7750 SR OSRouter Configuration GuideSoftware Version: 7750 SR OS 5.0February 2007Document Part Number: 93-0073-03-01*93-0073-03-01*
Page 10 7750 SR OS Router Configuration GuideList of Tables
Configuration CommandsPage 100 7750 SR OS Router Configuration GuideloopbackSyntax [no] loopbackContext config>router>interface ip-int-nameDescr
IP Router Configuration7750 SR OS Router Configuration Guide Page 101Syntax port port-nameno portContext config>router>interface ip-int-nameDesc
Configuration CommandsPage 102 7750 SR OS Router Configuration GuideSyntax [no] proxy-arp-policy policy-name [policy-name...(up to 5 max)]Context conf
IP Router Configuration7750 SR OS Router Configuration Guide Page 103secondarySyntax secondary {[ip-address/mask | ip-address netmask]} [broadcast {al
Configuration CommandsPage 104 7750 SR OS Router Configuration Guidemask with all the host bits set to binary 1. This is the default broadcast address
IP Router Configuration7750 SR OS Router Configuration Guide Page 105Syntax tos-marking-state {trusted | untrusted}no tos-marking-stateContext config&
Configuration CommandsPage 106 7750 SR OS Router Configuration GuideParameters ip-addr | ip-int-name — Optional. The IP address or IP interface name t
IP Router Configuration7750 SR OS Router Configuration Guide Page 107Router Interface Filter CommandsegressSyntax egressContext config>router>in
Configuration CommandsPage 108 7750 SR OS Router Configuration Guideipv6 ipv6-filter-id — The filter name acts as the ID for the IPv6 filter policy ex
IP Router Configuration7750 SR OS Router Configuration Guide Page 109Router Interface ICMP CommandsicmpSyntax icmpContext config>router>interfac
7750 SR OS Router Configuration Guide Page 11LIST OF FIGURESIP Router ConfigurationFigure 1: Confederation Configuration . . . . . . . . . . . . . .
Configuration CommandsPage 110 7750 SR OS Router Configuration GuideParameters number — The maximum number of ICMP redirect messages to send, expresse
IP Router Configuration7750 SR OS Router Configuration Guide Page 111The no form of the command disables the generation of ICMP destination unreachabl
Configuration CommandsPage 112 7750 SR OS Router Configuration GuideRouter Interface IPv6 Commandsipv6Syntax [no] ipv6Context config>router>inte
IP Router Configuration7750 SR OS Router Configuration Guide Page 113Syntax packet-too-big [number seconds]no packet-too-bigContext config>router&g
Configuration CommandsPage 114 7750 SR OS Router Configuration Guideseconds — Determines the time frame, in seconds, that is used to limit the number
IP Router Configuration7750 SR OS Router Configuration Guide Page 115Syntax [no] local-proxy-ndContext config>router>if>ipv6Description This
Configuration CommandsPage 116 7750 SR OS Router Configuration GuideRouter Advertisement Commandsrouter-advertisementSyntax [no] router-advertisementC
IP Router Configuration7750 SR OS Router Configuration Guide Page 117Syntax [no] managed-configurationContext config>router>router-advert>ifD
Configuration CommandsPage 118 7750 SR OS Router Configuration GuideParameters mtu-bytes — Specify the MTU for the nodes to use to send packets on the
IP Router Configuration7750 SR OS Router Configuration Guide Page 119on-linkSyntax [no] on-linkContext config>router>router-advert>if>pref
Page 12 7750 SR OS Router Configuration GuideList of Figures
Configuration CommandsPage 120 7750 SR OS Router Configuration GuideSyntax reachable-time milli-secondsno reachable-timeContext config>router>ro
IP Router Configuration7750 SR OS Router Configuration Guide Page 121Default no shutdown
Configuration CommandsPage 122 7750 SR OS Router Configuration Guide
IP Router Configuration7750 SR OS Router Configuration Guide Page 123Show CommandsaggregateSyntax aggregate [family][active]Context show>routerDesc
Show CommandsPage 124 7750 SR OS Router Configuration GuideSample OutputA:ALA-A# show router ARP======================================================
IP Router Configuration7750 SR OS Router Configuration Guide Page 125authenticationSyntax authenticationContext show>router>authenticationDescri
Show CommandsPage 126 7750 SR OS Router Configuration GuidebfdSyntax bfdContext show>routerDescription This command enables the context to display
IP Router Configuration7750 SR OS Router Configuration Guide Page 127net25_1_2 100 100 3 ne
Show CommandsPage 128 7750 SR OS Router Configuration Guide Remote Address Protocol Tx Pkts Rx Pkts ------------
IP Router Configuration7750 SR OS Router Configuration Guide Page 129Sample OutputA:ALA-1# show router dhcp statistics================================
7750 SR OS Router Configuration Guide Page 13PrefaceAbout This GuideThis guide describes logical IP routing interfaces, virtual routers, IP and MAC-ba
Show CommandsPage 130 7750 SR OS Router Configuration Guide --------------------------------------------------------------------------Dhcp6 Drop Reaso
IP Router Configuration7750 SR OS Router Configuration Guide Page 131Sample OutputA:ALA-1# show router dhcp summary===================================
Show CommandsPage 132 7750 SR OS Router Configuration GuideSample OutputA:ALA-A# show router ecmp=====================================================
IP Router Configuration7750 SR OS Router Configuration Guide Page 133Output icmp6 Output — The following table describes the show router icmp6 output
Show CommandsPage 134 7750 SR OS Router Configuration GuideinterfaceSyntax interface [interface-name]Context show>router>icmpv6Description This
IP Router Configuration7750 SR OS Router Configuration Guide Page 135Echo Request : 0 Echo Reply : 0 Ro
Show CommandsPage 136 7750 SR OS Router Configuration GuideSample OutputA:ALA-A# show router interface ===============================================
IP Router Configuration7750 SR OS Router Configuration Guide Page 137 FE80::200:FF:FE00:4/64 PREFERREDip-12.2
Show CommandsPage 138 7750 SR OS Router Configuration Guide===============================================================================Interface Ta
IP Router Configuration7750 SR OS Router Configuration Guide Page 139A:ALA# show router interface ip-11.2.4.4 detail=================================
PrefacePage 14 7750 SR OS Router Configuration GuideList of Technical PublicationsThe 7750 SR documentation set is composed of the following books:• 7
Show CommandsPage 140 7750 SR OS Router Configuration GuideTOS Marking : Untrusted If Type : IES SNTP B.Cast
IP Router Configuration7750 SR OS Router Configuration Guide Page 141Sample OutputA:ALA-A# show router interface summary==============================
Show CommandsPage 142 7750 SR OS Router Configuration GuideSample OutputB:CORE2# show router neighbor ================================================
IP Router Configuration7750 SR OS Router Configuration Guide Page 143===============================================================================Po
Show CommandsPage 144 7750 SR OS Router Configuration GuideSample OutputA:ALA# show router route-table================================================
IP Router Configuration7750 SR OS Router Configuration Guide Page 145=============================================================================== B
Show CommandsPage 146 7750 SR OS Router Configuration Guide-------------------------------------------------------------------------------Static
IP Router Configuration7750 SR OS Router Configuration Guide Page 147Sample OutputA:Dut-A# show router rtr-advertisement =============================
Show CommandsPage 148 7750 SR OS Router Configuration GuidePreferred Lifetime : 07d00h00m Valid Lifetime : 30d00h00m Prefix: 231
IP Router Configuration7750 SR OS Router Configuration Guide Page 149Autonomous Flag : TRUE On-link flag : TRUE Pr
Preface7750 SR OS Router Configuration Guide Page 15Technical SupportIf you purchased a service agreement for your 7750 SR-Series router and related p
Show CommandsPage 150 7750 SR OS Router Configuration GuidePrefix: 231::/120Autonomous Flag : FALSE On-link flag : FALSE
IP Router Configuration7750 SR OS Router Configuration Guide Page 151static-arpSyntax static-arp [ip-addr | ip-int-name | mac ieee-mac-addr]Context sh
Show CommandsPage 152 7750 SR OS Router Configuration Guide===============================================================================A:ALA-A# A:A
IP Router Configuration7750 SR OS Router Configuration Guide Page 153next-hop ip-address — Only displays static routes with the specified next hop IP
Show CommandsPage 154 7750 SR OS Router Configuration Guide192.168.252.0/24 5 1 NH 10.10.0.254 n/a N 192.168.253
IP Router Configuration7750 SR OS Router Configuration Guide Page 155Sample OutputA:ALA-A# show router service-prefix=================================
