended-communities extended community imported whether the route was imported intro introductory information about the state of various BGP attributes;
label MPLS label loc-pref local preference for the route med multiexit discriminator for the route next-hop IP address of the next router that is used when forwarding a

origin origin of the route originator-id router ID of the router in the local AS that originated the
route
peer IP address of BGP peer from which route was learned
544
threshold
peer-type type of BGP peer: internal, external, or confederation rd route distinguisher safi subsequent address family identifier unknown-types attribute codes for unknown path attributes weight weight of the route * indicates that one or more parameters can be repeated multiple
times in a list in the command line Mode(s): filter see Filtering show Commands in About This Guide
threshold
Description: Syntax: Sets the threshold values for bit error rates used in APS/MSP alarms. The no version restores the default value, 6, for the specified alarm. threshold { sd-ber | sf-ber } rate no threshold { sd-ber | sf-ber } sd-ber bit error rate that specifies signal degradation sf-ber bit error rate that specifies signal failure rate integer in the range 39; a value of n corresponds to a rate of 10-n (10e-n) errors per second Mode(s): Controller Configuration
timeout ERX Edge Routers
545
timeout
Description: When used from RADIUS Configuration mode, specifies the interval, in seconds, before the system retransmits a RADIUS packet to an authentication or accounting server. The no version uses the default. When used from RTR Configuration mode, specifies the timeout for a Response Time Reporter operation. The no version returns the operation to the default value. You can apply this parameter only to echo entries. RADIUS: timeout waitTime no timeout waitTime specifies the number of seconds in the range 310. The default is 3.
Syntax:
RTR: timeout timeoutValue no timeout timeoutValue number in milliseconds that the operation waits for a response; if the value is set to 0 or is larger than frequency, it will be ignored; the default is 5000 milliseconds
Mode(s):
Radius Configuration, RTR Configuration
timeout login response

Description: Sets a time limit during which users must provide a password when they log into the console or a vty line. Specifying a value of 0 indicates that there is no time limit during which users must enter a password. The no version restores the default value, 30 seconds. timeout login response seconds no timeout login response Mode(s): seconds length of the timeout in the range 0300 seconds
Syntax:
Line Configuration
546
timers
timers
Description: Syntax: Configures RIP timers. The no version restores the default values. timers update invalid holddown flush no timers update interval in seconds at which routing updates are sent. The default is 30. invalid interval in seconds after which a route is declared invalid (null). The default is 180. holddown interval in seconds during which routing information regarding better paths is disregarded by the system. The default is 120. flush interval in seconds that must pass before a route is removed from the routing table. Set this value greater than the invalid value. The default is 300.
Mode(s):
timers bgp
Description: Syntax: Sets keepalive and hold-time timers for all neighbors. The no version restores the default values. timers bgp keepaliveTime holdTime no timers bgp [ keepaliveTime [ holdTime ] ] keepaliveTime interval in seconds between keepalive messages; range is 065535 seconds; default is 30 seconds; a value of zero prevents BGP from sending keepalive messages holdTime period in seconds that BGP waits for keepalive messages before declaring the neighbor to be unavailable; range is 065535 seconds; default is 90 seconds; a value of zero informs BGP not to expect any hold-time messages
Mode(s):
timers spf
Description: Configures the delay time between when OSPF receives a topology change and when it starts an SPF calculation and the hold time between two consecutive SPF calculations. The no version restores the default value. [ no ] timers spf holdTime Mode(s): holdTime number in the range 15 seconds; default is 3seconds; the hold time between consecutive SPF calculations
Syntax:
time-to-live ERX Edge Routers
547
time-to-live
Description: Specifies a hop count by setting the value of the time-to-live field used by packets sent to a RIP remote neighbor. The no version restores the default value. time-to-live ttlValue no time-to-live Mode(s): ttlValue number in the range 116; the default value is 16
Syntax:
timing disable-auto-upgrade
Description: Syntax: Mode(s): Disables the auto-upgrade feature of the system timing. The no version enables the auto-upgrade feature. [ no ] timing disable-auto-upgrade Global Configuration
timing select
Description: Syntax: Configures the preferred timing selector. There is no no version. timing select selector selector timing selector
primary highest-priority preferred selection secondary middle-priority preferred selection tertiary lowest-priority preferred selection
548
timing source
timing source
Description: Configures the systems timing sources. Only one of these timing sources can be an external source received via an interface on an I/O module other than the SRP I/O module; the other two must be either internal sources or external sources received via the SRP I/O modules. There is no no version. timing source selector { internal | line lineType | { sonet | ds3 | ds1 | e1 | e3 } interfaceValue } selector priority of the timing source; in descending order primary, secondary, or tertiary internal internal SC oscillator line external timing input on SRP module lineType one of the following timing sources:
Syntax:
e1:a E1 clock, port A on SRP module e1:b E1 clock, port B on SRP module t1:a T1 clock, port A on SRP module t1:b T1 clock, port B on SRP module
Mode(s): sonet specifies a SONET interface ds3 specifies a DS3 interface ds1 specifies a DS1 interface e1 specifies an E1 interface e3 specifies an E3 interface interfaceValue interface specifier, in the form slot/port[:subPort]
tos
Description: Syntax: Defines a type of service byte in the RTR operations IP header. The no version returns the operation to the default value. tos tosValue no tos Mode(s): tosValue ToS byte in the IP header: 0255; the default is 0 for both RTR types.
RTR Configuration
traceroute ERX Edge Routers
549
traceroute
Description: Syntax: Discovers the paths that router packets follow when travelling to their destinations. There is no no version. traceroute [ vrf vrfName ] destination [ ttl maxTTLCount ] [ timeout timeOutVal ] [ data-size sizeValue ] [ source { interface interfaceType interfaceSpecifier | address sourceAddress } ] [ extended [ tos tosVal ] [ set-dont-fragment-bit ] [ interface iType iNumber ] vrfName name of the VRF context destination IP address or domain name of the trace maxTTLCount maximum number of hops of the trace in the range 1255; default is 32 timeOutVal time in seconds to wait for trace responses in the range 120; default is 2 sizeValue number of bytes comprising the IP packet and reflected in the IP header in the range 064000 source interface specifies an interface as the source for the transmitted packets

About This Guide

interface type; see Interface Types and Specifiers in About This Guide source address specifies an IP address as the source for the transmitted packets
sourceAddress IP address or domain name used as the source

address Mode(s): extended specifies extended IP header attributes tosVal value of the ToS byte set-dont-fragment-bit specifies the dont-fragment bit iType interface type iNumber interface location
550
traffic-class
traffic-class
Description: In Policy Configuration mode, specifies a traffic class in a policy list for policy management. The no version removes a traffic class from a policy list. The suspend version temporarily suspends the policy rule. In Global Configuration mode, configures a traffic class in the ERX system. In Traffic Class Group Configuration mode, specifies a traffic class that belongs to the traffic class group. The no version deletes the traffic class. In Policy Configuration mode: [ no ] [ suspend ] traffic-class trafficClassName [ classifier-group claclName ] [ precedence precValue ] trafficClassName name of the traffic class claclName name of the classifier group precValue precedence value in the range 032768
Syntax:
In Global Configuration and Traffic Class Group Configuration modes: [ no ] traffic-class trafficClassName Mode(s): trafficClassName name of the traffic class
Global Configuration, Policy Configuration, Traffic Class Group Configuration
traffic-class-group
Description: Syntax: Configures a traffic class group. The no version deletes the selected traffic-class group. [ no ] traffic-class-group trafficClassGroupName Mode(s): trafficClassGroupName name of the traffic class group
translate
Description: Syntax: Maps the original domain name to the mapped domain name for domain map lookup. The no version negates the command. translate domainName mappedDomainName no translate domainName Mode(s): domainName name of the domain; maximum of 64 characters mappedDomainName name of the mapped domain name; maximum of 64 characters
transmit-delay ERX Edge Routers
551
transmit-delay
Description: Syntax: Sets the estimated time it takes to transmit a link state update packet on the OSPF remote-neighbor interface. The no version restores the default value. transmit-delay transmDelay no transmit-delay Mode(s): transmDelay the link state transmit delay, a number in the range 03600 seconds; default value is 1 second
triggered-update-disable
Description: Syntax: Mode(s): Specifies that RIP does not send triggered routing updates. The no version restores the default condition, wherein RIP does send triggered updates. [ no ] triggered-update-disable Router Configuration
ttl
Description: Specifies a hop count by setting the value of the time-to-live field used by packets sent to an OSPF remote neighbor. The no version restores the default value. ttl ttlValue no ttl Mode(s): ttlValue number in the range 1255; the default value is 1
Syntax:
tunnel
Description: Specifies an L2TP or L2F tunnel and changes the mode to Domain Map Tunnel Configuration. In Domain Map Tunnel Configuration mode, you can set the attributes of the tunnel. The no version deletes the L2TP or L2F tunnel configuration from the system. [ no ] tunnel tag Mode(s): tag tunnel tag value in the range 131
Syntax:
552
tunnel checksum
tunnel checksum
Description: Syntax: Mode(s): Enables end-to-end checksum computation for GRE tunnels. The no version disables the checksum option. [ no ] tunnel checksum Interface Configuration
tunnel destination
Description: For DVMRP or GRE, configures the tunnel endpoint for static tunnels.The no version deletes the endpoint. For IPSec, configures the remote tunnel endpoint. For MPLS in Interface Configuration mode, configures the tunnel endpoint for static MPLS tunnels.The no version deletes the endpoint. For MPLS in Tunnel Profile Configuration mode, configures the source of tunnel endpoints (destinations) within a tunnel profile. You can specify that the endpoints are to be learned from BGP, IS-IS, or OSPF, or you can provide one or more IP addresses as the endpoint(s). If you specify the destination address, it must be the address of the MPLS interface or the router ID of the destination router. The no version deletes the endpoints. For DVMRP and GRE: tunnel destination ipAddress | hostname no tunnel destination ipAddress IP address of the interface on the remote system hostname name of the host that will serve as the tunnel endpoint
Syntax:
For IPSec: tunnel destination ipAddress no tunnel destination ipAddress IP address of the interface on the remote system or the router ID of the destination router that serves as the tunnel endpoint
tunnel ip profile ERX Edge Routers
553
For MPLS in Interface Configuration mode: tunnel destination ipAddress no tunnel destination For MPLS in Tunnel Profile Configuration mode: [ no ] tunnel destination { ipAddress | ipAddress [ ipAddress ]* | { isis-level-2 | ospf-bdr } [ { access-list | prefix-list } listName ] } isis-level-2 specifies IS-IS level-2 routers as acceptable destinations ospf-bdr specifies OSPF border routers as acceptable destinations listName name of access list or prefix list that contains the IP addresses that are acceptable as tunnel endpoints ipAddress IP address of the interface on the remote system or the router ID of the destination router that serves as the tunnel endpoint; for a tunnel profile, you can list multiple addresses * indicates that one or more parameters can be repeated multiple times in a list in the command line
Mode(s):
Interface Configuration, Tunnel Profile Configuration
tunnel ip profile
Description: Syntax: Assigns an IP profile to the MPLS tunnel. The no mpls tunnels profile version removes the IP profile from the tunnel. tunnel ip profile ipProfileId no tunnel ip profile Mode(s): ipProfileId name of an IP profile
Tunnel Profile Configuration
554
tunnel lifetime
tunnel lifetime
Description: Sets the lifetime of IPSec SAs running on this tunnel. You can specify the lifetime in seconds and/or volume of traffic. Before either limit is reached, the SA is renegotiated, ensuring that the tunnel does not go down before the renegotiation is finished. The no version sets the lifetime to the default lifetime defined by the ipsec lifetime command. tunnel lifetime { seconds seconds kilobytes kilobytes | seconds seconds | kilobytes kilobytes } no tunnel lifetime { seconds | kilobytes } seconds number of seconds security SAs on this tunnel live before expiring; the range is 72004284967295 kilobytes volume of traffic in kilobytes that can pass between the tunnel endpoints using a given SA before the SA expires; the range is 1024004294967295
Syntax:
Mode(s):
tunnel local-identity
Description: Syntax: Specifies the local identity of the IPSec tunnel. The no version removes the local endpoint and sets the default identity, which is subnet 0.0.0.0 0.0.0.0. tunnel local-identity { address ipAddress | subnet ipAddress subnetMask | range ipAddressLow ipAddressHigh } no tunnel local-identity Mode(s): address specifies an IP address as the local identity subnet specifies a subnet as the local identity range specifies a range of IP addresses as the local identity
tunnel mpls affinity ERX Edge Routers
555
tunnel mpls affinity

