Juniper JUNOSE 11.0 Command Reference Manual

JUNOSe™ Software
for E Series™ Broadband Services Routers
Command Reference A to M
Release 11.0.x
Juniper Networks, Inc.
1194 North Mathilda Avenue
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Published: 2010-01-11
Juniper Networks, the Juniper Networks logo, JUNOS, NetScreen, ScreenOS, and Steel-Belted Radius are registered trademarks of Juniper Networks, Inc. in
the United States and other countries. JUNOSe is a trademark of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or
registered service marks are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or
otherwise revise this publication without notice.
Products made or sold by Juniper Networks or components thereof might be covered by one or more of the following patents that are owned by or licensed
to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347,
6,538,518, 6,538,899, 6,552,918, 6,567,902, 6,578,186, and 6,590,785.
JUNOSe™ Software for E Series™ Broadband Services Routers Command Reference Guide A to M
Release 11.0.x
Copyright © 2010, Juniper Networks, Inc.
All rights reserved. Printed in USA.
Writing: Subash Babu Asokan, Krupa Chandrashekar, Megha Shaseendran, Mark Barnard, Diane Florio, Bruce Gillham, Sarah Lesway-Ball, Brian Wesley
Simmons, Fran Singer, Chander Aima, Poornima Goswami, Hema Priya J, Sairam Venugopalan
Editing: Benjamin Mann
Illustration: Nathaniel Woodward
Cover Design: Edmonds Design
Revision History
January 2010—FRS JUNOSe 11.0.x
The information in this document is current as of the date listed in the revision history.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. The JUNOS Software has no known time-related limitations through the year
2038. However, the NTP application is known to have some difficulty in the year 2036.
ii
■
END USER LICENSE AGREEMENT
READ THIS END USER LICENSE AGREEMENT (“AGREEMENT”) BEFORE DOWNLOADING, INSTALLING, OR USING THE SOFTWARE. BY DOWNLOADING,
INSTALLING, OR USING THE SOFTWARE OR OTHERWISE EXPRESSING YOUR AGREEMENT TO THE TERMS CONTAINED HEREIN, YOU (AS CUSTOMER
OR IF YOU ARE NOT THE CUSTOMER, AS A REPRESENTATIVE/AGENT AUTHORIZED TO BIND THE CUSTOMER) CONSENT TO BE BOUND BY THIS
AGREEMENT. IF YOU DO NOT OR CANNOT AGREE TO THE TERMS CONTAINED HEREIN, THEN (A) DO NOT DOWNLOAD, INSTALL, OR USE THE SOFTWARE,
AND (B) YOU MAY CONTACT JUNIPER NETWORKS REGARDING LICENSE TERMS.
1. The Parties. The parties to this Agreement are (i) Juniper Networks, Inc. (if the Customer’s principal office is located in the Americas) or Juniper Networks
(Cayman) Limited (if the Customer’s principal office is located outside the Americas) (such applicable entity being referred to herein as “Juniper”), and (ii)
the person or organization that originally purchased from Juniper or an authorized Juniper reseller the applicable license(s) for use of the Software (“Customer”)
(collectively, the “Parties”).
2. The Software. In this Agreement, “Software” means the program modules and features of the Juniper or Juniper-supplied software, for which Customer
has paid the applicable license or support fees to Juniper or an authorized Juniper reseller, or which was embedded by Juniper in equipment which Customer
purchased from Juniper or an authorized Juniper reseller. “Software” also includes updates, upgrades and new releases of such software. “Embedded
Software” means Software which Juniper has embedded in or loaded onto the Juniper equipment and any updates, upgrades, additions or replacements
which are subsequently embedded in or loaded onto the equipment.
3. License Grant. Subject to payment of the applicable fees and the limitations and restrictions set forth herein, Juniper grants to Customer a non-exclusive
and non-transferable license, without right to sublicense, to use the Software, in executable form only, subject to the following use restrictions:
a. Customer shall use Embedded Software solely as embedded in, and for execution on, Juniper equipment originally purchased by Customer from Juniper
or an authorized Juniper reseller.
b. Customer shall use the Software on a single hardware chassis having a single processing unit, or as many chassis or processing units for which Customer
has paid the applicable license fees; provided, however, with respect to the Steel-Belted Radius or Odyssey Access Client software only, Customer shall use
such Software on a single computer containing a single physical random access memory space and containing any number of processors. Use of the
Steel-Belted Radius or IMS AAA software on multiple computers or virtual machines (e.g., Solaris zones) requires multiple licenses, regardless of whether
such computers or virtualizations are physically contained on a single chassis.
c. Product purchase documents, paper or electronic user documentation, and/or the particular licenses purchased by Customer may specify limits to
Customer’s use of the Software. Such limits may restrict use to a maximum number of seats, registered endpoints, concurrent users, sessions, calls,
connections, subscribers, clusters, nodes, realms, devices, links, ports or transactions, or require the purchase of separate licenses to use particular features,
functionalities, services, applications, operations, or capabilities, or provide throughput, performance, configuration, bandwidth, interface, processing,
temporal, or geographical limits. In addition, such limits may restrict the use of the Software to managing certain kinds of networks or require the Software
to be used only in conjunction with other specific Software. Customer’s use of the Software shall be subject to all such limitations and purchase of all applicable
licenses.
d. For any trial copy of the Software, Customer’s right to use the Software expires 30 days after download, installation or use of the Software. Customer
may operate the Software after the 30-day trial period only if Customer pays for a license to do so. Customer may not extend or create an additional trial
period by re-installing the Software after the 30-day trial period.
e. The Global Enterprise Edition of the Steel-Belted Radius software may be used by Customer only to manage access to Customer’s enterprise network.
Specifically, service provider customers are expressly prohibited from using the Global Enterprise Edition of the Steel-Belted Radius software to support any
commercial network access services.
The foregoing license is not transferable or assignable by Customer. No license is granted herein to any user who did not originally purchase the applicable
license(s) for the Software from Juniper or an authorized Juniper reseller.
4. Use Prohibitions. Notwithstanding the foregoing, the license provided herein does not permit the Customer to, and Customer agrees not to and shall
not: (a) modify, unbundle, reverse engineer, or create derivative works based on the Software; (b) make unauthorized copies of the Software (except as
necessary for backup purposes); (c) rent, sell, transfer, or grant any rights in and to any copy of the Software, in any form, to any third party; (d) remove
any proprietary notices, labels, or marks on or in any copy of the Software or any product in which the Software is embedded; (e) distribute any copy of
the Software to any third party, including as may be embedded in Juniper equipment sold in the secondhand market; (f) use any ‘locked’ or key-restricted
feature, function, service, application, operation, or capability without first purchasing the applicable license(s) and obtaining a valid key from Juniper, even
if such feature, function, service, application, operation, or capability is enabled without a key; (g) distribute any key for the Software provided by Juniper
to any third party; (h) use the Software in any manner that extends or is broader than the uses purchased by Customer from Juniper or an authorized Juniper
reseller; (i) use Embedded Software on non-Juniper equipment; (j) use Embedded Software (or make it available for use) on Juniper equipment that the
Customer did not originally purchase from Juniper or an authorized Juniper reseller; (k) disclose the results of testing or benchmarking of the Software to
any third party without the prior written consent of Juniper; or (l) use the Software in any manner other than as expressly provided herein.
5. Audit. Customer shall maintain accurate records as necessary to verify compliance with this Agreement. Upon request by Juniper, Customer shall furnish
such records to Juniper and certify its compliance with this Agreement.
■
iii
6. Confidentiality. The Parties agree that aspects of the Software and associated documentation are the confidential property of Juniper. As such, Customer
shall exercise all reasonable commercial efforts to maintain the Software and associated documentation in confidence, which at a minimum includes
restricting access to the Software to Customer employees and contractors having a need to use the Software for Customer’s internal business purposes.
7. Ownership. Juniper and Juniper’s licensors, respectively, retain ownership of all right, title, and interest (including copyright) in and to the Software,
associated documentation, and all copies of the Software. Nothing in this Agreement constitutes a transfer or conveyance of any right, title, or interest in
the Software or associated documentation, or a sale of the Software, associated documentation, or copies of the Software.