Show CommandsPage 156 7750 SR OS Router Configuration GuideSample OutputNote that there are multiple instances of OSPF. OSPF-0 is persistent. OSPF-1 t
IP Router Configuration7750 SR OS Router Configuration Guide Page 157OSPFv2-9 Down DownOSPFv2-10 Down
Show CommandsPage 158 7750 SR OS Router Configuration Guidetunnel-tableSyntax tunnel-table [ip-address[/mask]] [protocol protocol | sdp sdp-id] [summ
IP Router Configuration7750 SR OS Router Configuration Guide Page 159A:ALA-A>config>service# show router tunnel-table summary==================
PrefacePage 16 7750 SR OS Router Configuration Guide
Clear CommandsPage 160 7750 SR OS Router Configuration GuideClear CommandsarpSyntax arp {all | ip-addr | interface {ip-int-name | ip-addr}}Context cle
IP Router Configuration7750 SR OS Router Configuration Guide Page 161statisticsSyntax statistics src-ip ip-address dst-ip ip-addressstatistics allCont
Clear CommandsPage 162 7750 SR OS Router Configuration Guideicmp-redirect-routeSyntax icmp-redirect-route {all | ip-address}Context clear>routerDes
IP Router Configuration7750 SR OS Router Configuration Guide Page 163statisticsSyntax statistics [ip-address | ip-int-name]Context clear>router>
Debug CommandsPage 164 7750 SR OS Router Configuration GuideDebug CommandsdestinationSyntax destination trace-destinationContext debug>traceDescrip
IP Router Configuration7750 SR OS Router Configuration Guide Page 165ipSyntax ipContext debug>routerDescription This command configures debugging f
Debug CommandsPage 166 7750 SR OS Router Configuration Guidex:x:x:x:x:x:d.d.d.d x: [0 — FFFF]H
IP Router Configuration7750 SR OS Router Configuration Guide Page 167d: [0 — 255]Dipv6-prefix-length 0 — 128longer — Specifies the prefix list entry m
Debug CommandsPage 168 7750 SR OS Router Configuration Guide
7750 SR OS Router Configuration Guide Page 169VRRPIn This ChapterThis chapter provides information about configuring Virtual Router Redundancy Protoco
7750 SR OS Router Configuration Guide Page 17Getting StartedIn This ChapterThis chapter provides process flow information to configure routing entitie
VRRP OverviewPage 170 7750 SR OS Router Configuration GuideVRRP OverviewThe Virtual Router Redundancy Protocol (VRRP) is defined in the IETF RFC 2338,
VRRP7750 SR OS Router Configuration Guide Page 171VRRP ComponentsVRRP consists of the following components:• Virtual Router on page 171• IP Address Ow
VRRP ComponentsPage 172 7750 SR OS Router Configuration GuidePrimary and Secondary IP AddressesA primary address is an IP address selected from the se
VRRP7750 SR OS Router Configuration Guide Page 173Virtual Router BackupA new virtual router master is selected from the set of VRRP routers available
VRRP ComponentsPage 174 7750 SR OS Router Configuration GuideConfigurable ParametersIn addition to backup IP addresses, to facilitate configuration of
VRRP7750 SR OS Router Configuration Guide Page 175When the IP address on the IP interface matches the virtual router IP address (owner mode), the prio
VRRP ComponentsPage 176 7750 SR OS Router Configuration GuideMessage Interval and Master InheritanceEach virtual router is configured with a message i
VRRP7750 SR OS Router Configuration Guide Page 177Master Down IntervalThe master down interval is a calculated value used to load the master down time
VRRP ComponentsPage 178 7750 SR OS Router Configuration GuideVRRP Message Authentication The authentication type parameter defines the type of authent
VRRP7750 SR OS Router Configuration Guide Page 179• VRRP message checks→ Version field – Must be set to the value 2→ Type field – Must be set to the v
Getting StartedPage 18 7750 SR OS Router Configuration Guide
VRRP ComponentsPage 180 7750 SR OS Router Configuration GuideAuthentication FailureAny received VRRP advertisement message that fails authentication m
VRRP7750 SR OS Router Configuration Guide Page 181have the supported IP addresses explicitly defined, making mismatched supported IP address within th
VRRP Priority Control PoliciesPage 182 7750 SR OS Router Configuration GuideVRRP Priority Control PoliciesThis implementation of VRRP supports control
VRRP7750 SR OS Router Configuration Guide Page 183VRRP Priority Control Policy Delta In-Use Priority LimitA VRRP priority control policy enforces an o
VRRP Priority Control PoliciesPage 184 7750 SR OS Router Configuration GuideEach event generates a VRRP priority event message indicating the policy-i
VRRP7750 SR OS Router Configuration Guide Page 185The following example illustrates a LAG priority event and it’s interaction with the hold set timer
VRRP Priority Control PoliciesPage 186 7750 SR OS Router Configuration Guide104 Two ports down Event State Set - 5 ports downEvent Threshold 4 ports d
VRRP7750 SR OS Router Configuration Guide Page 187Host Unreachable Priority EventThe host unreachable priority event creates a continuous ping task th
VRRP Non-Owner AccessibilityPage 188 7750 SR OS Router Configuration GuideVRRP Non-Owner AccessibilityAlthough RFC 2338 and draft-ietf-vrrp-spec-v2-06
VRRP7750 SR OS Router Configuration Guide Page 189Non-Owner Access SSHWhen non-owner access SSH is enabled on a virtual router instance, authorized SS
7750 SR OS Router Configuration Guide Page 19IP Router ConfigurationIn This ChapterThis chapter provides information about commands required to config
VRRP Configuration Process OverviewPage 190 7750 SR OS Router Configuration GuideVRRP Configuration Process OverviewFigure 14 displays the process to
VRRP7750 SR OS Router Configuration Guide Page 191VRRP Configuration ComponentsFigure 15 displays the major components to configure a VRRP priority co
VRRP Configuration Process OverviewPage 192 7750 SR OS Router Configuration GuideFigure 16: Interface VRRP Configuration Components• Interface — A log
VRRP7750 SR OS Router Configuration Guide Page 193Figure 17 displays the major components to configure a VRRP instance in an IES service.Figure 17: IE
Configuration NotesPage 194 7750 SR OS Router Configuration GuideConfiguration NotesThis section describes VRRP configuration caveats.General• Creatin
VRRP7750 SR OS Router Configuration Guide Page 195Configuring VRRP with CLIThis section provides information to configure VRRP using the command line
VRRP Configuration OverviewPage 196 7750 SR OS Router Configuration GuideVRRP Configuration OverviewConfiguring VRRP policies and configuring VRRP ins
VRRP7750 SR OS Router Configuration Guide Page 197VRRP CLI Command StructureThe 7750 SR OS VRRP command structure is displayed in Figure 18. VRRP pol
VRRP CLI Command StructurePage 198 7750 SR OS Router Configuration GuideROOTCONFIGSHOWVRRPSERVICEIES/VPRNINTERFACEVRRPHOST UNREACHABLELAG PORT DOWNPOR
VRRP7750 SR OS Router Configuration Guide Page 199List of CommandsTable 7 lists the commands to configure VRRP policy parameters, indicating the confi
This document is protected by copyright. Except as specifically permitted herein, no portion of the provided information can be reproduced in any form
Configuring IP Router ParametersPage 20 7750 SR OS Router Configuration GuideConfiguring IP Router ParametersIn order to provision services on a 7750
List of CommandsPage 200 7750 SR OS Router Configuration Guidehold-setConfigures the amount of time before the set state for a VRRP priority control e
VRRP7750 SR OS Router Configuration Guide Page 201Table 8: CLI Commands to Configure IES or VPRN Service VRRP ParametersCommand Description PageVRRP I
List of CommandsPage 202 7750 SR OS Router Configuration Guidebackup ip-addressAssigns virtual router IP addresses associated with the parental IP int
VRRP7750 SR OS Router Configuration Guide Page 203backup ip-addressAssigns virtual router IP addresses associated with the parental IP interface IP ad
Basic VRRP ConfigurationsPage 204 7750 SR OS Router Configuration GuideBasic VRRP ConfigurationsConfigure VRRP parameters in the following contexts:•
VRRP7750 SR OS Router Configuration Guide Page 205 exit exit----------------------------------------------A:SR2>config>
Basic VRRP ConfigurationsPage 206 7750 SR OS Router Configuration GuideVRRP Router Interface ParametersVRRP parameters are configured on a router inte
VRRP7750 SR OS Router Configuration Guide Page 207Common Configuration TasksThis section provides a brief overview of the tasks that must be performed
Common Configuration TasksPage 208 7750 SR OS Router Configuration GuideCreating Interface ParametersYou can configure up to 4 virtual routers IDs on
VRRP7750 SR OS Router Configuration Guide Page 209Configuring VRRP Policy ComponentsUse the CLI syntax displayed below to configure a VRRP policy:CLI
IP Router Configuration7750 SR OS Router Configuration Guide Page 21System InterfaceThe system interface is associated with the network entity (such a