Description: Syntax: Assigns an affinity to the tunnel. The no version removes the affinity from the tunnel. tunnel mpls [ traffic-eng ] affinity affinity [ mask mask ] no tunnel mpls [ traffic-eng ] affinity traffic-eng optional keyword for compatibility with non-ERX implementations affinity attributes that must be configured on the interface in order to be considered by the tunnel; ranges from 0x0 to 0xFFFFFFFF; the default is 0x0 mask mask to identify attributes to be checked; a 1 signifies that the attribute value must match, a 0 signifies that the attribute value does not matter; ranges from 0x0 to 0xFFFFFFFF; the default is 0x0000FFFF
Mode(s):
tunnel mpls autoroute announce

Description: Configures the LSP tunnel to register its endpoint (the egress router) with the configured routing protocol. If you do not specify a routing protocol, the default is IS-IS and OSPF. The no version disables endpoint announcements. [ no ] tunnel mpls [ traffic-eng ] autoroute announce [ ospf | isis | bgp ] Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations ospf endpoint is announced to OSPF isis endpoint is announced to IS-IS bgp endpoint is announced to BGP
Syntax:
556
tunnel mpls autoroute metric
tunnel mpls autoroute metric

Description: Specifies the tunnel metric. The value determines tunnel preference when there is more than one tunnel or native IP path to a tunnel endpoint. A lower value is preferred to a higher value. When you set up multiple tunnels, if the primary tunnel goes down, the existing tunnel with the lowest metric is used immediately. If you specify an absolute value from 165535, this value overrides the metric for the path provided by the IGP. If you specify a relative value from -10 to +10, this value is subtracted from (-) or added to (+) the metric for the path provided by the IGP. The no version restores the default value of relative 0, meaning that the tunnel metric is the IGP value. tunnel mpls [ traffic-eng ] autoroute metric {absolute | relative} metricValue no tunnel mpls [ traffic-eng ] autoroute metric Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations absolute metric is an absolute value relative metric is a signed relative value metricValue preference value for a path
Syntax:
tunnel mpls bandwidth

Description: Syntax: Specifies the bandwidth required for the tunnel. The no version removes the bandwidth constraint from the tunnel. tunnel mpls [ traffic-eng ] bandwidth bandwidth no tunnel mpls [ traffic-eng ] bandwidth Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations bandwidth amount of bandwidth required for the tunnel in kilobits per second, a value ranging from 04294967295; the default value is 0
tunnel mpls base-tunnel

Description: Syntax: Stacks the tunnel on the specified MPLS base tunnel. The no version removes the tunnel from on top of the base tunnel. tunnel mpls base-tunnel baseName no tunnel mpls base-tunnel Mode(s): baseName name of the tunnel; up to 20 alphanumeric characters
tunnel mpls description ERX Edge Routers
557
tunnel mpls description

Description: Syntax: Associates a description with the MPLS tunnel. The no version deletes the description. tunnel mpls description textString no tunnel mpls description Mode(s): textString description or name of the tunnel; up to 40 alphanumeric characters
tunnel mpls dynamic target

Description: Specifies that the tunnel is a targeted tunnel for MPLS to stack above a base LSP that is dynamically created by topology-driven LDP. The no version stops the tunnel from being dynamically stacked over a base LSP. [ no ] tunnel mpls dynamic target Interface Configuration, Tunnel Profile Configuration
Syntax: Mode(s):
tunnel mpls ip propagate-ttl

Description: Controls the value for the TTL field in the MPLS header when a label is assigned to an IP packet. Enabled by default, this command sets the TTL to the TTL value from the IP packet header. Optionally controls how network structure is hidden from the traceroute command; by default the structure is revealed to forwarded and local packets. The no version sets the value to 255. The default version reverts to the settings configured at the global level; if none, reverts to the global default (causing the TTL field to be copied from the IP packet header, enabling the traceroute command to show all the hops in the network, and propagating the label TTL into the IP header at the tunnel egress). tunnel mpls ip propagate-ttl [ forwarded | local ] { no | default } tunnel mpls ip propagate-ttl [ forwarded | local ] Mode(s): forwarded controls whether the network structure is revealed to or hidden from traceroute for forwarded packets local controls whether the network structure is revealed to or hidden from traceroute for local packets
Syntax:
558
tunnel mpls label-dist
tunnel mpls label-dist

Description: Syntax: Specifies the label distribution protocol. The no version removes the label distribution protocol. tunnel mpls [ traffic-eng ] label-dist { cr-ldp | rsvp-te } no tunnel mpls [ traffic-eng ] label-dist Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations cr-ldp sets the label distribution protocol to CR-LDP rsvp-te sets the label distribution protocol to RSVP-TE
tunnel mpls no-route retries

Description: Specifies for a particular tunnel the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. tunnel mpls lsp no-route retries retryNum no tunnel mpls lsp no-route retries Mode(s): retryNum number of retry attempts from 065535
Syntax:
tunnel mpls no-route retry-time

Description: Specifies for a particular tunnel the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure due to no available route. The no version restores the default value of 5 seconds. tunnel mpls lsp no-route retry-time retryTime no tunnel mpls lsp no-route retry-time Mode(s): retryTime interval from 160
Syntax:
tunnel mpls path-option ERX Edge Routers
559
tunnel mpls path-option

Description: Specifies the path options for a tunnel. You can configure one or more path optionseach identified by a unique numberfor a given tunnel. The path option number expresses the preference for that option; lower numbers have a higher preference, with 1 having the highest preference. The no version deletes the path options. tunnel mpls [ traffic-eng ] path-option number { dynamic | explicit { name pathName | identifier idNumber } } [ hop-by-hop | ospf | isis ] [ lockdown ] no tunnel mpls [ traffic-eng ] path-option number traffic-eng optional keyword for compatibility with non-ERX implementations number identifier for a set of path options dynamic the path is dynamically calculated explicit an explicit path is used
Syntax:
pathName name of the explicit path, a string of up to 20 characters idNumber number identifying the explicit path, ranging from 165535
Mode(s): hop-by-hop specifies that hop-by-hop routing is used for this path option ospf specifies that OSPF routing is used for this path option isis specifies that IS-IS routing is used for this path option lockdown specifies that optimization is not done for this path option
560
tunnel mpls priority
tunnel mpls priority

Description: Assigns a setup priority and optionally a hold priority to the tunnel. The priority can range from 0 (the highest) to 7 (the lowest). The hold priority, if set, must be equal to or better (lower numerically) than the setup priority. In the event of insufficient resources when a tunnel is being established, its setup priority is evaluated against the hold priorities of existing tunnels. Tunnels with lower hold priorities (higher values) are preempted and torn down to free their resources for the new tunnel. The no version removes the priority from the tunnel. tunnel mpls [ traffic-eng ] priority setupPriority [ holdPriority ] no tunnel mpls [ traffic-eng ] priority Mode(s): traffic-eng optional keyword for compatibility with non-ERX implementations setupPriority priority for the tunnel as it is being established; the default value is 4 holdPriority priority for the tunnel after it has been established; the default value is equal to the configured value of the setup priority
Syntax:
tunnel mpls lsp retries

Description: Specifies for a particular tunnel the number of attempts that will be made to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value, 0, which means the attempts will be made until successful. tunnel mpls retries retryNum no tunnel mpls retries Mode(s): retryNum number of retry attempts from 065535
Syntax:
tunnel mpls lsp retry-time

Description: Specifies for a particular tunnel the interval in seconds between attempts to set up an LSP for CR-LDP and RSVP-TE after a failure other than one due to no available route. The no version restores the default value of 5 seconds. tunnel mpls [ no-route ] retry-time retryTime no tunnel mpls retry-time Mode(s): retryTime interval from 160
Syntax:
tunnel mpls vpn-id ERX Edge Routers
561
tunnel mpls vpn-id