8. Warranty, Limitation of Liability, Disclaimer of Warranty. The warranty applicable to the Software shall be as set forth in the warranty statement that
accompanies the Software (the “Warranty Statement”). Nothing in this Agreement shall give rise to any obligation to support the Software. Support services
may be purchased separately. Any such support shall be governed by a separate, written support services agreement. TO THE MAXIMUM EXTENT PERMITTED
BY LAW, JUNIPER SHALL NOT BE LIABLE FOR ANY LOST PROFITS, LOSS OF DATA, OR COSTS OR PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES,
OR FOR ANY SPECIAL, INDIRECT, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THIS AGREEMENT, THE SOFTWARE, OR ANY JUNIPER OR
JUNIPER-SUPPLIED SOFTWARE. IN NO EVENT SHALL JUNIPER BE LIABLE FOR DAMAGES ARISING FROM UNAUTHORIZED OR IMPROPER USE OF ANY
JUNIPER OR JUNIPER-SUPPLIED SOFTWARE. EXCEPT AS EXPRESSLY PROVIDED IN THE WARRANTY STATEMENT TO THE EXTENT PERMITTED BY LAW,
JUNIPER DISCLAIMS ANY AND ALL WARRANTIES IN AND TO THE SOFTWARE (WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE), INCLUDING
ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT. IN NO EVENT DOES JUNIPER
WARRANT THAT THE SOFTWARE, OR ANY EQUIPMENT OR NETWORK RUNNING THE SOFTWARE, WILL OPERATE WITHOUT ERROR OR INTERRUPTION,
OR WILL BE FREE OF VULNERABILITY TO INTRUSION OR ATTACK. In no event shall Juniper’s or its suppliers’ or licensors’ liability to Customer, whether
in contract, tort (including negligence), breach of warranty, or otherwise, exceed the price paid by Customer for the Software that gave rise to the claim, or
if the Software is embedded in another Juniper product, the price paid by Customer for such other product. Customer acknowledges and agrees that Juniper
has set its prices and entered into this Agreement in reliance upon the disclaimers of warranty and the limitations of liability set forth herein, that the same
reflect an allocation of risk between the Parties (including the risk that a contract remedy may fail of its essential purpose and cause consequential loss),
and that the same form an essential basis of the bargain between the Parties.
9. Termination. Any breach of this Agreement or failure by Customer to pay any applicable fees due shall result in automatic termination of the license
granted herein. Upon such termination, Customer shall destroy or return to Juniper all copies of the Software and related documentation in Customer’s
possession or control.
10. Taxes. All license fees payable under this agreement are exclusive of tax. Customer shall be responsible for paying Taxes arising from the purchase of
the license, or importation or use of the Software. If applicable, valid exemption documentation for each taxing jurisdiction shall be provided to Juniper prior
to invoicing, and Customer shall promptly notify Juniper if their exemption is revoked or modified. All payments made by Customer shall be net of any
applicable withholding tax. Customer will provide reasonable assistance to Juniper in connection with such withholding taxes by promptly: providing Juniper
with valid tax receipts and other required documentation showing Customer’s payment of any withholding taxes; completing appropriate applications that
would reduce the amount of withholding tax to be paid; and notifying and assisting Juniper in any audit or tax proceeding related to transactions hereunder.
Customer shall comply with all applicable tax laws and regulations, and Customer will promptly pay or reimburse Juniper for all costs and damages related
to any liability incurred by Juniper as a result of Customer’s non-compliance or delay with its responsibilities herein. Customer’s obligations under this
Section shall survive termination or expiration of this Agreement.
11. Export. Customer agrees to comply with all applicable export laws and restrictions and regulations of any United States and any applicable foreign
agency or authority, and not to export or re-export the Software or any direct product thereof in violation of any such restrictions, laws or regulations, or
without all necessary approvals. Customer shall be liable for any such violations. The version of the Software supplied to Customer may contain encryption
or other capabilities restricting Customer’s ability to export the Software without an export license.
12. Commercial Computer Software. The Software is “commercial computer software” and is provided with restricted rights. Use, duplication, or disclosure
by the United States government is subject to restrictions set forth in this Agreement and as provided in DFARS 227.7201 through 227.7202-4, FAR 12.212,
FAR 27.405(b)(2), FAR 52.227-19, or FAR 52.227-14(ALT III) as applicable.
13. Interface Information. To the extent required by applicable law, and at Customer's written request, Juniper shall provide Customer with the interface
information needed to achieve interoperability between the Software and another independently created program, on payment of applicable fee, if any.
Customer shall observe strict obligations of confidentiality with respect to such information and shall use such information in compliance with any applicable
terms and conditions upon which Juniper makes such information available.
14. Third Party Software. Any licensor of Juniper whose software is embedded in the Software and any supplier of Juniper whose products or technology
are embedded in (or services are accessed by) the Software shall be a third party beneficiary with respect to this Agreement, and such licensor or vendor
shall have the right to enforce this Agreement in its own name as if it were Juniper. In addition, certain third party software may be provided with the
Software and is subject to the accompanying license(s), if any, of its respective owner(s). To the extent portions of the Software are distributed under and
subject to open source licenses obligating Juniper to make the source code for such portions publicly available (such as the GNU General Public License
(“GPL”) or the GNU Library General Public License (“LGPL”)), Juniper will make such source code portions (including Juniper modifications, as appropriate)
available upon request for a period of up to three years from the date of distribution. Such request can be made in writing to Juniper Networks, Inc., 1194
N. Mathilda Ave., Sunnyvale, CA 94089, ATTN: General Counsel. You may obtain a copy of the GPL at http://www.gnu.org/licenses/gpl.html, and
a copy of the LGPL at http://www.gnu.org/licenses/lgpl.html.
15. Miscellaneous. This Agreement shall be governed by the laws of the State of California without reference to its conflicts of laws principles. The provisions
of the U.N. Convention for the International Sale of Goods shall not apply to this Agreement. For any disputes arising under this Agreement, the Parties
hereby consent to the personal and exclusive jurisdiction of, and venue in, the state and federal courts within Santa Clara County, California. This Agreement
constitutes the entire and sole agreement between Juniper and the Customer with respect to the Software, and supersedes all prior and contemporaneous
iv
■
agreements relating to the Software, whether oral or written (including any inconsistent terms contained in a purchase order), except that the terms of a
separate written agreement executed by an authorized Juniper representative and Customer shall govern to the extent such terms are inconsistent or conflict
with terms contained herein. No modification to this Agreement nor any waiver of any rights hereunder shall be effective unless expressly assented to in
writing by the party to be charged. If any portion of this Agreement is held invalid, the Parties agree that such invalidity shall not affect the validity of the
remainder of this Agreement. This Agreement and associated documentation has been written in the English language, and the Parties agree that the English
version will govern. (For Canada: Les parties aux présentés confirment leur volonté que cette convention de même que tous les documents y compris tout
avis qui s'y rattaché, soient redigés en langue anglaise. (Translation: The parties confirm that this Agreement and all related documentation is and will be
in the English language)).