Configuring VRRP Policy ComponentsPage 210 7750 SR OS Router Configuration GuideThe following displays the VRRP policy configuration:A:SR1>config&g
VRRP7750 SR OS Router Configuration Guide Page 211Configuring IES or VPRN Service VRRP ParametersVRRP parameters can be configured on an interface in
Configuring VRRP Policy ComponentsPage 212 7750 SR OS Router Configuration GuideNon-Owner IES or VPRN VRRP ExampleUse the CLI syntax displayed below t
VRRP7750 SR OS Router Configuration Guide Page 213The following example displays the basic non-owner VRRP configuration:A:SR2>config>service>
Configuring VRRP Policy ComponentsPage 214 7750 SR OS Router Configuration GuideOwner IES or VPRN VRRP Use the CLI syntax displayed below to configure
VRRP7750 SR OS Router Configuration Guide Page 215Configuring Router Interface VRRP ParametersVRRP parameters can be configured on an interface in an
Configuring VRRP Policy ComponentsPage 216 7750 SR OS Router Configuration GuideRouter Interface VRRP Non-Owner Use the CLI syntax displayed below to
VRRP7750 SR OS Router Configuration Guide Page 217The following example displays the non-owner interface VRRP configuration:A:SR2>config># info
Configuring VRRP Policy ComponentsPage 218 7750 SR OS Router Configuration GuideRouter Interface VRRP Owner Use the CLI syntax displayed below to conf
VRRP7750 SR OS Router Configuration Guide Page 219VRRP Configuration Management TasksThis section discusses the following VRRP configuration managemen
Configuring IP Router ParametersPage 22 7750 SR OS Router Configuration GuideIP AddressesCreating an IP Address RangeAn IP address range can be reserv
VRRP Configuration Management TasksPage 220 7750 SR OS Router Configuration GuideDeleting a VRRP PolicyPolicies are only applied to non-owner VRRP ins
VRRP7750 SR OS Router Configuration Guide Page 221Modifying Service and Interface VRRP ParametersModifying Non-Owner ParametersOnce a VRRP instance is
VRRP Configuration Management TasksPage 222 7750 SR OS Router Configuration Guide
VRRP7750 SR OS Router Configuration Guide Page 223VRRP Command ReferenceCommand HierarchiesConfiguration Commands• VRRP Network Interface Commands on
VRRP Command ReferencePage 224 7750 SR OS Router Configuration Guide— [no] preempt— priority priority—no priority— [no] ssh-reply— [no] standby-forwar
VRRP7750 SR OS Router Configuration Guide Page 225VRRP Priority Control Event Policy Commandsconfig—vrrp— [no] policy policy-id [context service-id]—
VRRP Command ReferencePage 226 7750 SR OS Router Configuration GuideShow Commandsshow—router —vrrp— instance [interface interface-name [vrid virtual-r
VRRP7750 SR OS Router Configuration Guide Page 227Configuration CommandsInterface Configuration Commandsauthentication-keySyntax authentication-key [a
Configuration CommandsPage 228 7750 SR OS Router Configuration GuideParameters authentication-key — The authentication key. Allowed values are any str
VRRP7750 SR OS Router Configuration Guide Page 229Parameters password — Specifies VRRP Authentication Type 1 is used. Type 1 requires the definition o
IP Router Configuration7750 SR OS Router Configuration Guide Page 23Autonomous Systems (AS)Networks can be grouped into areas. An area is a collection
Configuration CommandsPage 230 7750 SR OS Router Configuration Guideerror generated. At least one successful backup ip-addr command must be executed b
VRRP7750 SR OS Router Configuration Guide Page 231Example - Owner Virtual Router InstanceNon-Owner Virtual Router IP Address Parental Association — Wh
Configuration CommandsPage 232 7750 SR OS Router Configuration GuideParent Primary IP Address Changed — When a virtual router IP address is set and th
VRRP7750 SR OS Router Configuration Guide Page 233The mac command sets the MAC address used in ARP responses when the virtual router instance is maste
Configuration CommandsPage 234 7750 SR OS Router Configuration Guidemessage-intervalSyntax message-interval {[seconds] [milliseconds milliseconds]}no
VRRP7750 SR OS Router Configuration Guide Page 235policy Syntax policy vrrp-policy-idno policyContext config>router>if>vrrpDescription This c
Configuration CommandsPage 236 7750 SR OS Router Configuration GuideNon-owner virtual router instances only preempt when preempt is set and the curren
VRRP7750 SR OS Router Configuration Guide Page 237ping-replySyntax [no] ping-replyContext config>router>if>vrrpDescription This command enabl
Configuration CommandsPage 238 7750 SR OS Router Configuration GuideIf the shutdown command is executed, no VRRP advertisement messages are generated
VRRP7750 SR OS Router Configuration Guide Page 239standby-forwardingSyntax [no] standby-forwardingContext config>router>if>vrrpDescription Th
Configuring IP Router ParametersPage 24 7750 SR OS Router Configuration GuideConfederationsConfiguring confederations is optional and should only be i
Configuration CommandsPage 240 7750 SR OS Router Configuration Guidetraceroute-replySyntax [no] traceroute-replyContext config>router>if>vrrp
VRRP7750 SR OS Router Configuration Guide Page 241VRRP Owner Command Exclusions — By specifying the VRRP vrid as owner, The following commands are no
Configuration CommandsPage 242 7750 SR OS Router Configuration GuidePriority Policy Commandsdelta-in-use-limitSyntax delta-in-use-limit in-use-priorit
VRRP7750 SR OS Router Configuration Guide Page 243descriptionSyntax description stringno descriptionContext config>vrrp>policy vrrp-policy-idDes
Configuration CommandsPage 244 7750 SR OS Router Configuration GuideParameters vrrp-policy-id — The VRRP priority control ID expressed as a decimal in
VRRP7750 SR OS Router Configuration Guide Page 245Priority Policy Event Commandshold-clearSyntax hold-clear secondsno hold-clearContext config>vrrp
Configuration CommandsPage 246 7750 SR OS Router Configuration Guidelag-port-down events, this may be a decrease in the set effect if the clearing amo
VRRP7750 SR OS Router Configuration Guide Page 247Parameters priority-level — The priority level adjustment value expressed as a decimal integer.Value
Configuration CommandsPage 248 7750 SR OS Router Configuration GuidePriority Policy Port Down Event Commandsport-downSyntax [no] port-down port-idCont
VRRP7750 SR OS Router Configuration Guide Page 249to be separate entities. A port and a channel on the port can be monitored by separate events in the
IP Router Configuration7750 SR OS Router Configuration Guide Page 25There are no default confederations. Router confederations must be explicitly crea
Configuration CommandsPage 250 7750 SR OS Router Configuration GuidePriority Policy LAG Events Commandslag-port-downSyntax [no] lag-port-down lag-idCo
VRRP7750 SR OS Router Configuration Guide Page 251configured threshold is crossed, any higher thresholds are considered further event sets and are pro
Configuration CommandsPage 252 7750 SR OS Router Configuration GuideParameters number-of-lag-ports-down — The number of LAG ports down to create a set
VRRP7750 SR OS Router Configuration Guide Page 253Priority Policy Host Unreachable Event Commandsdrop-countSyntax drop-count consecutive-failuresno dr
Configuration CommandsPage 254 7750 SR OS Router Configuration GuideThe host-unreachable command can reference any valid local or remote IP address. T
VRRP7750 SR OS Router Configuration Guide Page 255The no form of the command deletes the specific IP host monitoring event. The event may be deleted a
Configuration CommandsPage 256 7750 SR OS Router Configuration GuideWith each consecutive attempt to send an ICMP echo request message, the timeout ti
VRRP7750 SR OS Router Configuration Guide Page 257Priority Policy Route Unknown Event Commandsless-specificSyntax [no] less-specific [allow-default]Co
Configuration CommandsPage 258 7750 SR OS Router Configuration GuideWhen more than one next hop IP addresses are eligible for matching, a next-hop com
VRRP7750 SR OS Router Configuration Guide Page 259is-is — This parameter defines IS-IS as an eligible route source for a returned route prefix from th
Configuring IP Router ParametersPage 26 7750 SR OS Router Configuration GuideProxy ARPProxy ARP is the technique in which a router answers ARP request
Configuration CommandsPage 260 7750 SR OS Router Configuration GuideAn existing route prefix in the RTM must be active (used by the IP forwarding engi
VRRP7750 SR OS Router Configuration Guide Page 261Show Commandsglobal-statisticsSyntax global-statisticsContext show>vrrpDescription This command d
Show CommandsPage 262 7750 SR OS Router Configuration Guidevrid vrid — Displays detailed information for the specified VRRP instance on the IP interfa
VRRP7750 SR OS Router Configuration Guide Page 263Inh IntYes — When the VRRP instance is a non-owner and is operat-ing as a backup and the master-int-