Description: Associates a tunnel with a VPN. Specify the same values for the VPN ID that you specified when you associated a VR with the VPN ID. The no version removes the VPN ID from the virtual router. [ no ] tunnel mpls vpn-id oui ouiNumber index ipAddress Mode(s): ouiNumber identifies the OUI portion of the VPN ID, ranges from 016777215 ipAddress IP address that identifies the index portion of the VPN ID
Syntax:
tunnel mtu
Description: Configures the maximum transmission unit size for the particular tunnel. The no version restores the default value: 1024 for DVMRP and GRE tunnels and 1440 for IPSec tunnels. tunnel mtu mtuSize no tunnel mtu mtuSize packet size allowed for transmission through the tunnel in the range: 10240240 bytes for DVMRP and GRE tunnels and 16010240 for IPSec tunnels
Syntax:
Mode(s):
tunnel password
Description: Syntax: Configures a password for the L2TP tunnel. The no version removes the password. tunnel password tunnelPassword no tunnel password Mode(s): tunnelPassword password used for challenge response to the tunnel peer. In the domain map, it is used only by the LAC.
562
tunnel peer-identity
tunnel peer-identity
Description: Syntax: Specifies the peer identity of the IPSec tunnel. The no version removes the peer endpoint. tunnel peer-identity { address ipAddress | subnet ipAddress subnetMask | range ipAddressLow ipAddressHigh } no tunnel peer-identity Mode(s): address specifies an IP address as the peer identity subnet specifies a subnet as the peer identity range specifies a range of IP addresses as the peer identity
tunnel pfs group

Description: Configures perfect forward secrecy for the IPSec tunnel by assigning a Diffie-Hellman prime modulus group. The no version removes PFS from this tunnel. tunnel pfs group { 1 | 2 | 5 } no tunnel pfs group Mode(s): 1 768-bit Diffie-Hellman prime modulus group 2 1024-bit Diffie-Hellman prime modulus group 5 1536-bit Diffie-Hellman prime modulus group
Syntax:
tunnel sequence-datagrams
Description: Syntax: Mode(s): Enables the use of GRE sequence numbers. The no version disables the use of GRE sequence numbers. [ no ] tunnel sequence-datagrams Global Configuration
tunnel session-key-inbound ERX Edge Routers
563
tunnel session-key-inbound
Description: Syntax: Specifies the encryption and authentication algorithm set and session keys for manual inbound SAs. The no version removes the keys. tunnel session-key-inbound inSaAlgorithms { encryptKey authKey | authKey } no tunnel session-key-inbound Mode(s): inSAalgorithms algorithms to use for manual inbound SAs; use the online Help to see a list of available algorithms encryptKey encryption key; up to 48 characters authKey authentication key; up to 48 characters
tunnel session-key-outbound
Description: Syntax: Specifies the encryption and authentication algorithm set, SPI, and session keys for manual outbound SAs. The no version removes the keys. tunnel session-key-outbound outSAalgorithms spi { encryptKey authKey | encryptKey | authKey } no tunnel session-key-outbound Mode(s): outSAalgorithms algorithms to use for manual outbound SAs; use the online Help to see a list of available algorithms spi number that uniquely identifies an SA; the range is 256 to 4294967295 (0xFFFFFFFF) encryptKey encryption key; up to 48 characters authKey authentication key; up to 48 characters
tunnel signaling
Description: Syntax: Sets the signaling protocol used to negotiate security parameters and keys. The no version restores the default, isakmp. tunnel signaling { isakmp | manual } no tunnel signaling Mode(s): isakmp uses ISAKMP/IKE to negotiate parameters manual specifies that security parameters are configured manually
564
tunnel source
tunnel source
Description: Syntax: Configures the source for a DVMRP, GRE, or IPSec tunnel. The no version deletes the tunnel source. For DVMRP and GRE tunnels: tunnel source { ipAddress | interfaceType interfaceSpecifier } no tunnel source For IPSec tunnels: tunnel source ipAddress no tunnel source Mode(s): ipAddress IP address of an existing interface that will serve as the tunnels source interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
tunnel transform-set
Description: Specifies a transform set that ISAKMP uses during SA negotiations on this tunnel. Transform sets used for manually configured tunnels can have only one transform. The no version removes the transform set from a tunnel. [ no ] tunnel transform-set transformSetName Mode(s): transformSetName name of the transform set
Syntax:
type ERX Edge Routers
565
type
Description: For RTR Configuration, configures an RTR operation. The no version removes the configured type from the operation and resets all configuration for an RTR index. Note: You must configure the operations type before you can configure any other characteristics of the operation. For Domain Map Tunnel Configuration, specifies the type of tunnel as either L2TP or L2F. The no version restores the default value, L2TP. To configure an RTR operation: [ no ] type rtrType protocol ipIcmpEcho destination [ source-ipaddr srcAddr | source ifType ifValue ] rtrType one of the following types of operation:
Syntax:
echo performs end-to-end operation only pathEcho discovers a path to the destination and echoes each device
on the path destination IP address or an IP hostname or domain name srcAddr source IP address ifType sources type of interface (for example, FastEthernet) ifValue interface identifier; for example, FastEthernet 0/0
To specify the type of tunnel: Syntax: type { l2tp | l2f } no type Mode(s): RTR Configuration, Domain Map Tunnel Configuration
udp-port
Description: Specifies the UDP port on the system where the RADIUS authentication or accounting servers reside. The system uses this port to communicate with the RADIUS servers. The no version restores the default value. udp-port port no udp-port port one of the following port numbers:
Syntax:
1812 (default for RADIUS authentication servers) 1813 (default for RADIUS accounting servers)
Mode(s): Radius Configuration
566
undebug ip bgp
undebug ip bgp
Description: Syntax: Turns off the display of information previously enabled with the debug ip bgp command. There is no no version. undebug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:

Mode(s): import displays BGP import processing events; appears only if you specify the vpnv4 keyword routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output
Privileged Exec
undebug ip mbgp ERX Edge Routers
567
undebug ip mbgp
Description: Syntax: Turns off the display of information previously enabled with the debug ip mbgp command. There is no no version. undebug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ] [ import ] [ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ] [ route-map mapName ] in displays information for inbound events out displays information for outbound events peerAddress IP address of BGP peer for which information is displayed peerAddressMask network mask of BGP peer for which information is displayed bgpLog BGP log of interest; one of the following options:

Mode(s): import displays BGP import processing events; appears only if you specify the vpnv4 keyword routerName name of the virtual router that owns the BGP router for which information is being displayed filteringRouterName name of the virtual router that owns the access class and route map parameters accessClassName name of an access list to filter output mapName name of a route map to filter output
Privileged Exec
undebug ip pim
Description: Syntax: Turns off the display of information previously enabled with the debug ip pim command. There is no no version. undebug ip pim pimLog Mode(s): pimLog PIM log of interest
Privileged Exec
568
undebug ip ospf
undebug ip ospf
Description: Turns off the display of information for the selected variable. See debug ip ospf command for a complete list of the ospfLog variables. There is no no version. undebug ip ospf ospfLog ospfLog OSPF log of interest; one of the following options:
Syntax:
adj OSPF adjacency events elect-dr OSPF designated router election events OSPF general events lsa OSPF link state advertisements events neighbor OSPF neighbor state machine packets-rcvd OSPF packets received packets-sent OSPF packets sent route OSPF route events spf all OSPF shortest path first calculation events spf-ext OSPF shortest path first external route calculation events spf-inter OSPF shortest path first interarea route calculation events spf-intra OSPF shortest path first intra-area route calculation events
undebug ip rip
Description: Syntax: Turns off the display of information previously enabled with the debug ip rip command. There is no no version. undebug ip rip ripLog ripLog RIP log of interest; one of the following options:
events general RIP events, such as removing RIP from an interface or

creating the RIP process
route events associated with two RIP routers exchanging routes

undebug isis ERX Edge Routers
569
undebug isis
Description: Turns off the display of information for the selected variable. See the debug isis command for a complete list of the IS-IS log variables. There is no no version. undebug isis isisLog isisLog IS-IS log of interest; one of the following options:
Syntax:
adj-packets IS-IS adjacency-related packets, such as hello packets

sent and IS-IS received adjacencies going up and down
mpls traffic-eng advertisements MPLS traffic-engineering agent