■
v
vi
■
Abbreviated Table of Contents
About the Documentation
Part 1
Commands, A to M
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Chapter 12
Chapter 13
Part 2
xxxix
Command Reference Topics
A Commands
B Commands
C Commands
D Commands
E Commands
F Commands
G Commands
H Commands
I Commands
K Commands
L Commands
M Commands
3
21
211
347
473
553
607
645
661
677
1127
1131
1243
Index
Index
1425
Abbreviated Table of Contents
■
vii
JUNOSe 11.0.x Command Reference Guide A to M
viii
■
Table of Contents
About the Documentation
xxxix
E Series and JUNOSe Documentation and Release Notes ..........................xxxix
Audience ..................................................................................................xxxix
E Series and JUNOSe Text and Syntax Conventions ..................................xxxix
Obtaining Documentation .............................................................................xli
Documentation Feedback ..............................................................................xli
Requesting Technical Support ........................................................................xli
Self-Help Online Tools and Resources ....................................................xlii
Opening a Case with JTAC ......................................................................xlii
Part 1
Commands, A to M
Chapter 1
Command Reference Topics
3
Using the no Version Versus the default Version of Commands ......................3
Deprecated Commands ...................................................................................4
Filtering show Commands ...............................................................................4
Interface Types and Specifiers .........................................................................5
Chapter 2
A Commands
21
aaa accounting acct-stop on-aaa-failure .........................................................22
aaa accounting acct-stop on-access-deny .......................................................23
aaa accounting broadcast ..............................................................................24
aaa accounting commands ............................................................................25
aaa accounting default ..................................................................................26
aaa accounting duplication ............................................................................27
aaa accounting exec ......................................................................................28
aaa accounting immediate-update .................................................................29
aaa accounting interval .................................................................................30
aaa accounting statistics ................................................................................31
aaa accounting suppress null-username ........................................................32
aaa accounting vr-group ................................................................................33
aaa authentication default .............................................................................34
aaa authentication enable default ..................................................................35
aaa authentication login ................................................................................36
aaa authorization ...........................................................................................37
aaa authorization config-commands ..............................................................38
Table of Contents
■
ix
JUNOSe 11.0.x Command Reference Guide A to M
aaa delimiter .................................................................................................39
aaa dhcpv6-delegated-prefix delegated-ipv6-prefix ........................................40
aaa dns ..........................................................................................................41
aaa domain-map ...........................................................................................42
aaa duplicate-address-check ..........................................................................43
aaa intf-desc-format include ..........................................................................44
aaa ipv6-dns ..................................................................................................45
aaa ipv6-nd-ra-prefix framed-ipv6-prefix .......................................................46
aaa local database .........................................................................................47
aaa local select database ...............................................................................48
aaa local username ........................................................................................49
aaa new-model ..............................................................................................50
aaa parse-direction ........................................................................................51
aaa parse-order .............................................................................................52
aaa profile .....................................................................................................53
aaa qos downstream-rate ..............................................................................54
aaa route-download .......................................................................................55
aaa route-download now ...............................................................................56
aaa route-download suspend .........................................................................57
aaa service accounting interval ......................................................................58
aaa subscriber limit per-port .........................................................................59
aaa subscriber limit per-vr .............................................................................60
aaa timeout ...................................................................................................61
aaa tunnel assignment-id-format ...................................................................62
aaa tunnel calling-number-format .................................................................63
aaa tunnel calling-number-format-fallback ....................................................66
aaa tunnel client-name ..................................................................................68
aaa tunnel-group ...........................................................................................69
aaa tunnel ignore ..........................................................................................70
aaa tunnel nas-port-method ..........................................................................71
aaa tunnel password .....................................................................................72
aaa tunnel switch-profile ...............................................................................73
aaa tunnel tx-connect-speed-method .............................................................74
aaa user accounting interval ..........................................................................75
aaa virtual-router ...........................................................................................76
aaa wins ........................................................................................................77
access-class in ...............................................................................................78
access-list ......................................................................................................79
accounting .....................................................................................................80
adapter accept ...............................................................................................81
adapter disable ..............................................................................................82
adapter enable ..............................................................................................83
adapter erase ................................................................................................84
address ..........................................................................................................85
address area ..................................................................................................86
address authentication key ............................................................................87
address authentication-key ............................................................................88
address authentication message-digest ..........................................................89
address authentication mode ........................................................................90
address authentication-none .........................................................................91
address bfd-liveness-detection .......................................................................92
x
■
Table of Contents
Table of Contents
address cost ..................................................................................................93
address dead-interval ....................................................................................94
address-family ...............................................................................................95
address hello-interval ....................................................................................97
address message-digest-key md5 ..................................................................98
address network ............................................................................................99
address passive-interface ............................................................................100
address-pool-name ......................................................................................101
address priority ...........................................................................................102
address receive version ...............................................................................103
address retransmit-interval ..........................................................................104
address send version ...................................................................................105
address transmit-delay ................................................................................106
adjustment-factor ........................................................................................107
agent context-name ....................................................................................108
aggregate-address .......................................................................................109
aggregation-node .........................................................................................110
aggressive-mode .........................................................................................111
allow ...........................................................................................................112
append-after ................................................................................................113
application ..................................................................................................114
aps events ...................................................................................................115
aps force .....................................................................................................116
aps group ....................................................................................................117
aps lockout ..................................................................................................118
aps manual ..................................................................................................119
aps protect ..................................................................................................120
aps revert ....................................................................................................121
aps unidirectional ........................................................................................122
aps working .................................................................................................123
area .............................................................................................................124
area-authentication .....................................................................................125
area-authentication-key ...............................................................................126
area default-cost ..........................................................................................127
area-message-digest-key ..............................................................................128
area nssa .....................................................................................................130
area range ...................................................................................................131
area stub .....................................................................................................132
area virtual-link ...........................................................................................133
area virtual-link authentication-key .............................................................134
area virtual-link authentication message-digest ...........................................135
area virtual-link authentication-none ...........................................................136
area virtual-link dead-interval ......................................................................137
area virtual-link hello-interval ......................................................................138
area virtual-link message-digest-key md5 ....................................................139
area virtual-link retransmit-interval .............................................................140
area virtual-link transmit-delay ....................................................................141
arp ..............................................................................................................142
arp spoof-check ...........................................................................................144
arp timeout .................................................................................................145
assured-rate .................................................................................................146
Table of Contents
■
xi
JUNOSe 11.0.x Command Reference Guide A to M
atm .............................................................................................................147
atm aal5 description ....................................................................................148
atm aal5 shutdown ......................................................................................149
atm aal5 snmp trap link-status ....................................................................150
atm atm1483 advisory-rx-speed ..................................................................151
atm atm1483 auto-configure .......................................................................152
atm atm1483 description ............................................................................153
atm atm1483 export-subinterface-description .............................................154
atm atm1483 mtu .......................................................................................155
atm atm1483 profile ...................................................................................156
atm atm1483 shutdown ..............................................................................157
atm atm1483 snmp trap link-status ............................................................158
atm atm1483 subscriber .............................................................................159
atm auto-configuration ................................................................................160
atm bulk-config ...........................................................................................161
atm bulk-config modify ...............................................................................162
atm bulk-config shutdown ...........................................................................163
atm cac .......................................................................................................164
atm cell-packing ..........................................................................................165
atm-cell-mode .............................................................................................166
atm classifier-list .........................................................................................167
atm class-vc .................................................................................................168
atm clock internal .......................................................................................169
atm description ...........................................................................................170
atm dos-protection-group ............................................................................171
atm framing ................................................................................................172
atm ilmi-enable ...........................................................................................173
atm ilmi-keepalive .......................................................................................174
atm lbo ........................................................................................................175
atm mcpt-timers .........................................................................................176
atm oam .....................................................................................................177
atm oam flush .............................................................................................178
atm oam loopback-location .........................................................................179
atm policy ...................................................................................................180
atm policy-list ..............................................................................................181
atm pvc .......................................................................................................182
atm shutdown .............................................................................................185
atm snmp trap link-status ............................................................................186
atm sonet stm-1 ..........................................................................................187
atm uni-version ...........................................................................................188
atm vc-per-vp ..............................................................................................189
atm vp-description ......................................................................................190
atm-vp qos-parameter .................................................................................191
atm-vp qos-profile .......................................................................................192
atm vp-tunnel ..............................................................................................193
authentication .............................................................................................194
authentication key .......................................................................................195
authentication-key .......................................................................................196
authentication message-digest .....................................................................197
authentication mode ...................................................................................198
authentication-none ....................................................................................199
xii
■
Table of Contents
Table of Contents
authorization ...............................................................................................200
authorization change ...................................................................................201
auth-router-name ........................................................................................202
auto-configure .............................................................................................203
auto-configure atm1483 ..............................................................................204
auto-configure vlan ......................................................................................205
auto-cost reference-bandwidth ....................................................................206
automatic-virtual-link ..................................................................................207
auto-summary .............................................................................................208
average-length-exponent .............................................................................209
avp ..............................................................................................................210
Chapter 3
B Commands
211
backup-address-pool-name ..........................................................................212
bandwidth ...................................................................................................213
bandwidth oversubscription ........................................................................214