Show CommandsPage 264 7750 SR OS Router Configuration GuideOutput Sample OutputA:ALA-A# show vrrp instance============================================
VRRP7750 SR OS Router Configuration Guide Page 265A:ALA-A#A:ALA-A# show vrrp instance d2hub===========================================================
Show CommandsPage 266 7750 SR OS Router Configuration GuidepolicySyntax policy [vrrp-policy-id [event event-type specific-qualifier]]Context show>v
VRRP7750 SR OS Router Configuration Guide Page 267Delta LimitThe delta-in-use-limit for a VRRP policy. Once the total sum of all delta events has been
Show CommandsPage 268 7750 SR OS Router Configuration GuideOutput Sample OutputA:ALA-A# show vrrp policy==============================================
VRRP7750 SR OS Router Configuration Guide Page 269 ---------------------
IP Router Configuration7750 SR OS Router Configuration Guide Page 27Internet Protocol VersionsThe 7750 SR OS implements IP routing functionality, prov
Show CommandsPage 270 7750 SR OS Router Configuration GuideApplied to Interface NameThe interface name the VRRP policy is applied to.VR IDThe virtual
VRRP7750 SR OS Router Configuration Guide Page 271Sample OutputA:ALA-A#show vrrp policy event port-down===============================================
Show CommandsPage 272 7750 SR OS Router Configuration Guide-------------------------------------------------------------------------------Priority Con
VRRP7750 SR OS Router Configuration Guide Page 273Protocol(s) : None Hold Set Config : 0 s
Clear CommandsPage 274 7750 SR OS Router Configuration GuideClear CommandsinstanceSyntax interface ip-int-name [vrid vrid]Context clear>vrrpDescrip
7750 SR OS Router Configuration Guide Page 275Filter PoliciesIn This ChapterThis chapter provides information about filter policies and management.Top
Filter Policy Configuration OverviewPage 276 7750 SR OS Router Configuration GuideFilter Policy Configuration OverviewFilter policies, also referred t
Filter Policies7750 SR OS Router Configuration Guide Page 277Filter Policy EntitiesA filter policy compares the match criteria specified within a filt
Filter Policy Configuration OverviewPage 278 7750 SR OS Router Configuration GuideFilter policies can be applied to specific service types: • Epipe —
Filter Policies7750 SR OS Router Configuration Guide Page 279Redirection policies can contain multiple destinations. Each destination is assigned an i
Configuring IP Router ParametersPage 28 7750 SR OS Router Configuration GuideTable 2: IPv6 Header Field Descriptions Field DescriptionVersion 4-bit In
Filter Policy Configuration OverviewPage 280 7750 SR OS Router Configuration GuideWeb Redirection (Captive Portal)The 7xx0 Series introduces a new typ
Filter Policies7750 SR OS Router Configuration Guide Page 281Figure 19: Web Redirect Traffic FlowStarred entries (*) are items the router performs mas
Creating Redirect PoliciesPage 282 7750 SR OS Router Configuration GuideCreating Redirect PoliciesFigure 20 displays the process to create redirect po
Filter Policies7750 SR OS Router Configuration Guide Page 283Figure 20 displays the process to create filter policies and apply them to a service or n
Creating Redirect PoliciesPage 284 7750 SR OS Router Configuration GuidePolicy ComponentsFigure 22 displays the major components of a redirect policy.
Filter Policies7750 SR OS Router Configuration Guide Page 285Figure 23 displays the major components of a filter policy.Figure 23: Filter Policy Compo
Creating Redirect PoliciesPage 286 7750 SR OS Router Configuration GuidePacket Matching CriteriaUp to 65535 IP and 65535 MAC filter IDs (unique filter
Filter Policies7750 SR OS Router Configuration Guide Page 287• Option value — Entering an option value enables the first filter to search for a specif
Creating Redirect PoliciesPage 288 7750 SR OS Router Configuration GuideDSCP ValuesTable 15: DSCP Name to DSCP Value Table DSCP Name DecimalDSCP Value
Filter Policies7750 SR OS Router Configuration Guide Page 289cp21 31cs4 32 *cp33 33af41 34 *cp35 35af42 36 *cp37 37af43 38 *cp39 39cs5 40 *cp41 41cp42
IP Router Configuration7750 SR OS Router Configuration Guide Page 29IPv6 ApplicationsExamples of the IPv6 applications supported by the 7750 SR OS inc
Creating Redirect PoliciesPage 290 7750 SR OS Router Configuration GuideIP Option Values Table 16: IP Option ValuesCopy Class Number Value Name Descri
Filter Policies7750 SR OS Router Configuration Guide Page 291Ordering Filter EntriesWhen entries are created, they should be arranged sequentially fro
Creating Redirect PoliciesPage 292 7750 SR OS Router Configuration GuideFigure 24 displays an example of several packets forwarded upon matching the f
Filter Policies7750 SR OS Router Configuration Guide Page 293Applying FiltersAfter filters are created, they can be applied to the following entities:
Configuration NotesPage 294 7750 SR OS Router Configuration GuideConfiguration NotesThe following information describes filter implementation caveats:
Filter Policies7750 SR OS Router Configuration Guide Page 295IP Filters• Define filter entry packet matching criteria — If a filter policy is created
Configuration NotesPage 296 7750 SR OS Router Configuration Guide• In case the mini-table has no more free entries, only Total counter is incremented.
Filter Policies7750 SR OS Router Configuration Guide Page 297Reference SourcesFor information on supported IETF drafts and standards, as well as stand
Configuration NotesPage 298 7750 SR OS Router Configuration Guide
Filter Policies7750 SR OS Router Configuration Guide Page 299Configuring Filter Policies with CLIThis section provides information to configure filter
7750 SR OS Router Configuration Guide Page 3Table of ContentsGetting StartedAlcatel-Lucent 7750 SR-Series Router Configuration Process. . . . . . . .
Configuring IP Router ParametersPage 30 7750 SR OS Router Configuration Guide• IPv6 services to enterprise customers and home users — Figure 5 shows I
Filter CLI Command StructurePage 300 7750 SR OS Router Configuration GuideFilter CLI Command StructureFigure 25 displays the 7750 SR OS filter command
Filter Policies7750 SR OS Router Configuration Guide Page 301Figure 26 displays the 7750 SR OS filter redirect policy command structure. The redirect
List of CommandsPage 302 7750 SR OS Router Configuration GuideList of CommandsTable 18 lists all the filter configuration commands indicating the conf
Filter Policies7750 SR OS Router Configuration Guide Page 303filter-sampleSpecifies that traffic matching the associated IP filter entry is sampled if
List of CommandsPage 304 7750 SR OS Router Configuration GuideConfigure an IPv6 filter policyconfig>filter ipv6-filterCreates an IPv6 filter policy
Filter Policies7750 SR OS Router Configuration Guide Page 305icmp-typeConfigures matching on ICMP type field in the ICMP header of an IP packet as an
List of CommandsPage 306 7750 SR OS Router Configuration Guidedot1pConfigures an IEEE 802.1p value or range to be used as a MAC filter match criterion
Filter Policies7750 SR OS Router Configuration Guide Page 307configure a filter log policyconfig>filterlog Enables the context to create a filter l
Basic ConfigurationPage 308 7750 SR OS Router Configuration GuideBasic ConfigurationThe most basic IP, IPv6, and MAC filter policies must have the fol
Filter Policies7750 SR OS Router Configuration Guide Page 309Common Configuration TasksThis section provides a brief overview of the tasks that must b
IP Router Configuration7750 SR OS Router Configuration Guide Page 31IPv6 Provider Edge Router over MPLS (6PE)6PE allows IPv6 domains to communicate wi
Common Configuration TasksPage 310 7750 SR OS Router Configuration GuideCreating an IP Filter PolicyConfiguring and applying filter policies is option
Filter Policies7750 SR OS Router Configuration Guide Page 311The following displays the command usage to create an exclusive IP filter policy:Example:
Common Configuration TasksPage 312 7750 SR OS Router Configuration GuideIP Filter EntryWithin a filter policy, configure filter entries which contain
Filter Policies7750 SR OS Router Configuration Guide Page 313Configuring the HTTP-Redirect OptionIf http-redirect is specified as an action, a corresp
Common Configuration TasksPage 314 7750 SR OS Router Configuration Guide exit entry 30 create match protocol tcp
Filter Policies7750 SR OS Router Configuration Guide Page 315Filter SamplingWithin a filter entry, you can specify that traffic matching the associate
Common Configuration TasksPage 316 7750 SR OS Router Configuration GuideIP Entry Matching CriteriaUse the following CLI syntax to configure IP filter
Filter Policies7750 SR OS Router Configuration Guide Page 317Creating an IPv6 Filter PolicyConfiguring and applying IPv6 filter policies is optional.