advertisements
mpls traffic-eng agents MPLS traffic-engineering agents snp-packets IS-IS CSNPs/PSNPs spf-events shortest path first events spf-statistics SPF timing and statistic data spf-triggers SPF triggering events update-packets update-related packets
unframed
Description: Syntax: Mode(s): Configures an unchannelized line for a CE1 interface.The no version switches the interface to the default crc4 framing mode and deletes channel group 1. [ no ] unframed Controller Configuration
570
update-source
update-source
Description: Specifies the loopback interface whose local address is used as the source address for the OSPF, PIM, or RIP connection to a remote neighbor. The no version deletes the source address from the connection. For OSPF: [ no ] update-source loopback interfaceSpecifier interfaceSpecifier integer in the range 14294967293 identifying the loopback interface
Syntax:
For PIM [ no ] update-source interfaceType interfaceSpecifier interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
For RIP: [ no ] update-source interfaceType interfaceSpecifier Mode(s): interfaceType interface type; see Interface Types and Specifiers in About This Guide interfaceSpecifier particular interface; format varies according to interface type; see Interface Types and Specifiers in About This Guide
version
Description: Specifies the global RIP version. The no version reverts to the default value, RIP version 1. Use the ip rip receive and ip rip send version commands to specify the RIP version for a specific interface. version versionNumber no version Mode(s): versionNumber RIP version number
Syntax:
virtual-router ERX Edge Routers
571
virtual-router
Description: When used from Domain Map Configuration mode, maps a virtual router to a user domain name. The no version deletes the virtual-router parameter, and the system defaults to the default virtual router. When used from Privileged Exec or Global Configuration mode, creates a virtual router or accesses the context of a previously created virtual router or a VRF. The no version deletes the virtual router, and the system defaults to the default virtual router. Issuing a no version that specifies an existing VRF only displays the error message: Cannot delete a VRF with this command; you must use the no ip vrf command to remove a VRF. Mapping to a user domain name: virtual-router vrName no virtual-router [ vrName ] Creating a virtual router or accessing a virtual router or VRF: virtual-router vrName | :vrfName | vrName:vrfName no virtual-router vrName Mode(s): vrName name of the virtual router; a string of 115 alphanumeric characters :vrfName specifies a VRF in the current VR context; a string of 132 alphanumeric characters vrName:vrfName specifies a VRF in the context of a VR other than the current VR
Syntax:
Domain Map Configuration, Privileged Exec, Global Configuration
vlan description
Description: Syntax: Assigns an alias or description to a VLAN subinterface. vlan description aliasName no vlan description Mode(s): aliasName the alias or description; up to 64 characters
572
vlan id
vlan id
Description: Syntax: Specifies a VLAN ID. There is no no version. vlan id IdValue [ untagged ] Mode(s): idValue number in the range of 04095, which is unique within the Ethernet interface untagged specifies that frames be sent untagged; only valid for VLAN ID 0
weight
Description: Syntax: Sets the weighted round-robin weight of the scheduler node or queue. The no version sets the weight to the default value. weight weightValue no weight Mode(s): weightValue number in the range 163; default is 8
Scheduler Profile Configuration
write memory
Description: Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an exact alias of the copy running-configuration startup-configuration command. Available if the system is in either Automatic Commit mode or Manual Commit mode. If issued while in Automatic Commit mode, the CLI notifies you that the command is not necessary, but allows you to proceed. There is no no version. write memory Privileged Exec
Syntax: Mode(s):
yellow
Description: Syntax: Mode(s): Generates or detects a yellow alarm for a T1 controller. The no version restores the default value, to not generate or to not detect a yellow alarm. [ no ] yellow { generate | detect } Controller Configuration
Index
A
AAA commands aaa accounting acct-stop on-aaa-failure 1 aaa accounting acct-stop on-access-deny 1 aaa accounting duplication 1 aaa accounting interval 2 aaa accounting ppp default 2 aaa authentication enable default 3 aaa authentication login 3 aaa authentication ppp default 4 aaa delimiter 4 aaa dns 5 aaa domain-map 5 aaa duplicate-address-check 5 aaa new-model 6 aaa parse-order 6 aaa subscriber limit per-port 7 aaa subscriber limit per-vr 7 aaa timeout 7 aaa tunnel assignment-id-format 8 aaa tunnel client-name 8 aaa tunnel ignore 8 aaa tunnel password 9 aaa wins 9 baseline aaa 56 login authentication 246 show aaa 392 show aaa accounting 392 show aaa accounting interval 393 show aaa delimiters 393 show aaa domain-map 393 show aaa duplicate-address-check 393 show aaa model 393 show aaa name-servers 394 show aaa statistics 394 show aaa subscriber per-port-limit 394 show aaa subscriber per-vr-limit 394 show aaa timeout 395 show aaa tunnel-parameters 395 test aaa 541 AAA profile commands aaa profile 6 allow 29 deny 122 ppp aaa-profile 342 show aaa profile 394 translate 550 APS/MSP commands aps force 29 aps group 30 aps lockout 30 aps manual 30 aps protect 31 aps revert 31 aps unidirectional 31 aps working 32 show aps 395 threshold 544 ARP commands arp 40 arp timeout 41 clear arp 89 ip proxy-arp 200 show arp 396 ATM commands atm 41 atm aal5 description 41 atm aal5 shutdown 42 atm aal5 snmp trap link-status 42 atm atm1483 description 42 atm atm1483 mtu 42 atm atm1483 shutdown 43 atm atm1483 snmp trap link-status 43 atm auto-configuration 43 atm cac 43 atm clock internal 44 atm description 44 atm esi-address 44 atm framing 45 atm ilmi-enable 45 atm ilmi-keepalive 45 atm lbo 46 atm oam 46 atm oam flush 47 atm oam loopback-location 47 atm pvc 48 atm shutdown 49 atm snmp trap link-status 49
2 Index
atm sonet stm-1 49 atm svc 50 atm uni-version 50 atm vc-per-vp 51 atm vp-tunnel 51 auto-configure 53 baseline interface atm 59 ds3-scramble 130 e3-scramble 133 interface atm 161 ip atm-vc 169 load-interval 238 loopback 247 map-group 251 map-list 251 ping atm interface atm 340 show atm aal5 interface 396 show atm interface 397 show atm map 397 show atm oam 397 show atm ping 398 show atm subinterface 398 show atm vc 399 show atm vc atm 399 show atm vp-tunnel 400 show interfaces 424 show nbma arp 489 shutdown 511
B
BGP commands address-family 19 aggregate-address 28 auto-summary 54 baseline ip bgp 59 bgp advertise-inactive 67 bgp always-compare-med 68 bgp bestpath med confed 68 bgp bestpath missing-as-worst 68 bgp client-to-client reflection 68 bgp cluster-id 69 bgp confederation identifier 69 bgp confederation peers 69 bgp dampening 70 bgp default ipv4-unicast 70 bgp default local-preference 71 bgp enforce-first-as 71 bgp fast-external-fallover 71 bgp log-neighbor-changes 72 bgp maxas-limit 72
bgp redistribute-internal 72 bgp router-id 72 bgp shutdown 73 clear access-list 88 clear ip bgp 90 clear ip bgp dampening 91 clear ip bgp redistribution 91 debug ip bgp 110 debug ip mbgp 112 default-fields peer 117 default-fields route 118 disable-dynamic-redistribute 124 distance bgp 126 exit-address-family 142 ip as-path access-list 168 ip bgp-community new-format 169 ip bgp-confed-as-set new-format 169 ip community-list 170 ip extcommunity-list 178 limits 235 match as-path 253 match community 253 match distance 254 match extcommunity 254 match ip address 255 match ip next-hop 255 match level 256 match metric 256 match metric-type 256 match route-type 257 match tag 258 maximum-paths 258 neighbor activate 283 neighbor advertisement-interval 284 neighbor allowas-in 284 neighbor as-override 285 neighbor capability 286 neighbor default-originate 287 neighbor description 287 neighbor distribute-list 288 neighbor ebgp-multihop 288 neighbor filter-list 289 neighbor local-as 290 neighbor maximum-prefix 290, 291 neighbor maximum-update-size 291 neighbor next-hop-self 292 neighbor password 292 neighbor peer-group 293 neighbor prefix-list 293 neighbor prefix-tree 294
3 ERX Edge Routers
neighbor remote-as 294 neighbor remove-private-as 295 neighbor rib-out disable 295 neighbor route-map 296 neighbor route-reflector-client 296 neighbor send-community 297 neighbor shutdown 297 neighbor soft-reconfiguration inbound 298 neighbor timers 298 neighbor unsuppress-map 299 neighbor update-source 299 neighbor weight 300 network 302 overload shutdown 311 redistribute 363 rib-out disable 371 router bgp 372 set as-path prepend 383 set comm-list delete 383 set community 384 set dampening 385 set extcommunity 387 set ip next-hop 388 set local-preference 389 set metric 389 set metric-type 390 set origin 390 set tag 391 set weight 392 show ip as-path access-list 425 show ip bgp 426 show ip bgp advertised-routes 428 show ip bgp aggregate-address 428 show ip bgp cidr-only 429 show ip bgp community 429 show ip bgp community-list 430 show ip bgp dampened-paths 430 show ip bgp filter-list 430 show ip bgp flap-statistics 431 show ip bgp inconsistent-as 431 show ip bgp neighbors 431 show ip bgp neighbors dampened-routes 432 show ip bgp neighbors paths 432 show ip bgp neighbors received prefix-filter 432 show ip bgp neighbors received-routes 433 show ip bgp neighbors routes 433 show ip bgp network 434 show ip bgp next-hops 434 show ip bgp paths 434
show ip bgp peer-group 435 show ip bgp quote-regexp 436 show ip bgp regexp 438 show ip bgp summary 440 show ip community-list 441 show ip extcommunity-list 446 synchronization 527 table-map 535 test ip bgp neighbor 542 timers bgp 546 undebug ip bgp 566 undebug ip mbgp 567 BGP/MPLS VPN commands address-family 19 bgp default route-target filter 71 clear ip routes vrf 94 domain-id 128 domain-tag 130 exit-address-family 142 export-map 142 import-map 160 ip dynamic-interface-prefix 177 ip mpls forwarding-mode label-switched 190 ip mpls vpn-interface per-label 190 ip share-interface 206 ip share-nexthop 206 ip vrf 211 ip vrf forwarding 212 maximum routes 259 rd 362 route-target 374 show ip protocols 460 show ip vrf 467 booting commands boot backup 73 boot config 74 boot force-backup 74 boot revert-tolerance 75 boot revert-tolerance never 75 boot slot 75 boot subsystem 76 boot system 76 check-disk 85 delete 121 flash-disk duplicate 145 flash-disk initialize 145 flash-disk scan 146 reload 368 reload slot 368 show boot 400
4 Index
show last-reset 478 show reload 501 B-RAS commands aaa accounting acct-stop on-aaa-failure 1 aaa accounting acct-stop on-access-deny 1 aaa accounting duplication 1 aaa accounting interval 2 aaa accounting ppp default 2 aaa authentication ppp default 4 aaa delimiter 4 aaa dns 5 aaa domain-map 5 aaa duplicate-address-check 5 aaa parse-order 6 aaa profile 6 aaa subscriber limit per-port 7 aaa subscriber limit per-vr 7 aaa timeout 7 aaa tunnel assignment-id-format 8 aaa tunnel client-name 8 aaa tunnel ignore 8 aaa tunnel password 9 aaa wins 9 address 11 address-pool-name 22 allow 29 baseline aaa 56 baseline dhcp 57 baseline local pool 63 baseline radius 65 baseline tacacs 66 deadtime 109 deny 122 identification 159 ip address-pool 167 ip dhcp-server 173 ip-hint 179 ip local pool 188 ip local pool snmpTrap 188 ip local pool warning 189 key 223 license b-ras 234 logout subscribers 246 loopback 247 max-sessions 260 medium ipv4 262 override-user 312 password 314 ppp aaa-profile 342 preference 349