banner ........................................................................................................215
baseline aaa ................................................................................................216
baseline aaa route-download .......................................................................217
baseline atm vp interface ............................................................................218
baseline bridge ............................................................................................219
baseline bridge interface .............................................................................220
baseline bridge interface vpls ......................................................................221
baseline clns ................................................................................................222
baseline cops ...............................................................................................223
baseline dhcp ..............................................................................................224
baseline frame-relay interface .....................................................................225
baseline frame-relay multilinkinterface .......................................................226
baseline hdlc interface .................................................................................227
baseline interface ........................................................................................228
baseline ip ...................................................................................................229
baseline ip bgp ............................................................................................230
baseline ip dhcp-external ............................................................................231
baseline ip dhcp-local ..................................................................................232
baseline ip dvmrp .......................................................................................233
baseline ip http ............................................................................................234
baseline ip igmp ..........................................................................................235
baseline ip igmp-proxy interface .................................................................236
baseline ip interface ....................................................................................237
baseline ip mobile home-agent ....................................................................238
baseline ip nat .............................................................................................239
baseline ip ospf ...........................................................................................240
baseline ip rip ..............................................................................................241
baseline ip tunnel-reassembly .....................................................................242
baseline ip udp ............................................................................................243
baseline ip vrrp ...........................................................................................244
baseline ipv6 ...............................................................................................245
baseline ipv6 dhcpv6-local ..........................................................................246
baseline ipv6 interface ................................................................................247
Table of Contents
■
xiii
JUNOSe 11.0.x Command Reference Guide A to M
baseline ipv6 local pool ...............................................................................248
baseline ipv6 mld ........................................................................................249
baseline ipv6 mld-proxy interface ...............................................................250
baseline ipv6 ospf .......................................................................................251
baseline ipv6 tcp .........................................................................................252
baseline line interface sonet ........................................................................253
baseline local pool .......................................................................................254
baseline log .................................................................................................255
baseline mpls interface ...............................................................................256
baseline mpls label ......................................................................................257
baseline mpls next-hop ...............................................................................258
baseline mpls tunnel ...................................................................................259
baseline path interface sonet .......................................................................260
baseline ppp interface .................................................................................261
baseline pppoe interface .............................................................................262
baseline radius ............................................................................................263
baseline radius dynamic-request .................................................................264
baseline radius relay ....................................................................................265
baseline section interface sonet ...................................................................266
baseline show-delta-counts ..........................................................................267
baseline snmp .............................................................................................268
baseline sscc ...............................................................................................269
baseline suspicious-control-flow-detection counts ........................................270
baseline tacacs ............................................................................................271
baseline tcp .................................................................................................272
bert .............................................................................................................273
bfd adapt .....................................................................................................274
bgp advertise-best-external-to-internal ........................................................275
bgp advertise-inactive .................................................................................276
bgp always-compare-med ...........................................................................277
bgp bestpath med confed ............................................................................278
bgp bestpath missing-as-worst ....................................................................279
bgp client-to-client reflection .......................................................................280
bgp cluster-id ...............................................................................................281
bgp confederation identifier ........................................................................282
bgp confederation peers ..............................................................................283
bgp dampening ...........................................................................................284
bgp default ipv4-unicast ..............................................................................285
bgp default local-preference ........................................................................286
bgp default route-target filter .......................................................................287
bgp enforce-first-as ......................................................................................288
bgp fast-external-fallover .............................................................................289
bgp graceful-restart .....................................................................................290
bgp graceful-restart path-selection-defer-time-limit ......................................291
bgp graceful-restart restart-time ..................................................................292
bgp graceful-restart stalepaths-time .............................................................293
bgp log-neighbor-changes ............................................................................294
bgp maxas-limit ..........................................................................................295
bgp redistribute-internal ..............................................................................296
bgp router-id ...............................................................................................297
bgp shutdown .............................................................................................298
xiv
■
Table of Contents
Table of Contents
bgp wait-on-end-of-rib .................................................................................299
boolean-test .................................................................................................300
boot backup ................................................................................................301
boot config ..................................................................................................302
boot force-backup .......................................................................................303
boot hotfix ..................................................................................................304
boot revert-tolerance ...................................................................................305
boot revert-tolerance never .........................................................................306
boot subsystem ...........................................................................................307
boot system ................................................................................................308
bridge1483 dos-protection-group ................................................................309
bridge1483 mtu ..........................................................................................310
bridge1483 service-profile ...........................................................................311
bridge ..........................................................................................................312
bridge acquire .............................................................................................313
bridge address .............................................................................................314
bridge aging-time ........................................................................................316
bridge crb ....................................................................................................317
bridge-group ................................................................................................318
bridge learn .................................................................................................319
bridge route .................................................................................................320
bridge snmp-trap link-status ........................................................................321
bridge subscriber-policy ..............................................................................322
bridge vpls rd ..............................................................................................323
bridge vpls route-target ...............................................................................325
bridge vpls site-name site-id ........................................................................327
bridge vpls site-range ..................................................................................328
bridge vpls transport-virtual-router ..............................................................329
broadcast ....................................................................................................330
buffer-weight ...............................................................................................331
bulkstats ......................................................................................................332
bulkstats collector ........................................................................................333
bulkstats file-format endOfLine-LF ..............................................................334
bulkstats interfaces description-format common .........................................335
bulkstats interfaces rfc1213 ........................................................................336
bulkstats interface-type ...............................................................................337
bulkstats receiver remote-name ..................................................................338
bulkstats schema .........................................................................................339
bulkstats schema subtree ............................................................................340
bulkstats schema subtree policy ..................................................................341
bulkstats traps .............................................................................................342
bulkstats virtual-router-group ......................................................................343
bundled-group-id .........................................................................................344
bundled-group-id-overrides-mlppp-ed ..........................................................345
Chapter 4
C Commands
347
cache entries ...............................................................................................348
cache timeout ..............................................................................................349
cablelength ..................................................................................................350
Table of Contents
■
xv
JUNOSe 11.0.x Command Reference Guide A to M
cbr ...............................................................................................................351
channelized .................................................................................................352
check-disk ...................................................................................................353
check-vpn-next-hops ...................................................................................354
classifier-group ............................................................................................355
class-int .......................................................................................................357
class-vc ........................................................................................................358
cleanup-timeout-factor ................................................................................359
clear access-list ............................................................................................360
clear arp ......................................................................................................361
clear bfd adapted-intervals ..........................................................................362
clear bfd session ..........................................................................................363
clear bgp ipv6 ..............................................................................................364
clear bgp ipv6 dampening ...........................................................................365
clear bgp ipv6 dynamic-peers ......................................................................367
clear bgp ipv6 redistribution ........................................................................368
clear bgp ipv6 wait-end-of-rib ......................................................................369
clear bridge .................................................................................................370
clear bridge address ....................................................................................371
clear bridge interface ...................................................................................372
clear bridge interface vpls ...........................................................................373
clear egress-queue .......................................................................................374
clear fabric-queue ........................................................................................375
clear ip bgp .................................................................................................376
clear ip bgp dampening ...............................................................................378
clear ip bgp dynamic-peers .........................................................................380
clear ip bgp redistribution ...........................................................................381
clear ip bgp wait-end-of-rib ..........................................................................382
clear ip demux ............................................................................................383
clear ip dhcp-local binding ...........................................................................384
clear ip dvmrp routes ..................................................................................385
clear ip flow stats ........................................................................................386
clear ip interface .........................................................................................387
clear ip isis redistribution ............................................................................388
clear ip mobile binding ................................................................................389
clear ip mroute ............................................................................................390
clear ip nat translation .................................................................................391
clear ip ospf database ..................................................................................393
clear ip ospf neighbor ..................................................................................394
clear ip ospf redistribution ...........................................................................395
clear ip pim auto-rp .....................................................................................396
clear ip pim interface count .........................................................................397
clear ip pim remote-neighbor count ............................................................398
clear ip prefix-list .........................................................................................399
clear ip prefix-tree .......................................................................................400
clear ip rip dynamic-interfaces ....................................................................401
clear ip rip redistribution .............................................................................402
clear ip routes .............................................................................................403
clear ip routes download .............................................................................404
clear ip tunnel-routes ...................................................................................405
clear ipv6 access-list ....................................................................................406
xvi
■
Table of Contents
Table of Contents
clear ipv6 bfd session ..................................................................................407
clear ipv6 interface ......................................................................................408
clear ipv6 mroute ........................................................................................409
clear ipv6 neighbors ....................................................................................410
clear ipv6 ospf counters ..............................................................................411
clear ipv6 ospf process ................................................................................412
clear ipv6 ospf redistribution .......................................................................413
clear ipv6 pim interface ...............................................................................414
clear ipv6 pim remote-neighbor ..................................................................415
clear ipv6 prefix-list .....................................................................................416
clear ipv6 routes ..........................................................................................417
clear ipv6 tunnel-routes ...............................................................................418
clear isis adjacency ......................................................................................419
clear isis database .......................................................................................420
clear isis ipv6 redistribution ........................................................................421
clear l2c discovery-table ..............................................................................422
clear l2c neighbor ........................................................................................423