Common Configuration TasksPage 318 7750 SR OS Router Configuration GuideIPv6 Filter EntryWithin an IPv6 filter policy, configure filter entries which
Filter Policies7750 SR OS Router Configuration Guide Page 319The following example displays the IPv6 filter entry configuration.A:ALA-49>config>
Configuring IP Router ParametersPage 32 7750 SR OS Router Configuration Guide• LDP is used to create the MPLS full mesh between the 6PE routers and th
Common Configuration TasksPage 320 7750 SR OS Router Configuration GuideCreating a MAC Filter PolicyConfiguring and applying filter policies is option
Filter Policies7750 SR OS Router Configuration Guide Page 321MAC Filter EntryWithin a filter policy, configure filter entries which contain criteria a
Common Configuration TasksPage 322 7750 SR OS Router Configuration GuideMAC Entry Matching CriteriaUse the following CLI syntax to configure MAC filte
Filter Policies7750 SR OS Router Configuration Guide Page 323Creating Filter Log PoliciesUse the following CLI syntax to configure filter log policy:C
Common Configuration TasksPage 324 7750 SR OS Router Configuration GuideApplying Filter Policies Filter policies can be associated with the following
Filter Policies7750 SR OS Router Configuration Guide Page 325config>service>epipe# spoke-sdp 8:8 createconfig>service>epipe>spoke-sdp$
Common Configuration TasksPage 326 7750 SR OS Router Configuration GuideApply an IPv6 Filter Policy to an IES SAPUse the following CLI syntax to apply
Filter Policies7750 SR OS Router Configuration Guide Page 327Apply Filter Policies to Network Port IP filter policies can be applied to network IP int
Common Configuration TasksPage 328 7750 SR OS Router Configuration GuideApply an IPv6 InterfaceUse the following CLI syntax to apply an IPv6 filter po
Filter Policies7750 SR OS Router Configuration Guide Page 329Creating a Redirect PolicyConfiguring and applying redirect policies is optional. Each re
IP Router Configuration7750 SR OS Router Configuration Guide Page 33Bidirectional Forwarding DetectionBidirectional Forwarding Detection (BFD) is a li
Common Configuration TasksPage 330 7750 SR OS Router Configuration GuideThe following displays the command usage to create a redirect policy:Example:c
Filter Policies7750 SR OS Router Configuration Guide Page 331 exit no shutdown exit destination 10
Common Configuration TasksPage 332 7750 SR OS Router Configuration GuideConfiguring Policy-Based Forwarding for Deep Packet Inspection in VPLSThe purp
Filter Policies7750 SR OS Router Configuration Guide Page 333Configuring the VPLS service:Example: config>service# vpls 10 customer 1 createconfig&
Common Configuration TasksPage 334 7750 SR OS Router Configuration GuideConfiguring the MAC filter policy:Example: config>filter# mac-filter 100 cr
Filter Policies7750 SR OS Router Configuration Guide Page 335Adding the MAC filter to the VPLS service:Example: config>service# config>service#
Filter Management TasksPage 336 7750 SR OS Router Configuration GuideFilter Management TasksThis section discusses the following filter policy managem
Filter Policies7750 SR OS Router Configuration Guide Page 337The following displays the original filter entry order on the left side and the reordered
Filter Management TasksPage 338 7750 SR OS Router Configuration GuideModifying an IP Filter PolicyTo access a specific IP filter, you must specify the
Filter Policies7750 SR OS Router Configuration Guide Page 339 exit..----------------------------------------------A:ALA-7>config>filter#
Configuring IP Router ParametersPage 34 7750 SR OS Router Configuration GuideIf multiple BFD sessions exist between two nodes, the BFD discriminator i
Filter Management TasksPage 340 7750 SR OS Router Configuration GuideModifying an IPv6 Filter PolicyTo access a specific IPv6 filter, you must specify
Filter Policies7750 SR OS Router Configuration Guide Page 341Modifying a MAC Filter PolicyTo access a specific MAC filter, you must specify the filter
Filter Management TasksPage 342 7750 SR OS Router Configuration GuideDeleting a Filter PolicyBefore you can delete a filter, you must remove the filte
Filter Policies7750 SR OS Router Configuration Guide Page 343From a Network InterfaceTo delete a filter from a network interface, enter the following
Filter Management TasksPage 344 7750 SR OS Router Configuration GuideCLI Syntax: config>router>if# egress no filter ip 2A:ALA-49>config>ro
Filter Policies7750 SR OS Router Configuration Guide Page 345CLI Syntax: config>router>if# ingress no filterA:ALA-49>config>router>if#-
Filter Management TasksPage 346 7750 SR OS Router Configuration GuideFrom the Filter ConfigurationAfter you have removed the filter from the SAP, use
Filter Policies7750 SR OS Router Configuration Guide Page 347Modifying a Redirect PolicyTo access a specific redirect policy, you must specify the pol
Filter Management TasksPage 348 7750 SR OS Router Configuration GuideDeleting a Redirect PolicyBefore you can delete a redirect policy from the filter
Filter Policies7750 SR OS Router Configuration Guide Page 349Copying Filter PoliciesWhen changes are made to an existing filter policy, they are appli
IP Router Configuration7750 SR OS Router Configuration Guide Page 35D Bit The “demand mode” bit. If set, the transmitting system wishes to operate in
Filter Management TasksPage 350 7750 SR OS Router Configuration Guide
Filter Policies7750 SR OS Router Configuration Guide Page 351Filter Command ReferenceCommand Hierarchies• Log Commands on page 351 • IP Filter Policy
Filter Command ReferencePage 352 7750 SR OS Router Configuration Guide— action [drop]— action forward [next-hop {ip-address | indirect ip-address | in
Filter Policies7750 SR OS Router Configuration Guide Page 353IPv6 Filter Policy Commandsconfig —filter— ipv6-filter ipv6-filter-id [create]— default-a
Filter Command ReferencePage 354 7750 SR OS Router Configuration Guide— default-action {drop | forward}— renum old-entry-id new-entry-id— scope {exclu
Filter Policies7750 SR OS Router Configuration Guide Page 355Redirect Policy Configuration Commands—Redirect policy commands— redirect-policy redirect
Filter Command ReferencePage 356 7750 SR OS Router Configuration GuideGeneric Filter Commandsconfig —filter— copy ip-filter | ipv6-filter | mac-filter
Filter Policies7750 SR OS Router Configuration Guide Page 357Configuration CommandsGeneric CommandsdescriptionSyntax description stringno descriptionC
Page 358 7750 SR OS Router Configuration GuideGlobal Filter Commandsip-filterSyntax [no] ip-filter filter-id [create]Context config>filter Descript
Filter Policies7750 SR OS Router Configuration Guide Page 359Context config>filter Description This command enables the context for a MAC filter po
Router Configuration Process OverviewPage 36 7750 SR OS Router Configuration GuideRouter Configuration Process OverviewFigure 9 displays the process t
Page 360 7750 SR OS Router Configuration GuideFilter Log Destination CommandsdestinationSyntax destination memory num-entriesdestination syslog syslog
Filter Policies7750 SR OS Router Configuration Guide Page 361shutdownSyntax [no] shutdownContext config>filter>logconfig>filter>log>sum
Page 362 7750 SR OS Router Configuration GuideParameters dst-addr — Specifies that received log packets are summarized based on the destination IP, IP
Filter Policies7750 SR OS Router Configuration Guide Page 363Filter Policy Commandsdefault-actionSyntax default-action {drop | forward}Context config&
Page 364 7750 SR OS Router Configuration GuideGeneral Filter Entry CommandsentrySyntax entry entry-id [time-range time-range-name] no entry entry-idC
Filter Policies7750 SR OS Router Configuration Guide Page 365The filter log ID must exist before a filter entry can be enabled to use the filter log I
Page 366 7750 SR OS Router Configuration GuideIP Filter Entry CommandsactionSyntax action [drop]action forward [next-hop {ip-address | indirect ip-add
Filter Policies7750 SR OS Router Configuration Guide Page 367frame [port-id | bundle-id]:dlcicisco-hdlc slot/mda/port.channelima-grp bundle-id[:vpi/v
Page 368 7750 SR OS Router Configuration Guideqtag1, qtag2 — Specifies the encapsulation value used to identify the SAP on the port or sub-port. If th
Filter Policies7750 SR OS Router Configuration Guide Page 369Default no filter-sampleinterface-disable-sampleSyntax [no] interface-disable-sampleConte
IP Router Configuration7750 SR OS Router Configuration Guide Page 37Router Configuration Process OverviewFigure 9 displays the process to configure ba
Page 370 7750 SR OS Router Configuration Guideigmp 2 Internet Group Management ip 4 IP in IP (encapsulation)tcp 6 Transmission Controlegp 8 Exterior G