profile 350 radius acct-session-id-format 352 radius algorithm 353 radius calling-station-delimiter 353 radius calling-station-format 354 radius dsl-port-type 355 radius ethernet-port-type 355 radius ignore framed-ip-netmask 355 radius include 356 radius nas-identifier 358 radius nas-port-format 358 radius override nas-ip-addr tunnel-client-endpoint 358 radius rollover-on-reject 359 radius server 359 radius trap acct-server-not-responding 359 radius trap auth-server-not-responding 359 radius trap no-acct-server-responding 360 radius trap no-auth-server-responding 360 radius tunnel-accounting 360 radius udp-checksum 360 radius update-source-addr 361 retransmit 370 set dhcp relay 386 show aaa 392 show aaa accounting 392 show aaa accounting interval 393 show aaa delimiters 393 show aaa domain-map 393 show aaa duplicate-address-check 393 show aaa model 393 show aaa name-servers 394 show aaa profile 394 show aaa statistics 394 show aaa subscriber per-port-limit 394 show aaa subscriber per-vr-limit 394 show aaa timeout 395 show aaa tunnel-parameters 395 show cops info 412 show dhcp 413 show ip local pool 451 show license b-ras 479 show radius 497 show radius acct-session-id-format 497 show radius algorithm 497 show radius attributes-ignored 498 show radius attributes-included 498 show radius calling-station-delimiter 498 show radius calling-station-format 498 show radius dsl-port-type 499
5 ERX Edge Routers
show radius ethernet-port-type 499 show radius nas-identifier 499 show radius nas-port-format 499 show radius override 499 show radius rollover-on-reject 500 show radius tunnel-accounting 500 show radius udp-checksum 500 show radius update-source-addr 500 show sscc info 506 show sscc version 506 show statistics tacacs 506 show subscribers 507 show tacacs 508 sscc address 523 sscc enable 523 sscc retryTimer 523 sscc sourceAddress 523 sscc transportRouter 524 strip-domain 524 subscriber 525 tacacs-server host 535 tacacs-server key 536 tacacs-server source-address 536 tacacs-server timeout 536 test aaa 541 timeout 545 translate 550 tunnel 551 type 565 udp-port 565 virtual-router 571 Bridged Ethernet commands ip mac-validate 189 show ip mac-validate 451 bridged IP commands encapsulation bridge1483 135 set dhcp relay 386 show dhcp relay 413
C
CBF commands baseline CBF interface 56 cbf 82 cbf connection 83 cbf shutdown 83 clear CBF interface 89 show cbf connection 403 show cbf interface 403 CE1 commands bert 67
channel-group timeslots 84 controller e1 104 interface serial 165 lineCoding 237 load-interval 238 loopback 247 mru 280 mtu 281 show controllers e1 411 show interfaces serial 424 shutdown 511 unframed 569 Cisco HDLC commands baseline hdlc interface 58 encapsulation hdlc 136 hdlc down-when-looped 155 hdlc keepalive 155 hdlc shutdown 155 show hdlc interface 422 show interfaces serial 424 CLI commands. See user interface commands CLNS commands clns configuration-time 96 clns holding-time 96 clns host 97 show clns 404 show clns interface 405 show clns neighbors 405 show clns protocol 405 show clns traffic 406 cOCx/STMx commands baseline line interface sonet 63 baseline path interface sonet 64 baseline section interface sonet 65 controller sonet 104 interface serial 165 loopback 247 mru 280 mtu 281 path 315 path ds1|e1 316 path ds1|e1 bert 317 path ds1|e1 channel-group shutdown 317 path ds1|e1 channel-group snmp trap link-status 318 path ds1|e1 channel-group timeslots 318 path ds1|e1 clock source 319 path ds1|e1 framing 319 path ds1|e1 loopback 320 path ds1|e1 shutdown 321
6 Index
path ds1|e1 snmp trap link-status 321 path ds1 fdl 321 path ds1 fdl carrier 322 path ds1 fdl string 322 path ds1 fdl transmit 323 path ds1 remote-loopback 323 path ds3 323 path ds3 clock source 324 path ds3 framing 324 path ds3 loopback 325 path ds3 mdl carrier 325 path ds3 mdl string 326 path ds3 mdl transmit 327 path ds3 shutdown 327 path ds3 snmp trap link-status 327 path ds3 t1 328 path ds3 t1 bert 328 path ds3 t1 clock source 329 path ds3 t1 fdl 330 path ds3 t1 fdl carrier 330 path ds3 t1 fdl string 331 path ds3 t1 fdl transmit 332 path ds3 t1 framing 329 path ds3 t1 loopback 333 path ds3 t1 remote-loopback 334 path ds3 t1 shutdown 334 path ds3 t1 snmp trap link-status 334 path ds3 t1 timeslots 335 path e1 unframed 335 path overhead j1 336 path snmp trap link-status 336 sdh 379 show controllers sonet 408 show controllers sonet remote 410 show interfaces 424 shutdown 511 CT1 commands bert 67 cablelength short 82 channel-group shutdown 83 channel-group snmp trap link-status 84 controller t1 105 fdl 143 fdl carrier 143 fdl string 144 fdl transmit 144 interface serial 165 invert data 166 j1 223 lineCoding 237
load-interval 238 loopback 247 mru 280 mtu 281 remote-loopback 369 show controllers t1 411 show controllers t1 remote 411 show interfaces serial 424 shutdown 511 yellow 572 CT3 commands loopback 247 mdl carrier 260 mdl string 261 mdl transmit 261 mru 280 mtu 281 show controllers t3 412 show controllers t3 remote 412 show interfaces serial 424 shutdown 511 snmp trap link-status 513 t1 bert 528 t1 clock source 529 t1 fdl 529 t1 fdl carrier 530 t1 fdl string 530 t1 fdl transmit 531 t1 framing 531 t1 lineCoding 531 t1 loopback 532 t1 remote-loopback 533 t1 shutdown 533 t1 snmp trap link-status 533 t1 timeslots 534 t1 yellow 534 customer support xviii
D
DHCP local server commands ip dhcp-local cable-modem 171 link 238 network 302 reserve 370 server-address 381 show ip dhcp-local cable-modem 441 show ip dhcp-local excluded 442 show ip dhcp-local pool 442 show ip dhcp-local reserved 442
7 ERX Edge Routers
DNS commands ip domain-lookup 174 ip domain-name 174 ip name-server 191 show ip domain-lookup 443 DVMRP commands baseline ip dvmrp 60 clear ip dvmrp routes 91 disable 123 disable-dynamic-redistribute 124 ip dvmrp 174 ip dvmrp accept-filter 175 ip dvmrp announce-filter 175 ip dvmrp auto-summary 175 ip dvmrp disable 176 ip dvmrp metric-offset 176 ip dvmrp routehog-notification 176 ip dvmrp route-limit 176 ip dvmrp summary-address 177 ip dvmrp unicast-routing 177 redistribute 363 router dvmrp 373 show dvmrp tunnel 413 show dvmrp tunnel summary 414 show ip dvmrp 443 show ip dvmrp interface 444 show ip dvmrp mroute 444 show ip dvmrp neighbor 445 show ip dvmrp route 445 show ip dvmrp routeNextHop 446 tunnel destination 552
interface fastEthernet 162 interface gigabitEthernet 163 ip mac-validate 189 mtu 281 show interfaces 424 show ip mac-validate 451 shutdown 511 speed 521 svlan ethertype 527 svlan id 527
F
Fast Ethernet command, load-interval 238 file management commands copy 106 copy running-configuration 106 copy running-configuration startup-configuration 107 copy startup-configuration 107 host 157 rename 370 write memory 572 Frame Relay commands baseline frame-relay interface 57 encapsulation ietf 136 frame-relay class 146 frame-relay description 147 frame-relay fragment 147 frame-relay interface-dlci ietf 147 frame-relay intf-type 148 frame-relay keepalive 148 frame-relay lmi-n391dte 148 frame-relay lmi-n392dce 149 frame-relay lmi-n392dte 149 frame-relay lmi-n393dce 149 frame-relay lmi-n393dte 150 frame-relay lmi-t391dte 150 frame-relay lmi-t392dce 150 frame-relay lmi-type 151 map-class frame-relay 250 show frame-relay interface 415 show frame-relay lip 416 show frame-relay lmi 417 show frame-relay map 417 show frame-relay multilinkInterface 418 show frame-relay pvc 418 show frame-relay subinterface 419 show frame-relay summary 419 shutdown 511
E
E3 commands atm framing 45 clock source 98 controller e3 104 framing 152 load-interval 238 loopback 247 mru 280 mtu 281 show controllers e3 407 shutdown 511 E3-Frame command, interface serial 165 Ethernet commands baseline interface fastEthernet 59 baseline interface gigabitEthernet 59 duplex 132 ethernet description 138
8 Index
FTP client commands ip ftp source-address 179 ip ftp source-interface 179 FTP server commands delete 121 ftp-server enable 153 show ftp-server 419 show users 509
G
GRE commands show gre tunnel 420 show gre tunnel summary 420 tunnel destination 552
H
HDLC commands, Cisco baseline hdlc interface 58 encapsulation hdlc 136 hdlc down-when-looped 155 hdlc keepalive 155 hdlc shutdown 155 show hdlc interface 422 show interfaces serial 424 HSSI commands clock rate 97 crc 108 hssi force-dte-acknowledge 158 hssi internal-clock 158 interface hssi 164 invert data 166 load-interval 238 mru 280 mtu 281 show interfaces 424 shutdown 511 snmp trap link-status 513
I
IGMP commands baseline ip igmp 60 baseline ip igmp-proxy interface 60 igmp disable 159 igmp promiscuous 159 ip igmp 182 ip igmp access-group 183 ip igmp group limit 183 ip igmp immediate-leave 183 ip igmp last-member query-interval 184
ip igmp promiscuous 184 ip igmp querier 185 ip igmp querier-timeout 186 ip igmp query-interval 186 ip igmp query-max-response-time 186 ip igmp robustness 187 ip igmp static-group 187 ip igmp version 187 multicast group port limit 282 router igmp 373 show ip igmp 447 show ip igmp groups 448 show ip igmp interface 448 show multicast group limit 489 See also IGMP Proxy commands IGMP Proxy commands ip igmp-proxy 184 ip igmp-proxy unsolicited-report-interval 185 ip igmp-proxy V1-router-present-time 185 show ip igmp-proxy 448 show ip igmp-proxy groups 449 show ip igmp-proxy interface 449 interface commands baseline interface serial 59 baseline ip interface 61 clear ip interface 92 interface 161 interface ip 164 interface loopback 164 interface mlframe-relay 164 interface mlppp 165 interface null 165 interface pos 165 interface serial 165 interface tunnel 166 ip address 167 ip alwaysup 167 ip broadcast-address 169 ip debounce-time 171 ip dynamic-interface-prefix 177 ip redirects 200 ip share-interface 206 ip share-nexthop 206 ip shutdown 206 show interfaces 424 show ip interface 450 show ip interface shares 450 show ip interface vrf 451 show ip vrf interfaces 467 snmp trap ip link-status 513
9 ERX Edge Routers
IP commands arp 40 arp timeout 41 baseline ip 59 baseline ip tcp 62 baseline ip udp 62 baseline ip vrrp 62 baseline show-delta-counts 66 clear access-list 88 clear arp 89 clear ip prefix-list 93 clear ip prefix-tree 94 clear ip rip redistribution 94 clear ip routes 94 distance 125 ip access-routes 166 ip address 167 ip address-pool 167 ip alwaysup 167 ip as-path access-list 168 ip broadcast-address 169 ip community-list 170 ip debounce-time 171 ip demux-type da-prefix 171 ip destination-prefix 171 ip dhcp-server 173 ip directed-broadcast 173 ip disable-forwarding 173 ip explicit-path. See MPLS commands: mpls explicit-path ip extcommunity-list 178 ip ignore-df-bit 187 ip interface. See IP commands: no ip interface ip irdp 188 ip local pool 188 ip local pool snmpTrap 188 ip local pool warning 189 ip mac-validate 189 ip mask-reply 189 ip mtu 190 ip multipath round-robin 191 ip prefix-list 199 ip prefix-tree 200 ip proxy-arp 200 ip redirects 200 ip refresh-route 201 ip rip commands. See RIP commands ip route 203 ip router-id 204 ip rsvp bandwidth. See mpls bandwidth
ip sa-validate 205 ip shutdown 206 ip source-prefix 206 ip source-route 207 ip speed 207 ip ssh. See SSH commands ip ttl 210 ip tunnel reassembly 210 ip unnumbered 210 ip unreachables 210 ip virtual-router 211 ip vrrp 212 ip vrrp advertise-interval 212 ip vrrp authentication-key 213 ip vrrp authentication-type 213 ip vrrp enable 213 ip vrrp preempt 213 ip vrrp priority 214 ip vrrp virtual-address 214 no ip interface 305 ping 338 profile 350 route-map 372 router rip 374 show access-list 395 show arp 396 show ip 424 show ip address 424 show ip as-path-access-list 425 show ip demux interface 441 show ip domain-lookup 443 show ip dynamic-interface-prefix 446 show ip explicit-paths. See MPLS commands: show mpls explicit-paths show ip extcommunity-list 446 show ip forwarding-table slot 447 show ip interface 450 show ip interface shares 450 show ip mac-validate 451 show ip prefix-list 459 show ip prefix-list summary | detail 459 show ip prefix-tree 459 show ip prefix-tree summary | detail 460 show ip profile 460 show ip protocols 460 show ip redistribute 460 show ip route 463 show ip route slot 464 show ip rpf-route 464 show ip ssh 465
10 Index