clear line .....................................................................................................424
clear mirror log ...........................................................................................425
clear mpls dynamic-interfaces on-major-interfaces .....................................426
clear mpls ldp ..............................................................................................427
clear redundancy history .............................................................................428
clear rsvp authentication .............................................................................429
clear suspicious-control-flow-detection ........................................................430
client-name .................................................................................................431
clns configuration-time ................................................................................432
clns holding-time .........................................................................................433
clns host ......................................................................................................434
clock set ......................................................................................................435
clock source ................................................................................................436
clock summer-time date ..............................................................................437
clock summer-time recurring ......................................................................438
clock timezone ............................................................................................439
color ............................................................................................................440
color-aware .................................................................................................441
color-mark-profile ........................................................................................442
committed-action ........................................................................................443
committed-burst ..........................................................................................444
committed-drop-threshold ...........................................................................445
committed-length ........................................................................................446
committed-rate ...........................................................................................447
committed-threshold ...................................................................................448
common-name ............................................................................................449
configure .....................................................................................................450
confirmations explicit ..................................................................................451
conformed-action ........................................................................................452
conformed-drop-threshold ...........................................................................453
conformed-fraction .....................................................................................454
conformed-length ........................................................................................455
conformed-threshold ...................................................................................456
control-plane ...............................................................................................457
Table of Contents
■
xvii
JUNOSe 11.0.x Command Reference Guide A to M
controlled-interface-type .............................................................................458
controller e3 ................................................................................................459
controller sonet ...........................................................................................460
controller t3 ................................................................................................461
convergence-factor ......................................................................................462
copy ............................................................................................................463
copy running-configuration .........................................................................465
copy running-configuration startup-configuration ........................................466
copy startup-configuration ...........................................................................467
cost .............................................................................................................468
country ........................................................................................................469
crc ...............................................................................................................470
crl ................................................................................................................471
crypto key dss .............................................................................................472
Chapter 5
D Commands
473
data-character-bits .......................................................................................474
dead-interval ...............................................................................................475
deadtime .....................................................................................................476
debounce ....................................................................................................477
debounce-interval ........................................................................................478
debounce-time ............................................................................................479
debug ip bgp ...............................................................................................480
debug ip mbgp ............................................................................................482
debug ip ospf ..............................................................................................484
debug ip pim ...............................................................................................486
debug ip rip .................................................................................................488
debug ipv6 ospf ...........................................................................................489
debug ipv6 pim ...........................................................................................491
debug isis ....................................................................................................493
default-fields peer ........................................................................................495
default-fields route ......................................................................................497
default-information originate .......................................................................499
default-metric ..............................................................................................501
default-router ..............................................................................................502
default-upper-type mlppp ............................................................................503
delete ..........................................................................................................504
delta-sampling .............................................................................................505
deny ............................................................................................................506
description ..................................................................................................507
dhcp delete-binding .....................................................................................508
dhcp-external delete-binding .......................................................................511
dhcp-external duplicate-mac-address ..........................................................512
dhcpv6 delete-binding .................................................................................513
diag .............................................................................................................514
diag-level .....................................................................................................515
dir ...............................................................................................................516
disable .........................................................................................................517
disable-autosync ..........................................................................................518
xviii
■
Table of Contents
Table of Contents
disable-dynamic-redistribute .......................................................................519
disable-incremental-external-spf ..................................................................520
disable proxy lcp .........................................................................................521
disable-switch-on-error ................................................................................522
disconnect-cause .........................................................................................523
disconnect ssh .............................................................................................524
discovery-mode ...........................................................................................525
distance .......................................................................................................526
distance bgp ................................................................................................527
distance ip ...................................................................................................528
distribute-domain-wide ...............................................................................529
distribute-list ...............................................................................................530
dns-domain-search ......................................................................................531
dns-server ...................................................................................................532
dns-server (for IPv6) ....................................................................................533
do ................................................................................................................534
domain ........................................................................................................535
domain-authentication ................................................................................536
domain-authentication-key ..........................................................................537
domain-id ....................................................................................................538
domain-message-digest-key ........................................................................539
domain-name ..............................................................................................541
domain-suffix ..............................................................................................542
domain-tag ..................................................................................................543
dont-install-routes ........................................................................................544
dos-protection-group ...................................................................................545
drop-profile .................................................................................................546
ds3-scramble ...............................................................................................547
dsr-detect ....................................................................................................548
dsu bandwidth ............................................................................................549
dsu mode ....................................................................................................550
duplex .........................................................................................................551
dvmrp destination profile ............................................................................552
Chapter 6
E Commands
553
e3-scramble .................................................................................................554
enable .........................................................................................................555
enabled .......................................................................................................556
enable ipsec-transport .................................................................................557
enable password .........................................................................................558
enable proxy authenticate ...........................................................................559
enable secret ...............................................................................................560
encapsulation ..............................................................................................561
encapsulation bridge1483 ...........................................................................562
encapsulation frame-relay ietf .....................................................................563
encapsulation hdlc ......................................................................................564
encapsulation mlframe-relay ietf .................................................................565
encapsulation mlppp ...................................................................................566
encapsulation ppp .......................................................................................567
Table of Contents
■
xix
JUNOSe 11.0.x Command Reference Guide A to M
encapsulation pppoe ...................................................................................568
encapsulation vlan ......................................................................................569
encryption ...................................................................................................570
end ..............................................................................................................571
enrollment retry-limit ..................................................................................572
enrollment retry-period ...............................................................................573
enrollment url .............................................................................................574
equipment loopback ....................................................................................575
erase secrets ...............................................................................................576
ethernet description ....................................................................................577
ethernet dos-protection-group .....................................................................578
event ...........................................................................................................579
exceeded-action ..........................................................................................580
exceeded-drop-threshold .............................................................................581
exceeded-fraction ........................................................................................582
exceeded-length ..........................................................................................583
exceeded-threshold .....................................................................................584
exception dump ..........................................................................................585
exception gateway ......................................................................................586
exception http-redirect ................................................................................587
exception monitor .......................................................................................588
exception monitor interval ..........................................................................589
exception protocol ftp .................................................................................590
exception source .........................................................................................591
excess-burst ................................................................................................592
exclude-prefix .............................................................................................593
exclude-subsystem ......................................................................................594
exec-banner ................................................................................................595
exec-timeout ...............................................................................................596
existence-test ..............................................................................................597
exit ..............................................................................................................598
exit-address-family ......................................................................................599
exit-remote-neighbor ...................................................................................600
exp-mask ....................................................................................................601
export destination .......................................................................................602
export map .................................................................................................603
export source ..............................................................................................604
extended-authentication ..............................................................................605
external-paths .............................................................................................606
Chapter 7
F Commands
607
fabric-strict-priority .....................................................................................608
fabric-weight ...............................................................................................609
fabric weights ..............................................................................................610
failover-resync .............................................................................................611
filter ............................................................................................................612
flash-disk compare ......................................................................................613
flash-disk duplicate ......................................................................................614
flash-disk initialize .......................................................................................615
xx
■
Table of Contents
Table of Contents
flash-disk scan .............................................................................................616
forward .......................................................................................................617
forward interface .........................................................................................618
forward next-hop ........................................................................................619
forwarding-rate-threshold ............................................................................620
forwarding-table route-holddown ................................................................621
frame-relay class .........................................................................................622
frame-relay classifier-list ..............................................................................623
frame-relay description ...............................................................................624
frame-relay dos-protection-group ................................................................625
frame-relay fragment ..................................................................................626
frame-relay interface-dlci ietf ......................................................................627
frame-relay intf-type ....................................................................................628
frame-relay keepalive ..................................................................................629
frame-relay lmi-n391dte ..............................................................................630
frame-relay lmi-n392dce .............................................................................631
frame-relay lmi-n392dte ..............................................................................632
frame-relay lmi-n393dce .............................................................................633
frame-relay lmi-n393dte ..............................................................................634
frame-relay lmi-t391dte ...............................................................................635
frame-relay lmi-t392dce ..............................................................................636
frame-relay lmi-type ....................................................................................637