Filter Policies7750 SR OS Router Configuration Guide Page 371matchSyntax match [next-header next-header]no matchContext config>filter>ipv6-filte
Page 372 7750 SR OS Router Configuration GuideMAC Filter Entry CommandsactionSyntax action [drop]action forward [sap sap-id |sdp sdp-id]action http-re
Filter Policies7750 SR OS Router Configuration Guide Page 373id 1 — 8path-id a, bcc-type .sap-net, .net-sap]cc-id 0 — 4094lag-id lag-idlag keywordid
Page 374 7750 SR OS Router Configuration Guidehttp-redirect url — Specifies the HTTP web address that will be sent to the user’s browser.Values 255 ch
Filter Policies7750 SR OS Router Configuration Guide Page 375IP Filter Match CriteriadscpSyntax dscp dscp-nameno dscpContext config>filter>ip-fi
Page 376 7750 SR OS Router Configuration GuideSyntax dst-ip [ipv6-address/prefix-length]no dst-ipContext config>filter>ipv6-filter>entry>m
Filter Policies7750 SR OS Router Configuration Guide Page 377fragmentSyntax fragment {true | false}no fragmentContext config>filter>ip-filter>
Page 378 7750 SR OS Router Configuration GuideThe no form of the command removes the criterion from the match entry.Default no icmp-type — no match cr
Filter Policies7750 SR OS Router Configuration Guide Page 379multiple-optionSyntax multiple-option {true | false}no multiple-optionContext config>f
Router Configuration Process OverviewPage 38 7750 SR OS Router Configuration GuideRouter Configuration Process OverviewFigure 10 displays the process
Page 380 7750 SR OS Router Configuration GuideDefault no src-ip — no source IP match criterionParameters ip-address — The IP prefix for the IP match
Filter Policies7750 SR OS Router Configuration Guide Page 381Parameters lt | gt | eq — Specifies the operator to use relative to src-port-number for s
Page 382 7750 SR OS Router Configuration GuideDefault No match criterion for the SYN bitDescription no tcp-synUse the no form of this command to remov
Filter Policies7750 SR OS Router Configuration Guide Page 383MAC Filter Match Criteriadot1pSyntax dot1p p-value [mask]no dot1pContext config>filter
Page 384 7750 SR OS Router Configuration GuideDescription Configures an Ethernet 802.2 LLC DSAP value or range for a MAC filter match criterion.This i
Filter Policies7750 SR OS Router Configuration Guide Page 385This 48-bit mask can be configured using the following formats:To configure so that all p
Page 386 7750 SR OS Router Configuration GuideThe no form of the command removes the criterion from the match criteria.Default noneParameters zero — S
Filter Policies7750 SR OS Router Configuration Guide Page 387ieee-address-mask — This 48-bit mask can be configured using:To configure so that all pac
Page 388 7750 SR OS Router Configuration GuidePolicy and Entry Maintenance CommandscopySyntax copy {ip-filter | ipv6-filter | mac-filter} source-filte
Filter Policies7750 SR OS Router Configuration Guide Page 389Parameters old-entry-id — Enter the entry number of an existing entry.Values 1 — 65535new
IP Router Configuration7750 SR OS Router Configuration Guide Page 39Configuration NotesThe following information describes router configuration caveat
Page 390 7750 SR OS Router Configuration GuideRedirect Policy CommandsdestinationSyntax [no] destination ip-addressContext config>filter>redirec
Filter Policies7750 SR OS Router Configuration Guide Page 391hold-down seconds — The amount of time, in seconds, that the system should be held down
Page 392 7750 SR OS Router Configuration GuideDescription Redirect policies can contain multiple destinations. Each destination is assigned an initial
Filter Policies7750 SR OS Router Configuration Guide Page 393within the specified range, the priority can be disabled, lowered or raised. Default none
Page 394 7750 SR OS Router Configuration GuideParameters return-code-1, return-code-2 — Specifies a range of return codes. When the URL test return-co
Filter Policies7750 SR OS Router Configuration Guide Page 395Show Commandsanti-spoofSyntax anti-spoof [sap-id]Context show>filterDescription Displa
Show CommandsPage 396 7750 SR OS Router Configuration GuideValues null [port-id | bundle-id | lag-id | aps-id]dot1q [port-id | bundle-id | lag-id | ap
Filter Policies7750 SR OS Router Configuration Guide Page 397The values depends on the encapsulation type configured for the interface. The following
Show CommandsPage 398 7750 SR OS Router Configuration Guidedownload-failedSyntax download-failedContext show>filterDescription This command shows a
Filter Policies7750 SR OS Router Configuration Guide Page 399Output Show Filter (no filter-id specified) — The following table describes the command o
Page 4 7750 SR OS QoS Configuration GuideTable of ContentsConfiguring an Autonomous System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Configuration NotesPage 40 7750 SR OS Router Configuration Guide
Show CommandsPage 400 7750 SR OS Router Configuration GuideDef. Action Forward — The default action for the filter ID for packets that do not match th
Filter Policies7750 SR OS Router Configuration Guide Page 401Sample OutputA:ALA-49>config>filter# show filter ip 3==============================
Show CommandsPage 402 7750 SR OS Router Configuration GuideOutput Show Filter (with time-range specified) — If a time-range is specified for a filter
Filter Policies7750 SR OS Router Configuration Guide Page 403Applied No — The filter policy ID has not been applied.Yes — The filter policy ID is appl
Show CommandsPage 404 7750 SR OS Router Configuration GuideSample OutputA:ALA-49# show filter ip 1 associations=======================================
Filter Policies7750 SR OS Router Configuration Guide Page 405Filter Id : 1 Applied : YesScope : Templa
Show CommandsPage 406 7750 SR OS Router Configuration GuideSample OutputA:ALA-49# show filter ip 3 counters===========================================
Filter Policies7750 SR OS Router Configuration Guide Page 407entry entry-id — Displays information on the specified IPv6 filter entry ID for the speci
Show CommandsPage 408 7750 SR OS Router Configuration GuideApplied No — The filter policy ID has not been applied.Yes — The filter policy ID is applie
Filter Policies7750 SR OS Router Configuration Guide Page 409Sample OutputA:ALA-48# show filter ipv6 100==============================================
IP Router Configuration7750 SR OS Router Configuration Guide Page 41Configuring an IP Router with CLIThis section provides information to configure an
Show CommandsPage 410 7750 SR OS Router Configuration GuideIPv6 Filter===============================================================================F
Filter Policies7750 SR OS Router Configuration Guide Page 411EntryThe filter ID filter entry ID. If the filter entry ID indicates the entry is (Inacti
Show CommandsPage 412 7750 SR OS Router Configuration GuideSample OutputA:ALA-48# show filter ipv6 1 associations=====================================
Filter Policies7750 SR OS Router Configuration Guide Page 413A:ALA-48#Output Show Filter Counters — The following table describes the output fields w
Show CommandsPage 414 7750 SR OS Router Configuration GuidelogSyntax log log-id [match string] [bindings]Context show>filterDescription Displays th
Filter Policies7750 SR OS Router Configuration Guide Page 415If the packet being logged does not have a source or destination MAC address (i.e., POS)
Show CommandsPage 416 7750 SR OS Router Configuration GuideSample Filter Log Output2005/11/24 16:23:09 Filter: 100:100 Desc: Entry-100
Filter Policies7750 SR OS Router Configuration Guide Page 417 Mac 8 06-06-06-06-06-06 Mac 8 06-06-06-06-06-05 Mac 8 06-0
Show CommandsPage 418 7750 SR OS Router Configuration GuideSample Output =============================================================================
Filter Policies7750 SR OS Router Configuration Guide Page 419Sample Detailed Output===================================================================
Router Configuration OverviewPage 42 7750 SR OS Router Configuration GuideRouter Configuration OverviewIn a 7750 SR, an interface is a logical named e
Show CommandsPage 420 7750 SR OS Router Configuration GuideDSAP : Undefined SSAP : Undefined Snap-pid
Filter Policies7750 SR OS Router Configuration Guide Page 421Filter Entry Counters Output — When the counters keyword is specified, the filter entry o
Show CommandsPage 422 7750 SR OS Router Configuration GuideEntry : 200 FrameType : 802.2SNAP Ing. Matches
Filter Policies7750 SR OS Router Configuration Guide Page 423Sample Output A:ALA-A>config>filter# show filter redirect-policy===================
Show CommandsPage 424 7750 SR OS Router Configuration GuideDestination : 10.10.10.105--------------------------------------------------------------
Filter Policies7750 SR OS Router Configuration Guide Page 425Clear CommandsipSyntax ip ip-filter-id [entry entry-id] [ingress | egress]Context clear&g