show ip static 465 show ip tcp statistics 465 show ip traffic 466 show ip tunnel reassembly statistics 466 show ip udp statistics 466 show ip vrrp 467 show ip vrrp brief 467 show ip vrrp neighbor 468 show ip vrrp statistics 468 show ip vrrp summary 468 show profile 495 show profile brief 495 show route-map 501 timers 546 traceroute 549 ip-hint 179 IP multicast commands ip multicast-routing 190 ip rpf-route 205 mtrace 281 show ip mroute 452 show ip multicast protocols 452 show ip multicast routing 452 IPSec commands aggressive-mode 28 authentication 51 encryption 137 group 153 hash 154 ipsec clear sa 214 ipsec isakmp-policy-rule 215 ipsec key manual 215 ipsec lifetime 215 ipsec local-endpoint 216 ipsec transform-set 216 license ipsec-tunnels 234 lifetime 234 show ike policy-rule 423 show ike sa 423 show ipsec lifetime 469 show ipsec local-endpoint 469 show ipsec transform-set 469 show ipsec tunnel 470 show ipsec tunnel summary 470 show license ipsec-tunnels 479 tunnel lifetime 554 tunnel local-identity 554 tunnel mtu 561 tunnel peer-identity 562 tunnel pfs group 562
tunnel session-key-inbound 563 tunnel session-key-outbound 563 tunnel signaling 563 tunnel source 564 tunnel transform-set 564 IP tunnel commands show gre tunnel 420 show gre tunnel summary 420 tunnel checksum 552 tunnel mtu 561 tunnel source 564 IS-IS commands area-authentication-key 32 area-message-digest-key 34 baseline clns 56 clear ip isis redistribution 92 clear isis adjacency 95 clear isis database 95 clns configuration-time 96 clns holding-time 96 clns host 97 debug isis 116 disable-dynamic-redistribute 124 distance ip 126 distribute-domain-wide 126 domain-authentication-key 128 domain-message-digest-key 128 ignore-lsp-errors 160 ip router isis 204 ip route-type 204 isis authentication-key 216 isis circuit-type 217 isis csnp-interval 217 isis hello-interval 218 isis hello-multiplier 218 isis lsp-interval 219 isis mesh-group 219 isis message-digest-key 220 isis metric 221 isis priority 221 isis retransmit-interval 221 isis retransmit-throttle-interval 222 is-type 222 log-adjacency-changes 240 lsp-gen-interval 249 lsp-mtu 249 lsp-refresh-interval 249 maximum-paths 258 max-lsp-lifetime 259 metric-style narrow 263
11 ERX Edge Routers
metric-style transition 264 metric-style wide 264 mpls spf-use-any-best-path 276 mpls traffic-eng 277 mpls traffic-eng router-id 280 net 300 passive-interface 313 redistribute 363 redistribute isis ip 365 router isis 373 set-overload-bit 391 show clns 404 show clns interface 405 show clns neighbors 405 show clns protocol 405, 406 show host 423 show isis database 471 show isis mpls adjacency-log 471 show isis mpls advertisements 471 show isis mpls tunnel 472 show isis spf-log 472 show isis summary-addresses 472 show isis topology 472 spf-interval 522 summary-address 526 suppress-default 526 undebug isis 569
K
keepalive commands hdlc keepalive 155 ppp keepalive 344
L
L2F commands client-name 96 l2f checksum 223 l2f destruct-timeout 224 l2f drain 224 l2f drain destination 224 l2f drain tunnel 225 l2f ignore-receive-data-sequencing 225 l2f shutdown 226 l2f shutdown destination 226 l2F shutdown session 226 l2f shutdown tunnel 227 show l2f 473 show l2f destination 473 show l2f destination summary 473
show l2f session 474 show l2f session summary 474 show l2f tunnel 475 show l2f tunnel summary 475 type 565 L2TP commands aaa tunnel assignment-id-format 8 address 11 client-name 96 disable proxy lcp 124 enable proxy authenticate 134 l2tp checksum 227 l2tp destination profile 228 l2tp destruct-timeout 228 l2tp drain 228 l2tp drain destination 229 l2tp drain tunnel 229 l2tp ignore-receive-data-sequencing 230 l2tp retransmission 230 l2tp shutdown 230 l2tp shutdown destination 231 l2tp shutdown session 231 l2tp shutdown tunnel 232 l2tp tunnel idle-timeout 232 l2tp tunnel-switching 232 l2tp tunnel test 233 local host 238 local ip address 239 max-sessions 260 remote host 369 server name 381 show dhcp 413 show l2tp 475 show l2tp destination 476 show l2tp destination profile 476 show l2tp destination summary 476 show l2tp session 477 show l2tp session summary 477 show l2tp tunnel 478 show l2tp tunnel summary 478 source-address 520 tunnel 551 tunnel password 561 type 565
M
management commands, system bandwidth oversubscription 55 copy running-configuration startup-configuration 106, 107
12 Index
copy startup-configuration 107 service manual-commit 382 write memory 572 MFR commands baseline frame-relay interface 57 baseline frame-relay multilink interface 58 encapsulation ietf 136 frame-relay interface-dlci ietf 147 frame-relay intf-type 148 frame-relay keepalive 148 frame-relay lmi-n391dte 148 frame-relay lmi-n392dce 149 frame-relay lmi-n392dte 149 frame-relay lmi-n393dce 149 frame-relay lmi-n393dte 150 frame-relay lmi-t391dte 150 frame-relay lmi-t392dce 150 frame-relay lmi-type 151 interface mlframe-relay 164 member-interface 262 show frame-relay interface 415 show frame-relay lip 416 show frame-relay lmi 417 show frame-relay map 417 show frame-relay multilinkInterface 418 show frame-relay pvc 418 show frame-relay subinterface 419 show frame-relay summary 419 MLPPP commands encapsulation mlppp 136 interface mlppp 165 member-interface 262 MPLS commands append-after 29 bandwidth 55 cleanup-timeout-factor 88 clear mpls ldp 95 cr-ldp 108 hello hold-time 155 index 160 interface tunnel 166 ip explicit-path. See mpls explicit-path ip rsvp bandwidth. See mpls bandwidth ip vpn-id 211 list 238 mpls 265 mpls atm vci range 265 mpls atm vpi range 266 mpls bandwidth 266 mpls disable 266
mpls explicit-path 267 mpls ip propagate-ttl 267 mpls label-range 268 mpls ldp advertise-labels 268 mpls ldp disable 266 mpls ldp discovery transport-address 268 mpls ldp no-route retries 269 mpls ldp no-route retry-time 269 mpls ldp profile 274 mpls ldp retries 269 mpls ldp retry-time 270 mpls ldp session retries 270 mpls ldp session retry-time 270 mpls ldp targeted-hello receive list 271 mpls ldp targeted-hello send list 271 mpls lsp no-route retries 271 mpls lsp no-route retry-time 272 mpls lsp retries 272 mpls lsp retry-time 272 mpls match exp-bits 273 mpls match traffic-class 273 mpls profile 274 mpls reoptimize 275 mpls reoptimize timers frequency 275 mpls rsvp disable 266 mpls rsvp message-bundling 276 mpls rsvp profile 274 mpls rsvp refresh-reduction 276 mpls topology-driven-lsp 276 mpls topology-driven-lsp ip-interfaces 277 mpls traffic-eng administrative-weight 277 mpls traffic-eng attribute-flags 278 mpls traffic-eng flood thresholds 279 mpls traffic-eng link-management timers periodic-flooding 279 mpls tunnels profile 280 next-address 303 refresh-period 367 show cac 402 show cac interface 403 show ip explicit-paths. See show mpls explicit-paths show mpls 481 show mpls binding 482 show mpls explicit-paths 483 show mpls forwarding 484 show mpls ldp profile. See show mpls profile show mpls ldp targeted session 485 show mpls minor-interface 486 show mpls profile 487
13 ERX Edge Routers
show mpls rsvp 487 show mpls rsvp profile. See show mpls profile show mpls tunnels 488 show mpls tunnels profile. See show mpls profile tunnel destination 552 tunnel ip profile 553 tunnel mpls affinity 555 tunnel mpls autoroute announce 555 tunnel mpls autoroute metric 556 tunnel mpls bandwidth 556 tunnel mpls base-tunnel 556 tunnel mpls description 557 tunnel mpls dynamic target 557 tunnel mpls ip propagate-ttl 557 tunnel mpls label-dist 558 tunnel mpls lsp no-route retries 558 tunnel mpls lsp no-route retry-time 558 tunnel mpls path-option 559 tunnel mpls priority 560 tunnel mpls retries 560 tunnel mpls retry-time 560 tunnel mpls vpn-id 561 MPLS commands (IS-IS) mpls spf-use-any-best-path 276 mpls traffic-eng 277 mpls traffic-eng router-id 280 MPLS commands (OSPF) mpls traffic-eng area 278 mpls traffic-eng router-id 280 Multilink Frame Relay commands. See MFR commands
N
NBMA command, show nbma arp 489 NFS commands host 157 ip nfs 191 ip nfs host 192 show ip nfs 452 non-PPP equal access commands baseline ip dhcp-local 59 baseline ip http 60 default-router 121 dns-server 127 domain-name 129 ip dhcp-local excluded-address 172 ip dhcp-local limit 172 ip dhcp-local pool 172 ip http access-class 180
ip http max-connection-time 180 ip http not-found-url 180 ip http port 181 ip http realm 181 ip http root-refresh 181 ip http root-url 182 ip http same-host-limit 182 ip http server 182 lease 233 netbios-name-server 301 netbios-node-type 301 service dhcp-local 381 show ip dhcp-local binding 441 show ip dhcp-local limits 442 show ip dhcp-local statistics 443 show ip http 447 NTP commands clock set 98 clock summer-time date 99 clock summer-time recurring 100 clock timezone 100 ntp access-group 306 ntp broadcast-client 307 ntp broadcast-delay 307 ntp disable 307 ntp enable 307 ntp master 308 ntp server 308 ntp server enable 309 ntp source 309 show clock 406 show ntp associations 489 show ntp status 490 NVS commands check-disk 85 flash-disk duplicate 145 flash-disk initialize 145 flash-disk scan 146
O
OCx/STMx commands baseline line interface sonet 63 baseline path interface sonet 64 baseline section interface sonet 65 clock source 98 controller sonet 104 loopback 247 path 315 path overhead j1 336 sdh 379
14 Index
show controllers sonet 408 shutdown 511 OSPF commands address area 12 address authentication-key 14 address authentication message-digest 15 address authentication-none 17 address cost 17 address dead-interval 18 address hello-interval 19 address message-digest-key md5 20 address network 21 address passive-interface 22 address priority 23 address retransmit-interval 25 address transmit-delay 27 area 305 area. See OSPF commands: no area area default-cost 33 area nssa 35 area range 36 area stub 36 area virtual-link 36 area virtual-link authentication-key 37 area virtual-link authentication message-digest 37 area virtual-link authentication-none 37 area virtual-link dead-interval 38 area virtual-link hello-interval 38 area virtual-link message-digest-key md5 39 area virtual-link retransmit-interval 39 area virtual-link transmit-delay 40 authentication-key 52 authentication message-digest 52 authentication-none 53 automatic-virtual-link 53 baseline ip ospf 61 clear ip ospf redistribution 92 cost 107 dead-interval 109 debug ip ospf 113 disable-dynamic-redistribute 124 distance 125 domain-id 128 domain-tag 130 hello-interval 156 ip ospf authentication-key 192 ip ospf authentication message-digest 192 ip ospf authentication-none 192 ip ospf cost 193
ip ospf dead-interval 193 ip ospf hello-interval 193 ip ospf message-digest-key md5 194 ip ospf network 194 ip ospf priority 195 ip ospf retransmit-interval 195 ip ospf shutdown 195 ip ospf transmit-delay 195 ip route-type 204 maximum-paths 258 message-digest-key md5 263 mpls traffic-eng area 278 mpls traffic-eng router-id 280 neighbor 283 network area 303 no area 305 ospf auto-cost reference-bandwidth 310 ospf enable 310 ospf log-adjacency-changes 311 ospf shutdown 311 passive-interface 313 redistribute 363 remote-neighbor 369 retransmit-interval 371 router ospf 373 show ip ospf 453 show ip ospf border-routers 453 show ip ospf database 453 show ip ospf interface 454 show ip ospf internal-statistics 454 show ip ospf neighbors 454 show ip ospf remote-neighbor interface 455 show ip ospf spf-log 455 show ip ospf virtual-links 455 summary-address 526 timers spf 546 transmit-delay 551 ttl 551 undebug ip ospf 568 update-source 570
P
PIM commands clear ip mroute 92 clear ip pim auto-rp 93 clear ip pim interface count 93 clear ip pim remote-neighbor count 93 debug ip pim 114 ip pim 196 ip pim query-interval 196
15 ERX Edge Routers
ip pim rp-address 196 ip pim send rp-announce 197 ip pim send rp-discovery scope 197 ip pim spt-threshold 198 pim disable 337 query-interval 351 remote-neighbor 369 router pim 374 show ip pim auto-rp 455 show ip pim dense-mode sg-state 456 show ip pim interface 456 show ip pim neighbor 456 show ip pim remote-neighbor 457 show ip pim rp 457 show ip pim rp-hash 457 show ip pim sparse-mode sg-state 458 show ip pim sparse-mode unicast-route 458 show ip pim spt-threshold 458 undebug ip pim 567 update-source 570 policy management commands classifier-list 86 color 101 committed-action 101 committed-burst 101 committed-rate 102 conformed-action 103 exceeded-action 138 excess-burst 141 filter 145 forward 146 ip filter-options all 178 ip policy 198 log 239 mark 252 mask-val 252 next-hop 304 next-interface 304 peak-burst 336 peak-rate 337 policy-list 341 rate-limit-profile 361 show classifier-list 404 show policy-list 490 show rate-limit-profile 500 POS commands baseline interface pos 59 crc 108 encapsulation ppp 136 interface pos 165