frame-relay policy .......................................................................................638
frame-relay policy-list ..................................................................................639
framing .......................................................................................................640
frequency ....................................................................................................641
ftp-server enable .........................................................................................642
ftp-server flush ............................................................................................643
full-spf-always .............................................................................................644
Chapter 8
G Commands
645
global export map .......................................................................................646
global import map .......................................................................................647
graceful-restart ............................................................................................648
graceful-restart helper .................................................................................649
graceful-restart helper-abort-topology-change ..............................................650
graceful-restart notify-time ..........................................................................651
graceful-restart restart-time .........................................................................652
grace-period ................................................................................................653
gre destination profile .................................................................................654
green-mark ..................................................................................................655
gre-tunnel classifier-list ................................................................................656
gre-tunnel policy .........................................................................................657
gre-tunnel policy-list ....................................................................................658
group ...........................................................................................................659
gsmp-syn-timeout .......................................................................................660
Table of Contents
■
xxi
JUNOSe 11.0.x Command Reference Guide A to M
Chapter 9
H Commands
661
halt ..............................................................................................................662
hash ............................................................................................................663
hdlc dos-protection-group ............................................................................664
hdlc down-when-looped ..............................................................................665
hdlc keepalive .............................................................................................666
hdlc shutdown .............................................................................................667
hello hold-time ............................................................................................668
hello interval ...............................................................................................669
hello-interval ...............................................................................................670
help .............................................................................................................671
hops-of-statistics-kept ..................................................................................672
host .............................................................................................................673
hostname ....................................................................................................674
hotfix activate .............................................................................................675
Chapter 10
I Commands
677
id .................................................................................................................678
identification ...............................................................................................679
idle-character ..............................................................................................680
igmp disable ................................................................................................681
igmp promiscuous .......................................................................................682
ignore-lsp-errors ..........................................................................................683
ike crl ..........................................................................................................684
ike local-identity ..........................................................................................685
ike peer-identity distinguished-name ...........................................................686
ike peer-identity domain-name ...................................................................687
ike peer-identity ip address .........................................................................688
ike peer-identity username ..........................................................................689
import map .................................................................................................690
inarp ...........................................................................................................691
include circuit-identifier ...............................................................................692
include dhcp-option 82 ................................................................................693
include hostname ........................................................................................694
include ip-address .......................................................................................695
include mac-address ....................................................................................696
include virtual-router-name .........................................................................697
index ...........................................................................................................698
instance-interface-type ................................................................................699
interface ......................................................................................................700
interface atm ...............................................................................................701
interface-event-disable ................................................................................702
interface fastEthernet ..................................................................................703
interface gigabitEthernet .............................................................................704
interface ip ..................................................................................................705
interface ipv6 ..............................................................................................706
interface lag ................................................................................................707
xxii
■
Table of Contents
Table of Contents
interface loopback .......................................................................................708
interface mlframe-relay ...............................................................................709
interface mlppp ...........................................................................................710
interface null ...............................................................................................711
interface pos ...............................................................................................712
interface serial .............................................................................................713
interface tenGigabitEthernet ........................................................................714
interface tunnel ...........................................................................................715
invert data ...................................................................................................716
ip .................................................................................................................717
ip access-routes ...........................................................................................718
ip access-route table-map ............................................................................719
ip address ....................................................................................................720
ip-address ....................................................................................................721
ip address-pool ............................................................................................722
ip-address-pool ............................................................................................723
ip address virtual-router ..............................................................................724
ip alwaysup .................................................................................................725
ip analyzer ..................................................................................................726
ip as-path access-list ....................................................................................727
ip atm-vc .....................................................................................................729
ip auto-configure ip-subscriber ....................................................................730
ip auto-detect ip-subscriber .........................................................................731
ip bgp-community new-format ....................................................................732
ip bgp-confed-as-set new-format .................................................................733
ip block-multicast-sources ...........................................................................734
ip broadcast-address ...................................................................................735
ip classifier-list .............................................................................................736
ip community-list ........................................................................................739
ip debounce-time ........................................................................................740
ip demux-type da-prefix ..............................................................................741
ip description ..............................................................................................742
ip destination-prefix ....................................................................................743
ip dhcp-capture ...........................................................................................744
ip dhcp-external auto-configure ...................................................................745
ip dhcp-external disregard-giaddr-next-hop .................................................746
ip dhcp-external recreate-subscriber-interface .............................................747
ip dhcp-external server-address ...................................................................748
ip dhcp-external server-sync .......................................................................749
ip dhcp-local auth domain ...........................................................................750
ip dhcp-local auth include ............................................................................751
ip dhcp-local auth password ........................................................................752
ip dhcp-local auth user-prefix ......................................................................753
ip dhcp-local auto-configure agent-circuit-identifier .....................................754
ip dhcp-local cable-modem ..........................................................................755
ip dhcp-local excluded-address ....................................................................756
ip dhcp-local limit ........................................................................................757
ip dhcp-local pool ........................................................................................758
ip dhcp-local snmpTraps .............................................................................759
ip dhcp-local unique-client-ids .....................................................................760
ip dhcp-server .............................................................................................761
Table of Contents
■
xxiii
JUNOSe 11.0.x Command Reference Guide A to M
ip directed-broadcast ...................................................................................762
ip disable-forwarding ...................................................................................763
ip domain-lookup ........................................................................................764
ip domain-name ..........................................................................................765
ip dos-protection-group ...............................................................................766
ip dvmrp .....................................................................................................767
ip dvmrp accept-filter ..................................................................................768
ip dvmrp announce-filter .............................................................................769
ip dvmrp auto-summary ..............................................................................770
ip dvmrp disable .........................................................................................771
ip dvmrp metric-offset .................................................................................772
ip dvmrp route-hog-notification ...................................................................773
ip dvmrp route-limit ....................................................................................774
ip dvmrp summary-address ........................................................................775
ip dvmrp unicast-routing .............................................................................776
ip dynamic-interface-prefix .........................................................................777
ip explicit-path ............................................................................................778
ip extcommunity-list ...................................................................................779
ip fallback global .........................................................................................780
ip filter-options all .......................................................................................781
ip flow-aggregation cache ............................................................................782
ip flow-cache entries ...................................................................................783
ip flow-cache timeout ..................................................................................784
ip flow-export ..............................................................................................785
ip flow-sampling-mode packet-interval ........................................................786
ip flow statistics ...........................................................................................787
ip ftp source-address ...................................................................................788
ip ftp source-interface .................................................................................789
ip-hint .........................................................................................................790
ip http .........................................................................................................791
ip http access-class ......................................................................................792
ip http max-connection-time .......................................................................793
ip http port ..................................................................................................794
ip http redirectUrl ........................................................................................795
ip http same-host-limit ................................................................................796
ip http server ...............................................................................................797
ip icmp update-source .................................................................................798
ip igmp ........................................................................................................799
ip igmp access-group ...................................................................................800
ip igmp access-source-group .......................................................................801
ip igmp apply-oif-map .................................................................................802
ip igmp explicit-tracking ..............................................................................803
ip igmp group limit ......................................................................................804
ip igmp immediate-leave .............................................................................805
ip igmp last-member-query-interval ............................................................806
ip igmp oif-map ...........................................................................................807
ip igmp promiscuous ...................................................................................808
ip igmp-proxy ..............................................................................................809
ip igmp-proxy unsolicited-report-interval .....................................................810
ip igmp-proxy V1-router-present-time .........................................................811
ip igmp querier ............................................................................................812
xxiv
■
Table of Contents
Table of Contents
ip igmp querier-timeout ..............................................................................813
ip igmp query-interval .................................................................................814
ip igmp query-max-response-time ...............................................................815
ip igmp robustness ......................................................................................816
ip igmp ssm-map enable .............................................................................817
ip igmp ssm-map static ...............................................................................818
ip igmp static-exclude .................................................................................819
ip igmp static-group ....................................................................................820
ip igmp static-include ..................................................................................821
ip igmp version ...........................................................................................822
ip ignore-df-bit .............................................................................................823
ip inactivity-timer ........................................................................................824
ip initial-sequence-preference ......................................................................825
ip interface ..................................................................................................826
ip irdp .........................................................................................................827
ip local alias .................................................................................................828
ip local pool .................................................................................................829
ip local pool snmpTrap ................................................................................830
ip local pool warning ...................................................................................831
ip local shared-pool .....................................................................................832
ip mac-validate ............................................................................................833
ip mask-reply ..............................................................................................834
ip match-policy-list ......................................................................................835
ip mirror ......................................................................................................836
ip mobile home-agent .................................................................................837
ip mobile host .............................................................................................838
ip mobile profile ..........................................................................................839
ip mobile secure foreign-agent ....................................................................840
ip mobile secure host ..................................................................................841
ip mpls forwarding-mode label-switched .....................................................843