Clear CommandsPage 426 7750 SR OS Router Configuration GuidelogSyntax log log-idContext clearDescription Clears the contents of a memory or file based
Filter Policies7750 SR OS Router Configuration Guide Page 427Monitor CommandsfilterSyntax filter ip ip-filter-id entry entry-id [interval seconds] [re
Monitor CommandsPage 428 7750 SR OS Router Configuration GuideDefault 5 seconds Values 3 — 60repeat repeat — Configures how many times the command is
7750 SR OS Router Configuration Guide Page 429CflowdIn This ChapterThis chapter provides information to configure Cflowd.Topics in this chapter includ
IP Router Configuration7750 SR OS Router Configuration Guide Page 43CLI Command StructureFigure 11 displays the CLI command structure to configure rou
Cflowd OverviewPage 430 7750 SR OS Router Configuration GuideCflowd OverviewCflowd is a tool used to sample IP traffic data flows through a router. Cf
Cflowd7750 SR OS Router Configuration Guide Page 431OperationFigure 29 depicts the basic operation of the cflowd feature. This sample flow is only use
Cflowd OverviewPage 432 7750 SR OS Router Configuration GuideWhen a flow is exported from the cache, the collected data is sent to an external collect
Cflowd7750 SR OS Router Configuration Guide Page 433Figure 30 depicts V5 and V8 flow processing.Figure 30: V5 and V8 Flow Processing1. As flows are ex
Cflowd Configuration Process OverviewPage 434 7750 SR OS Router Configuration GuideCflowd Configuration Process OverviewFigure 31 displays the process
Cflowd7750 SR OS Router Configuration Guide Page 435Cflowd Configuration ComponentsFigure 32 displays the major components to configure Cflowd paramet
Cflowd Configuration ComponentsPage 436 7750 SR OS Router Configuration GuideFigure 33 displays the components to specify router interface cflowd para
Cflowd7750 SR OS Router Configuration Guide Page 437Configuration NotesThis section describes cflowd caveats.• Cflowd is enabled globally.• At least o
Configuration NotesPage 438 7750 SR OS Router Configuration GuideReference SourcesFor information on supported IETF drafts and standards, as well as s
Cflowd7750 SR OS Router Configuration Guide Page 439Configuring Cflowd with CLIThis section provides information to configure cflowd using the command
List of CommandsPage 44 7750 SR OS Router Configuration GuideList of CommandsTable 4 lists all the configuration commands to configure a 7750 SR-Serie
Page 440 7750 SR OS Router Configuration GuideCflowd Configuration OverviewThe 7750 SR OS implementation of cflowd supports the option to analyze traf
Cflowd7750 SR OS Router Configuration Guide Page 441Within the active flow cache, the following characteristics are used to identify an individual flo
Page 442 7750 SR OS Router Configuration Guide• Source-destination prefix — Flows are aggregated based on source prefix and mask, destination prefix a
Cflowd7750 SR OS Router Configuration Guide Page 443Cflowd CLI Command StructureThe 7750 SR OS cflowd command structure is displayed in Figure 35. Cfl
Page 444 7750 SR OS Router Configuration GuideList of CommandsTable 20 lists all the cflowd configuration commands indicating the configuration level
Cflowd7750 SR OS Router Configuration Guide Page 445protocol-portSpecifies that flows be aggregated based on the IP protocol, source port number, and
Page 446 7750 SR OS Router Configuration GuideBasic Cflowd ConfigurationThis section provides information to configure cflowd and configuration exampl
Cflowd7750 SR OS Router Configuration Guide Page 447Common Configuration TasksThis section provides a brief overview of the tasks that must be perform
Page 448 7750 SR OS Router Configuration GuideConfiguring Cflowd Use the CLI syntax displayed below to perform the following tasks:• Enabling Cflowd o
Cflowd7750 SR OS Router Configuration Guide Page 449Enabling CflowdCflowd is disabled by default. You must enter the no shutdown command to administra
IP Router Configuration7750 SR OS Router Configuration Guide Page 45autonomous-systemAssigns an autonomous system (AS) number to the router. 87confed
Page 450 7750 SR OS Router Configuration GuideConfiguring Global Cflowd ParametersThe following cflowd parameters apply to all instances where cflowd
Cflowd7750 SR OS Router Configuration Guide Page 451Configuring Cflowd CollectorsTo configure cflowd collector parameters, enter the following command
Page 452 7750 SR OS Router Configuration GuideThe following example displays the basic cflowd configuration:ALA-1>config>cflowd# info-----------
Cflowd7750 SR OS Router Configuration Guide Page 453Enabling Cflowd on Interfaces and FiltersThis section discusses the following cflowd configuration
Page 454 7750 SR OS Router Configuration GuideTable 21: Cflowd Configuration Dependencies Interface Setting router>interface cflowd [acl | interf
Cflowd7750 SR OS Router Configuration Guide Page 455Specifying Cflowd Options on an IP InterfaceWhen cflowd is enabled on an interface, all packets fo
Page 456 7750 SR OS Router Configuration GuideService InterfacesCLI Syntax: config>service>vpls service-id# interface ip-int-namecflowd {acl|int
Cflowd7750 SR OS Router Configuration Guide Page 457Specifying Sampling Options in Filter EntriesPackets are matched against filter entries to determi
Page 458 7750 SR OS Router Configuration GuideCflowd Configuration Management TasksThis section discusses the following cflowd configuration managemen
Cflowd7750 SR OS Router Configuration Guide Page 459Modifying Global Cflowd ComponentsCflowd parameter modifications apply to all instances where cflo
List of CommandsPage 46 7750 SR OS Router Configuration Guidestatic-arp Configures a static ARP entry associating an IP address with a MAC address fo
Page 460 7750 SR OS Router Configuration GuideModifying Cflowd Collector ParametersUse the following commands to modify cflowd collector and aggregati
Cflowd7750 SR OS Router Configuration Guide Page 461The following example displays the basic cflowd modifications:ALA-1>config>cflowd# info-----
Page 462 7750 SR OS Router Configuration Guide
Cflowd7750 SR OS Router Configuration Guide Page 463Cflowd Command ReferenceCommand HierarchiesConfiguration Commandsconfig— [no] cflowd— active-timeo
Cflowd Command ReferencePage 464 7750 SR OS Router Configuration Guide
Cflowd7750 SR OS Router Configuration Guide Page 465Cflowd Configuration CommandsGlobal CommandscflowdSyntax [no] cflowdContext config>cflowdDescri
Cflowd Configuration CommandsPage 466 7750 SR OS Router Configuration Guidecache-sizeSyntax cache-size num-entriesno cache-sizeContext config>cflow
Cflowd7750 SR OS Router Configuration Guide Page 467as-matrixSyntax [no] as-matrixContext config>cflowd>collector>aggregationDescription This
Cflowd Configuration CommandsPage 468 7750 SR OS Router Configuration Guidesource-destination-prefixSyntax [no] source-destination-prefixContext confi
Cflowd7750 SR OS Router Configuration Guide Page 469Default No description is associated with the configuration context.Parameters description-string
IP Router Configuration7750 SR OS Router Configuration Guide Page 47managed-configurationSets the managed address configuration flag. This flag indica
Cflowd Configuration CommandsPage 470 7750 SR OS Router Configuration GuideoverflowSyntax overflow percentno overflowContext config>cflowdDescripti
Cflowd7750 SR OS Router Configuration Guide Page 471Show CommandscollectorSyntax collector [ip-addr[:port]] [detail]Context show>cflowdDescription
Show CommandsPage 472 7750 SR OS Router Configuration GuideSample OutputALA-1# show cflowd collector 10.10.10.103:5===================================
Cflowd7750 SR OS Router Configuration Guide Page 473ALA-1# show cflowd collector 10.10.10.103:5 detail================================================
Show CommandsPage 474 7750 SR OS Router Configuration GuideOutput cflowd Interface Output — The following table describes the show cflowd interface ou
Cflowd7750 SR OS Router Configuration Guide Page 475Sample OutputALA-1>show>cflowd# status====================================================Cf
Clear CommandsPage 476 7750 SR OS Router Configuration GuideClear CommandscflowdSyntax cflowdContext clearDescription Clears the active and aggregatio
Standards and Protocols Page 715Standards and Protocol SupportStandards ComplianceIEEE 802.1d BridgingIEEE 802.1p/Q VLAN TaggingIEEE 802.1s Multiple S
Standards and ProtocolsPage 716 Standards and ProtocolsRFC 4644 Transmission of IPv6 Packets over Ethernet NetworksRFC 2529 Transmission of IPv6 over
Standards and ProtocolsStandards and Protocols Page 717VPLSdraft-ietf-l2vpn-vpls-ldp-08.txtVirtual Private LAN Services Using LDP PSEUDO-WIRERFC 3985