loopback 247 mru 280 mtu 281 pos framing 341 pos scramble-atm 341 show interfaces 424 shutdown 511 PPP commands baseline ppp interface 64 ppp aaa-profile 342 ppp authentication 342 ppp chap-challenge-length 343 ppp description 343 ppp ipcp netmask 343 ppp keepalive 344 ppp log 344 ppp magic-number disable 344 ppp max-bad-auth 345 ppp mru 345 ppp multilink enable 345 ppp passive-mode 346 ppp peer 346 ppp shutdown 346 show ppp interface 490 show ppp interface summary 493 PPPoE commands baseline pppoe interface 65 encapsulation pppoe 136 pppoe 347 pppoe acName 347 pppoe always-offer 347 pppoe auto-configure 347 pppoe duplicate-protection 347 pppoe log pppoeControlPacket 348 pppoe motm 348 pppoe sessions 348 pppoe subinterface 349 pppoe url 349 show pppoe interface 493 show pppoe subinterface 494 shutdown 511
Q
QoS commands buffer-weight 76 clear egress-queue 89 clear fabric-queue 90 committed-length 102 conformed-fraction 103 conformed-length 104
16 Index
exceeded-fraction 139 exceeded-length 139 fabric-strict-priority 142 fabric-weight 143 group 153 node 306 qos-mode-port 350 qos-port-type-profile 351 qos-profile 351 queue 352 queue-profile 352 scheduler-profile 379 shaping-rate 392 show fabric-queue 414 show qos interface-hierarchy 495 show qos-port-type-profile 495 show qos-profile 496 show qos queue-thresholds 496 show queue-profile 497 show scheduler-profile 503 show traffic-class 509 show traffic-class-group 509 strict-priority 524 traffic-class 550 traffic-class-group 550 weight 572
R
RADIUS commands baseline radius 65 max-sessions 260 no radius client 305 radius acct-session-id-format 352 radius algorithm 353 radius calling-station-delimiter 353 radius calling-station-format 354 radius client. See RADIUS commands: no radius client radius dsl-port-type 355 radius ethernet-port-type 355 radius ignore framed-ip-netmask 355 radius include 356 radius nas-identifier 358 radius nas-port-format 358 radius override nas-ip-addr tunnel-client-endpoint 358 radius rollover-on-reject 359 radius server 359 radius trap acct-server-not-responding 359 radius trap auth-server-not-responding 359
radius trap no-acct-server-responding 360 radius trap no-auth-server-responding 360 radius tunnel-accounting 360 radius udp-checksum 360 radius update-source-addr 361 show radius acct-session-id-format 497 show radius algorithm 497 show radius attributes-ignored 498 show radius attributes-included 498 show radius calling-station-delimiter 498 show radius calling-station-format 498 show radius dsl-port-type 499 show radius ethernet-port-type 499 show radius nas-identifier 499 show radius nas-port-format 499 show radius override 499 show radius rollover-on-reject 500 show radius tunnel-accounting 500 show radius udp-checksum 500 show radius update-source-addr 500 strip-domain 524 subscriber 525 timeout 545 redundancy commands disable-autosync 123 disable-switch-on-error 124 redundancy force-failover 366 redundancy lockout 366 redundancy revert 367 redundancy revertive 367 show redundancy 501 srp switch 522 synchronize 527 Response Time Reporter commands frequency 152 hops-of-statistics-kept 156 max-response-failure 260 operations-per-hop 310 owner 312 request-data-size 370 rtr 375 rtr reaction-configuration 375 rtr reaction-configuration action-type 375 rtr reaction-configuration operation-failure 376 rtr reaction-configuration path-change 376 rtr reaction-configuration test-completion 376 rtr reaction-configuration test-failure 376 rtr reset 377 rtr schedule 377
17 ERX Edge Routers
rtr schedule life 377 rtr schedule restart-time 378 rtr schedule start-time 378 samples-of-history-kept 379 show rtr application 502 show rtr application collection-statistics 502 show rtr application configuration 502 show rtr application history 502 show rtr application hops 503 show rtr application operational-state 503 tag 537 timeout 545 tos 548 type 565 RIP commands address 11 address authentication key 13 address authentication mode 16 address receive version 24 address send version 26 authentication key 52 authentication mode 53 baseline ip rip 61 clear ip rip redistribution 94 debounce-time 110 debug ip rip 115 default-information originate 120 default-metric 121 disable 123 disable-dynamic-redistribute 124 distance 125 distribute-list 127 exit-remote-neighbor 142 interface-event-disable 161, 551 ip rip 201 ip rip authentication key 201 ip rip authentication mode 202 ip rip receive version 202 ip rip send version 203 ip route-type 204 ip split-horizon 207 ip summary-address 209 match-set summary prefix-tree 257 neighbor 283 network 302 receive version 362 redistribute 363 remote neighbor 369 route-map 372 router rip 374
send-more-specific-routes-disable 380 send version 380 show ip rip 461 show ip rip database 461 show ip rip network 461 show ip rip peer 462 show ip rip statistics 462 show ip rip summary-address 462 split-horizon 522 table-map 535 timers 546 time-to-live 547 undebug ip rip 568 update-source 570 version 570 routing policy commands match as-path 253 match community 253 match distance 254 match extcommunity 254 match ip address 255 match ip next-hop 255 match level 256 match metric 256 match metric-type 256 match route-type 257 match-set summary prefix-tree 257 match tag 258 route-map 372 set as-path prepend 383 set automatic-tag 383 set comm-list delete 383 set community 384 set dampening 385 set distance 386 set extcommunity 387 set ip next-hop 388 set level 388 set local-preference 389 set metric 389 set metric-type 390 set origin 390 set route-type 391 set tag 391 set weight 392
18 Index
S
SDH commands. See cOCx/STMx commands and OCx/STMx commands shutdown commands ip shutdown 206 shutdown 511 SMDS commands baseline smds interface 66 encapsulation smds-trunk 137 show smds interface 504 SNMP commands baseline snmp 66 bulkstats collector 77 bulkstats collector collector-mode 77 bulkstats collector description 77 bulkstats collector interval 77 bulkstats collector max-size 77 bulkstats collector primary-receiver 77 bulkstats collector secondary-receiver 77 bulkstats collector single-interval 77 bulkstats file-format endOfLine-Lf 78 bulkstats interfaces description-format common 78 bulkstats interfaces rfc 1213 78 bulkstats interface-type 78 bulkstats receiver remote-name 79 bulkstats schema 79 bulkstats schema subtree 80 bulkstats schema subtree policy 80 bulkstats traps 81 show bulkstats 400 show bulkstats collector description 400 show bulkstats collector interval 401 show bulkstats collector max-size 401 show bulkstats collector transfer-mode 401 show bulkstats interface-type 401 show bulkstats receiver 401 show bulkstats schema 402 show bulkstats statistics 402 show bulkstats traps 402 show snmp 504 show snmp access 505 show snmp community 505 show snmp interfaces 505 show snmp trap 505 show snmp user 505 show snmp view 506 snmp-server 513 snmp-server community 514 snmp-server contact 514
snmp-server enable traps 514 snmp-server host 516 snmp-server interfaces compress 517 snmp-server interfaces compress-restriction 517 snmp-server interfaces description-format common 518 snmp-server interfaces rfc1213 518 snmp-server location 518 snmp-server packetsize 519 snmp-server trap-proxy 519 snmp-server trap-source 519 snmp-server user 520 snmp trap ip link-status 513 snmp trap link-status 513 t1 snmp trap link-status 533 SONET commands. See cOCx/STMx commands and OCx/STMx commands SSH commands crypto key dss 108 disconnect ssh 124 ip ssh authentication-retries 207 ip ssh crypto 208 ip ssh disable-user-authentication 208 ip ssh mac 208 ip ssh sleep 209 ip ssh timeout 209 show ip ssh 465 subscriber interface commands ip demux-type da-prefix 171 ip destination-prefix 171 ip source-prefix 206 show ip demux interface 441 system commands aaa authentication enable default 3 aaa authentication login 3 aaa new-model 6 access-class in 9 access-list 10 banner 55 clear line 95 crypto key dss 108 data-character-bits 109 delete 121 description 122 dir 122 disconnect ssh 124 dsr-detect 130 enable password 134 enable secret 135
19 ERX Edge Routers
erase secrets 138 exception dump 139 exception gateway 140 exception protocol ftp 140 exception source 140 exclude-subsystem 141 exec-banner 141 exec-timeout 141 halt 154 help 156 host 157 hostname 157 ip domain-lookup 174 ip domain-name 174 ip name-server 191 ip nfs 191 ip nfs host 192 ip ssh authentication-retries 207 ip ssh crypto 208 ip ssh disable-user-authentication 208 ip ssh mac 208 ip ssh sleep 209 ip ssh timeout 209 line 237 login 245 login authentication 246 macro 250 memory 262 motd-banner 264 password 314 service ctrl-x-reboot 381 service password-encryption 382 service unattended password-recovery 382 show bandwidth oversubscription 400 show columns 406 show configuration 407 show environment 414 show exception dump 414 show flash 415 show hardware 421 show hosts 423 show ip domain-lookup 443 show ip nfs 452 show ip ssh 465 show line console 0 479 show line vty 479 show nvs 490 show processes 494 show reboot-history 501 show running-configuration 503
show secrets 504 show subsystems 507 show telnet 508 show timing 508 show users 509 show utilization 510 show version 510 slot accept 512 slot disable 512 slot enable 512 slot erase 512 speed 521 telnet 538 timeout login response 545 timing disable-auto-upgrade 547 timing select 547 timing source 548
T
T1 command, interface serial 165 T3 commands atm framing 45 cablelength 82 channelized 84 controller t3 105 dsu bandwidth 131 dsu mode 131 load-interval 238 loopback 247 mru 280 mtu 281 scramble 379 show controllers t3 412 shutdown 511 T3-Frame command, interface serial 165 TACACS+ commands aaa authentication enable default 3 baseline tacacs 66 show statistics tacacs 506 show tacacs 508 tacacs-server host 535 tacacs-server key 536 tacacs-server source-address 536 tacacs-server timeout 536 time commands, system clock set 98 clock summer-time date 99 clock summer-time recurring 100 clock timezone 100 ntp access-group 306
20 Index
ntp broadcast-client 307 ntp broadcast-delay 307 ntp disable 307 ntp enable 307 ntp master 308 ntp server 308 ntp source 309 show clock 406 show ntp associations 489 show ntp status 490 timing commands clock source 98 show timing 508 t1 clock source 529 timing disable-auto-upgrade 547 timing select 547 timing source 548 troubleshooting commands baseline log 63 bgp log-neighbor-changes 72 debug ip bgp 110 debug ip mbgp 112 debug ip ospf 113 debug ip pim 114 debug ip rip 115 debug isis 116 log 239 log destination 241 log destination syslog source 242 log engineering 242 log fields 243 log filters. See troubleshooting commands: no log filters log here 243 log severity 244 log unlimit 245 log verbosity 245 no log filters 305 service timestamps 382 show log configuration 480 show log data 480 undebug ip bgp 566 undebug ip mbgp 567 undebug ip ospf 568 undebug ip pim 567 undebug ip rip 568 undebug isis 569 Tunnel Service command, show tunnel-server 509
U
user interface commands configure 102 confirmations explicit 103 disable 123 enable 133 end 137 exit 142 run 378 send 380 show terminal 508 sleep 511 telnet listen 540 terminal data-character- bits 540 terminal length 540 terminal speed 540 terminal width 541
V
virtual router commands show configuration 407 show virtual-router 510 virtual-router 571 VLAN commands encapsulation vlan 137 show vlan subinterfaces 511 shutdown 511 svlan ethertype 527 svlan id 527 vlan id 572 VPN command, virtual-router 571 VRRP commands baseline ip vrrp 62 ip vrrp 212 ip vrrp advertise-interval 212 ip vrrp authentication-key 213 ip vrrp authentication-type 213 ip vrrp enable 213 ip vrrp preempt 213 ip vrrp priority 214 ip vrrp virtual-address 214 show ip vrrp 467 show ip vrrp brief 467 show ip vrrp neighbor 468 show ip vrrp statistics 468 show ip vrrp summary 468 vty line command, show users 509
21 ERX Edge Routers
X
X.21/V.35 commands clock rate 97 crc 108 ignore dcd 159 ignore link-state-signals 160 interface serial 165 invert data 166 invert txclock 166 load-interval 238 loopback 247 mru 280 mtu 281 nrzi-encoding 306 shutdown 511
22 Index