ip mtu .........................................................................................................844
ip multicast admission-bandwidth-limit .......................................................845
ip multicast ioa-packet-replication ...............................................................846
ip multicast-routing .....................................................................................847
ip multicast-routing bandwidth-map ............................................................848
ip multicast-routing disable-rpf-check ..........................................................849
ip multicast-routing permanent-mroute .......................................................850
ip multipath round-robin .............................................................................851
ip name-server ............................................................................................852
ip nat ...........................................................................................................853
ip nat inside source list ................................................................................854
ip nat inside source static ............................................................................855
ip nat outside source list ..............................................................................856
ip nat outside source static ..........................................................................857
ip nat pool ...................................................................................................858
ip nat translation .........................................................................................859
ip nat translation max-entries .....................................................................860
ip nfs ...........................................................................................................861
ip nfs host ...................................................................................................862
ip ospf authentication-key ...........................................................................863
ip ospf authentication message-digest .........................................................864
Table of Contents
■
xxv
JUNOSe 11.0.x Command Reference Guide A to M
ip ospf authentication-none .........................................................................865
ip ospf bfd-liveness-detection ......................................................................866
ip ospf cost ..................................................................................................867
ip ospf dead-interval ....................................................................................868
ip ospf hello-interval ....................................................................................869
ip ospf message-digest-key md5 ..................................................................870
ip ospf network ...........................................................................................871
ip ospf priority .............................................................................................872
ip ospf retransmit-interval ...........................................................................873
ip ospf shutdown .........................................................................................874
ip ospf transmit-delay ..................................................................................875
ip pim .........................................................................................................876
ip pim bfd-liveness-detection .......................................................................877
ip pim bsr-candidate ...................................................................................878
ip pim data-mdt ..........................................................................................879
ip pim dr-priority .........................................................................................880
ip pim group-address-pool ...........................................................................881
ip pim join-filter ..........................................................................................882
ip pim join-prune-interval ............................................................................883
ip pim query-interval ...................................................................................884
ip pim rp-address ........................................................................................885
ip pim rp-candidate .....................................................................................886
ip pim send-rp-announce ............................................................................887
ip pim send-rp-discovery scope ...................................................................888
ip pim sparse-mode graceful-restart-duration ..............................................889
ip pim spt-threshold ....................................................................................890
ip pim ssm ..................................................................................................891
ip policy ......................................................................................................892
ip policy-list .................................................................................................894
ip policy-parameter hierarchical ..................................................................895
ip policy-parameter reference-rate ..............................................................896
ip prefix-list .................................................................................................897
ip prefix-tree ...............................................................................................898
ip profile ......................................................................................................899
ip proxy-arp ................................................................................................900
ip re-authenticate-auto-detect ip-subscriber .................................................901
ip redirects ..................................................................................................902
ip refresh-route ............................................................................................903
ip rip ...........................................................................................................904
ip rip authentication key .............................................................................905
ip rip authentication mode ..........................................................................906
ip rip bfd-liveness-detection ........................................................................907
ip rip copy-to-dynamic ................................................................................908
ip rip receive version ...................................................................................909
ip rip send version .......................................................................................910
ip route .......................................................................................................911
ip route-cache flow sampled ........................................................................913
ip route-map ip-subscriber ..........................................................................914
ip route-type ................................................................................................915
ip router-id ..................................................................................................916
ip router isis ................................................................................................917
xxvi
■
Table of Contents
Table of Contents
ip-router-name ............................................................................................918
ip rpf-route ..................................................................................................919
ip rsvp authentication ..................................................................................920
ip rsvp authentication key ...........................................................................921
ip rsvp bandwidth .......................................................................................922
ip rsvp bfd-liveness-detection ......................................................................923
ip rsvp signalling hello .................................................................................924
ip sa-validate ...............................................................................................925
ip sa-validate trap-enable .............................................................................926
ip service-profile ..........................................................................................927
ip share-interface ........................................................................................928
ip share-nexthop .........................................................................................929
ip shutdown ................................................................................................930
ip source-prefix ...........................................................................................931
ip source-route ............................................................................................932
ip speed ......................................................................................................933
ip split-horizon ............................................................................................934
ip ssh authentication-retries ........................................................................935
ip ssh crypto ................................................................................................936
ip ssh disable-user-authentication ................................................................937
ip ssh mac ...................................................................................................938
ip ssh sleep ..................................................................................................939
ip ssh timeout .............................................................................................940
ip ssh user-authentication-protocol ..............................................................941
ip static-route table-map ..............................................................................942
ip summary-address ....................................................................................943
ip tcp ack-rst-and-syn ..................................................................................944
ip tcp adjust-mss .........................................................................................945
ip ttl ............................................................................................................946
ip tunnel reassembly ...................................................................................947
ip unnumbered ...........................................................................................948
ip unreachables ...........................................................................................949
ip use-framed-routes ip-subscriber ..............................................................950
ip virtual-router ...........................................................................................951
ip vrf ...........................................................................................................952
ip vrf forwarding .........................................................................................953
ip vrrp .........................................................................................................954
ip vrrp accept-data ......................................................................................955
ip vrrp advertise-interval .............................................................................956
ip vrrp authentication-key ...........................................................................957
ip vrrp authentication-type ..........................................................................958
ip vrrp enable ..............................................................................................959
ip vrrp icr-partition ......................................................................................960
ip vrrp icr-partition group ............................................................................961
ip vrrp icr-partition svlan-list .......................................................................962
ip vrrp icr-partition svlan-list explicit ...........................................................963
ip vrrp icr-partition svlan-range ...................................................................964
ip vrrp icr-partition vlan-list .........................................................................965
ip vrrp icr-partition vlan-range .....................................................................966
ip vrrp preempt ...........................................................................................968
ip vrrp priority .............................................................................................969
Table of Contents
■
xxvii
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp timers-learn .....................................................................................970
ip vrrp track ................................................................................................971
ip vrrp virtual-address .................................................................................972
ipsec ca authenticate ...................................................................................973
ipsec ca enroll .............................................................................................974
ipsec ca identity ..........................................................................................975
ipsec certificate-database refresh ................................................................976
ipsec certificate-request generate ................................................................977
ipsec clear sa ...............................................................................................978
ipsec crl .......................................................................................................979
ipsec identity ...............................................................................................980
ipsec ike-policy-rule .....................................................................................981
ipsec isakmp-policy-rule ..............................................................................982
ipsec key generate .......................................................................................983
ipsec key manual pre-share .........................................................................984
ipsec key pubkey-chain rsa .........................................................................985
ipsec key zeroize .........................................................................................986
ipsec lifetime ...............................................................................................987
ipsec local-endpoint .....................................................................................988
ipsec option dpd ..........................................................................................989
ipsec option nat-t ........................................................................................990
ipsec option tx-invalid-cookie ......................................................................991
ipsec transform-set ......................................................................................992
ipsec transport profile .................................................................................993
ipsec tunnel profile ......................................................................................994
ipv6 .............................................................................................................995
ipv6 access-list ............................................................................................996
ipv6 access-route table-map ........................................................................997
ipv6 address ................................................................................................998
ipv6 address-pool local ................................................................................999
ipv6 block-multicast-sources ......................................................................1000
ipv6 classifier-list .......................................................................................1001
ipv6 description ........................................................................................1003
ipv6 dhcpv6-local delegated-prefix ............................................................1004
ipv6 dhcpv6-local dns-domain-search ........................................................1005
ipv6 dhcpv6-local dns-server .....................................................................1006
ipv6 dhcpv6-local prefix-lifetime ...............................................................1007
ipv6 dos-protection-group .........................................................................1008
ipv6 enable ...............................................................................................1009
ipv6 hop-limit ............................................................................................1010
ipv6 http ....................................................................................................1011
ipv6 http port ............................................................................................1012
ipv6 http redirectUrl ..................................................................................1013
ipv6 http server .........................................................................................1014
ipv6 initial-sequence-preference ................................................................1015
ipv6-local-interface ....................................................................................1016
ipv6 local pool ...........................................................................................1017
ipv6 mld ....................................................................................................1018
ipv6 mld access-group ...............................................................................1019
ipv6 mld access-source-group ....................................................................1020
ipv6 mld apply-oif-map .............................................................................1021
xxviii
■
Table of Contents
Table of Contents
ipv6 mld explicit-tracking ..........................................................................1022
ipv6 mld group limit ..................................................................................1023
ipv6 mld immediate-leave .........................................................................1024
ipv6 mld last-member-query-interval ........................................................1025
ipv6 mld oif-map .......................................................................................1026
ipv6 mld-proxy ..........................................................................................1027
ipv6 mld-proxy unsolicited-report-interval .................................................1028
ipv6 mld-proxy version .............................................................................1029
ipv6 mld querier-timeout ...........................................................................1030
ipv6 mld query-interval .............................................................................1031
ipv6 mld query-max-response-time ...........................................................1032
ipv6 mld robustness ..................................................................................1033
ipv6 mld ssm-map enable .........................................................................1034
ipv6 mld ssm-map static ...........................................................................1035
ipv6 mld static-exclude ..............................................................................1036
ipv6 mld static-group .................................................................................1037
ipv6 mld static-include ..............................................................................1038
ipv6 mld version .......................................................................................1039
ipv6 mtu ....................................................................................................1040
ipv6 multicast admission-bandwidth-limit .................................................1041
ipv6 multicast ioa-packet-replication .........................................................1042
ipv6 multicast-routing ...............................................................................1043
ipv6 multicast-routing bandwidth-map ......................................................1044
ipv6 multicast-routing disable-rpf-check ....................................................1045
ipv6 multicast-routing permanent-mroute .................................................1046
ipv6 nd ......................................................................................................1047