Basic ConfigurationPage 48 7750 SR OS Router Configuration GuideBasic ConfigurationNOTE: Refer to each specific chapter for specific routing protocol
Standards and ProtocolsPage 718 Standards and ProtocolsTIMETRA-VRTR-MIB.mib
7750 SR OS Router Configuration Guide Page 481IndexCCflowdoverview 430collectors 430filter matching 432operation 431V5 and V8 flow processing 433confi
IndexPage 482 7750 SR OS Router Configuration GuideVVRRPoverview 170components 171IP address owner 171IP addresses 172owner and non-owner 173virtual r
IP Router Configuration7750 SR OS Router Configuration Guide Page 49Common Configuration TasksThe following sections describe basic system tasks.• Con
7750 SR OS QoS Configuration Guide Page 5Table of Contents Non-Owner Access Telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Common Configuration TasksPage 50 7750 SR OS Router Configuration GuideThe following example displays the system name output.A#ALA-A>config>syst
IP Router Configuration7750 SR OS Router Configuration Guide Page 51Configuring InterfacesThe following command sequences create a system and a logica
Common Configuration TasksPage 52 7750 SR OS Router Configuration Guideconfig>router>if>egress# filter ip 10config>router>if>egress#
IP Router Configuration7750 SR OS Router Configuration Guide Page 53Configuring IPv6 ParametersTo configure IPv6 parameters, you must first:• The chas
Common Configuration TasksPage 54 7750 SR OS Router Configuration GuideThe following example displays IPv6 interface configuration command usage. Thes
IP Router Configuration7750 SR OS Router Configuration Guide Page 55Configuring IPv6 Over IPv4 ParametersThis section provides several examples of the
Common Configuration TasksPage 56 7750 SR OS Router Configuration GuideBoth the IPv4 and IPv6 system addresses must to configuredCLI Syntax: config>
IP Router Configuration7750 SR OS Router Configuration Guide Page 57Learning the Tunnel Endpoint IPv4 System AddressThis configuration displays the OS
Common Configuration TasksPage 58 7750 SR OS Router Configuration GuideConfiguring an IPv4 BGP PeerThis configuration display the commands to configur
IP Router Configuration7750 SR OS Router Configuration Guide Page 59An Example of a IPv6 Over IPv4 Tunnel ConfigurationThe IPv6 address is the next-ho
Page 6 7750 SR OS QoS Configuration GuideTable of ContentsWeb Redirection (Captive Portal). . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Common Configuration TasksPage 60 7750 SR OS Router Configuration Guide protocol ospf3 exit
IP Router Configuration7750 SR OS Router Configuration Guide Page 61Tunnel Egress NodeThis configuration shows how the interface through which the IPv
Common Configuration TasksPage 62 7750 SR OS Router Configuration GuideLearning the Tunnel Endpoint IPv4 System AddressThis configuration displays the
IP Router Configuration7750 SR OS Router Configuration Guide Page 63Configuring an IPv4 BGP PeerThis configuration display the commands to configure a
Common Configuration TasksPage 64 7750 SR OS Router Configuration GuideAn Example of a IPv6 Over IPv4 Tunnel ConfigurationThe IPv6 address is the next
IP Router Configuration7750 SR OS Router Configuration Guide Page 65 protocol ospf3 exit
Common Configuration TasksPage 66 7750 SR OS Router Configuration GuideRouter AdvertisementTo configure the router to originate router advertisement m
IP Router Configuration7750 SR OS Router Configuration Guide Page 67The following example displays router advertisement command usage. These commands
Common Configuration TasksPage 68 7750 SR OS Router Configuration GuideConfiguring Proxy ARPTo configure proxy ARP, you can configure:• A prefix list
IP Router Configuration7750 SR OS Router Configuration Guide Page 69Use the following CLI syntax to configure the policy statement specified in the pr
7750 SR OS QoS Configuration Guide Page 7Table of Contents Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Common Configuration TasksPage 70 7750 SR OS Router Configuration Guide exit exit...----------------------------------------
IP Router Configuration7750 SR OS Router Configuration Guide Page 71Creating an IP Address RangeAn IP address range can be reserved for exclusive use
Common Configuration TasksPage 72 7750 SR OS Router Configuration GuideDeriving the Router IDThe router ID defaults to the address specified in the sy
IP Router Configuration7750 SR OS Router Configuration Guide Page 73Configuring a ConfederationConfiguring a confederation is optional. The AS and con
Common Configuration TasksPage 74 7750 SR OS Router Configuration GuideNOTES: • Confederations can be preconfigured prior to configuring BGP connectio
IP Router Configuration7750 SR OS Router Configuration Guide Page 75Configuring an Autonomous SystemConfiguring an autonomous system is optional. Use
Service Management TasksPage 76 7750 SR OS Router Configuration GuideService Management TasksThis section discusses the following service management t
IP Router Configuration7750 SR OS Router Configuration Guide Page 77Modifying Interface ParametersStarting at the config>router level, navigate dow
Service Management TasksPage 78 7750 SR OS Router Configuration GuideDeleting a Logical IP InterfaceThe no form of the interface command typically rem
IP Router Configuration7750 SR OS Router Configuration Guide Page 79IP Router Command ReferenceCommand HierarchiesConfiguration Commands• Router Comma
Page 8 7750 SR OS QoS Configuration GuideTable of ContentsCflowd Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
IP Router Command ReferencePage 80 7750 SR OS Router Configuration GuideRouter Interface Commandsconfig—router [router-name]— [no] interface ip-int-na
IP Router Configuration7750 SR OS Router Configuration Guide Page 81For router interface VRRP commands, see “VRRP Command Reference” on page 223.Route
IP Router Command ReferencePage 82 7750 SR OS Router Configuration Guide—no retransmit-time— router-lifetime seconds—no router-lifetime— [no] shutdown
IP Router Configuration7750 SR OS Router Configuration Guide Page 83Show Commandsshow —router router-instance— aggregate [family] [active]— arp [ ip-i
IP Router Command ReferencePage 84 7750 SR OS Router Configuration GuideClear Commandsclear— router— arp {all | ip-addr | interface {ip-int-name | ip-
IP Router Configuration7750 SR OS Router Configuration Guide Page 85Configuration CommandsGeneric CommandsshutdownSyntax [no] shutdownContext config&g
Configuration CommandsPage 86 7750 SR OS Router Configuration GuideRouter Global CommandsrouterSyntax router router-nameContext configDescription This
IP Router Configuration7750 SR OS Router Configuration Guide Page 87d: [0 — 255]Dipv6-prefix-length 0 — 128Values maskThe mask associated with the net
Configuration CommandsPage 88 7750 SR OS Router Configuration GuideSyntax confederation confed-as-num members as-number [as-number...up to 15 max] no
IP Router Configuration7750 SR OS Router Configuration Guide Page 89ignore-icmp-redirectSyntax [no] ignore-icmp-redirectContext config>routerDescri
7750 SR OS Router Configuration Guide Page 9List of TablesGetting StartedTable 1: Configuration Process . . . . . . . . . . . . . . . . . . . . . . .
Configuration CommandsPage 90 7750 SR OS Router Configuration GuideTo force the new router ID to be used, issue the shutdown and no shutdown commands
IP Router Configuration7750 SR OS Router Configuration Guide Page 91d: [0 — 255]Dipv6-prefix-length: 0 — 128Values exclusiveWhen this option is speci
Configuration CommandsPage 92 7750 SR OS Router Configuration Guidex:x:x:x:x:x:d.d.d.dx [0 — FFFF]Hd [0 — 255]Dipv6-prefix-length 0 — 128ip-address —
IP Router Configuration7750 SR OS Router Configuration Guide Page 93The next-hop keyword and the indirect or black-hole keywords are mutually exclusiv
Configuration CommandsPage 94 7750 SR OS Router Configuration GuideDefault 5Values 1 — 255enable — Static routes can be administratively enabled or di
IP Router Configuration7750 SR OS Router Configuration Guide Page 95Router Interface CommandsinterfaceSyntax [no] interface ip-int-nameContext config&
Configuration CommandsPage 96 7750 SR OS Router Configuration GuideaddressSyntax address {ip-address/mask | ip-address netmask} [broadcast {all-ones |
IP Router Configuration7750 SR OS Router Configuration Guide Page 97addr, the “/” and the mask-length parameter. If a forward slash does not immediate
Configuration CommandsPage 98 7750 SR OS Router Configuration Guideallow-directed-broadcastsSyntax [no] allow-directed-broadcastsContext config>rou
IP Router Configuration7750 SR OS Router Configuration Guide Page 99The multiplier specifies the number of consecutive BFD messages that must be misse
Commenti su questo manuale