ERX

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

ERX

Uploaded by

Copyright:

Available Formats

ERX Edge Routers Command Reference Guide

SOFTWARE LICENSE AGREEMENT1

About This Guide

ERX Edge Routers

viii About This Guide

Alerts you to the risk of personal injury.

Conventions ERX Edge Routers

Words enclosed in [ brackets ] Words enclosed in [ brackets ]*

[ internal | external ] [ level1 | level2 | l1 ]*

Words enclosed in { braces }

{ permit | deny } { in | out } { clusterId | ipAddress }

Using the no vs. the default Version of Commands

x About This Guide

Conventions ERX Edge Routers

Interface Types and Specifiers

IEEE 802.3 Fast Ethernet (FE) interface

slot/port [.subinterface1[.subinterface2]] fastEthernet 3/2.6.20

xii About This Guide

slot/port [.subinterface1[.subinterface2]] gigabitEthernet 3/2.6.20

High-speed serial interface

loopback Loopback interface

Multilink frame relay interface

Conventions ERX Edge Routers

Refer to the individual formats listed below.

xiv About This Guide

Conventions ERX Edge Routers

sonet line layer Line layer of a SONET/SDH interface

xvi About This Guide

sonet section layer

Section layer of a SONET/SDH interface

tunnel Tunnel interface

Using the Online Documentation CD ERX Edge Routers

Using the Online Documentation CD

xviii About This Guide

Comments About the Documentation

Contacting Customer Support

aaa accounting acct-stop on-aaa-failure

aaa accounting acct-stop on-access-deny

aaa accounting duplication

aaa accounting interval

aaa accounting interval

aaa accounting ppp default

aaa authentication enable default ERX Edge Routers

aaa authentication enable default

aaa authentication login

aaa authentication ppp default

aaa authentication ppp default

aaa dns ERX Edge Routers

AAA Profile Configuration

aaa subscriber limit per-port ERX Edge Routers

aaa subscriber limit per-port

aaa subscriber limit per-vr

aaa tunnel assignment-id-format

aaa tunnel assignment-id-format

aaa tunnel client-name

aaa tunnel ignore

aaa tunnel password ERX Edge Routers

aaa tunnel password

address ERX Edge Routers

interfaceType interface type; see Interface Types and Specifiers in

interfaceSpecifier particular interface; format varies according to

address authentication key ERX Edge Routers

address authentication key

Interface Configuration, Subinterface Configuration