ipv6 nd active-solicitations ........................................................................1048
ipv6 nd dad attempts ................................................................................1049
ipv6 nd managed-config-flag .....................................................................1050
ipv6 nd ns-interval ....................................................................................1051
ipv6 nd other-config-flag ...........................................................................1052
ipv6 nd prefix-advertisement ....................................................................1053
ipv6 nd proxy ............................................................................................1054
ipv6 nd ra-interval .....................................................................................1055
ipv6 nd ra-lifetime .....................................................................................1056
ipv6 nd reachable-time ..............................................................................1057
ipv6 nd suppress-ra ...................................................................................1058
ipv6 nd suppress-ra-source-link-layer ........................................................1059
ipv6 neighbor ............................................................................................1060
ipv6 ospf area ...........................................................................................1061
ipv6 ospf bfd-liveness-detection ................................................................1062
ipv6 ospf cost ............................................................................................1063
ipv6 ospf dead-interval ..............................................................................1064
ipv6 ospf hello-interval ..............................................................................1065
ipv6 ospf mtu-ignore .................................................................................1066
ipv6 ospf network .....................................................................................1067
ipv6 ospf priority .......................................................................................1068
ipv6 ospf retransmit-interval .....................................................................1069
ipv6 ospf shutdown ...................................................................................1070
ipv6 ospf transmit-delay ............................................................................1071
ipv6 pim bfd-liveness-detection .................................................................1072
Table of Contents
■
xxix
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 pim bsr-candidate ..............................................................................1073
ipv6 pim dr-priority ...................................................................................1074
ipv6 pim join-filter .....................................................................................1075
ipv6 pim join-prune-interval ......................................................................1076
ipv6 pim query-interval .............................................................................1077
ipv6 pim rp-address ..................................................................................1078
ipv6 pim rp-candidate ...............................................................................1079
ipv6 pim sparse-mode ...............................................................................1080
ipv6 pim sparse-mode graceful-restart-duration ........................................1081
ipv6 pim spt-threshold ..............................................................................1082
ipv6 pim ssm ............................................................................................1083
ipv6 policy .................................................................................................1084
ipv6 policy-list ...........................................................................................1086
ipv6 policy-parameter hierarchical ............................................................1087
ipv6 policy-parameter reference-rate .........................................................1088
ipv6 prefix-list ...........................................................................................1089
ipv6-prefix-pool-name ...............................................................................1090
ipv6 route ..................................................................................................1091
ipv6 router isis ..........................................................................................1092
ipv6 router mld .........................................................................................1093
ipv6-router-name ......................................................................................1094
ipv6 router ospf .........................................................................................1095
ipv6 router pim .........................................................................................1096
ipv6 route-type ..........................................................................................1097
ipv6 rpf-route ............................................................................................1098
ipv6 sa-validate .........................................................................................1099
ipv6 share-interface ...................................................................................1100
ipv6 static-route table-map ........................................................................1101
ipv6 unnumbered ......................................................................................1102
ipv6 virtual-router ......................................................................................1103
isis authentication-key ...............................................................................1104
isis bfd-liveness-detection ..........................................................................1105
isis circuit-type ..........................................................................................1106
isis csnp-interval ........................................................................................1107
isis hello-interval .......................................................................................1108
isis hello-multiplier ....................................................................................1109
isis hello padding .......................................................................................1110
isis lsp-interval ..........................................................................................1111
isis mesh-group .........................................................................................1112
isis message-digest-key .............................................................................1113
isis metric ..................................................................................................1115
isis network point-to-point .........................................................................1116
isis priority ................................................................................................1117
isis retransmit-interval ...............................................................................1118
isis retransmit-throttle-interval ..................................................................1119
isis tag .......................................................................................................1120
issuer-identifier .........................................................................................1121
issu initialize ..............................................................................................1122
issu start ....................................................................................................1123
issu stop ....................................................................................................1124
is-type .......................................................................................................1125
xxx
■
Table of Contents
Table of Contents
Chapter 11
K Commands
1127
key ............................................................................................................1128
key-string ..................................................................................................1130
Chapter 12
L Commands
1131
l2c .............................................................................................................1132
l2c end-user-id ...........................................................................................1133
l2c ip listen ................................................................................................1134
l2c ip oif ....................................................................................................1135
l2c line-configuration .................................................................................1136
l2c max-branches ......................................................................................1137
l2c oam .....................................................................................................1138
l2c peer-attachment-id ..............................................................................1139
l2tp checksum ...........................................................................................1140
l2tp classifier-list ........................................................................................1141
l2tp destination lockout-test ......................................................................1142
l2tp destination lockout-timeout ................................................................1143
l2tp destination profile ..............................................................................1144
l2tp destruct-timeout .................................................................................1145
l2tp dial-out connecting-timer-value ..........................................................1146
l2tp dial-out dormant-timer-value ..............................................................1147
l2tp dial-out max-buffered-triggers ............................................................1148
l2tp dial-out session delete ........................................................................1149
l2tp dial-out session reset ..........................................................................1150
l2tp dial-out target .....................................................................................1151
l2tp disable calling-number-avp .................................................................1152
l2tp disable challenge ................................................................................1153
l2tp disconnect-cause ................................................................................1154
l2tp drain ..................................................................................................1155
l2tp drain destination ................................................................................1156
l2tp drain tunnel ........................................................................................1157
l2tp failover-resync ....................................................................................1158
l2tp fail-over-within-preference .................................................................1159
l2tp ignore-receive-data-sequencing ..........................................................1160
l2tp ignore-transmit-address-change .........................................................1161
l2tp policy .................................................................................................1162
l2tp policy-list ............................................................................................1163
l2tp policy-parameter hierarchical .............................................................1164
l2tp policy-parameter reference-rate .........................................................1165
l2tp reject-transmit-address-change ...........................................................1166
l2tp retransmission ...................................................................................1167
l2tp rx-connect-speed-when-equal .............................................................1168
l2tp shutdown ...........................................................................................1169
l2tp shutdown destination .........................................................................1170
l2tp shutdown session ...............................................................................1171
l2tp shutdown tunnel ................................................................................1172
l2tp switch-profile ......................................................................................1173
Table of Contents
■
xxxi
JUNOSe 11.0.x Command Reference Guide A to M
l2tp tunnel default-receive-window ...........................................................1174
l2tp tunnel idle-timeout .............................................................................1175
l2tp tunnel short-drain-timeout ..................................................................1176
l2tp tunnel-switching .................................................................................1177
l2tp tunnel test ..........................................................................................1178
l2tp unlock destination ..............................................................................1179
l2tp unlock-test destination .......................................................................1180
l2tp weighted-load-balancing .....................................................................1181
l2vpn control-word ....................................................................................1182
l2vpn encapsulation-type ..........................................................................1183
l2vpn local-site-id remote-site-id ................................................................1184
l2vpn rd ....................................................................................................1185
l2vpn route-target ......................................................................................1186
l2vpn sequencing ......................................................................................1187
l2vpn site-name site-id ..............................................................................1188
l2vpn site-range .........................................................................................1189
lacp ...........................................................................................................1190
lacp port-priority .......................................................................................1191
lag dos-protection-group ............................................................................1192
lease ..........................................................................................................1193
license bfd .................................................................................................1194
license b-ras ..............................................................................................1195
license ipsec-tunnels ..................................................................................1196
license ipv6 ...............................................................................................1197
license issu ................................................................................................1198
license l2tp-session ....................................................................................1199
license mobile-ip home-agent ....................................................................1200
license nat .................................................................................................1201
license service-management .....................................................................1202
lifetime ......................................................................................................1203
line ............................................................................................................1205
link ............................................................................................................1206
link failover arp-flush .................................................................................1207
link failover force ......................................................................................1208
link failover timeout ..................................................................................1209
link selection .............................................................................................1210
list .............................................................................................................1211
load-interval ..............................................................................................1212
load-rebalance ...........................................................................................1213
local host ...................................................................................................1214
local-interface ............................................................................................1215
local ip address .........................................................................................1216
local ip identity ..........................................................................................1218
local ip network .........................................................................................1219
log .............................................................................................................1220
log-adjacency-changes ...............................................................................1221
log destination ...........................................................................................1223
log destination syslog source .....................................................................1225
log engineering ..........................................................................................1226
log fields ....................................................................................................1227
log filters ...................................................................................................1228
xxxii
■
Table of Contents
Table of Contents
log here .....................................................................................................1229
log severity ................................................................................................1230
log unlimit .................................................................................................1232
log verbosity ..............................................................................................1233
login ..........................................................................................................1234
login authentication ...................................................................................1235
logout subscribers .....................................................................................1236
loopback ...................................................................................................1237
lsp-gen-interval ..........................................................................................1239
lsp-mtu ......................................................................................................1240
lsp-refresh-interval ....................................................................................1241
Chapter 13
M Commands
1243
macro ........................................................................................................1244
map-class frame-relay ...............................................................................1245
map-group .................................................................................................1246
map-list .....................................................................................................1247
mark .........................................................................................................1248
mark-clp ....................................................................................................1250
mark-de .....................................................................................................1251
mark-exp ...................................................................................................1252
mark-user-priority .....................................................................................1253
mask destination .......................................................................................1254
masked-key ...............................................................................................1255
mask source ..............................................................................................1256
mask-val ....................................................................................................1257
match as-path ...........................................................................................1258
match community .....................................................................................1259
match distance ..........................................................................................1260
match extcommunity ................................................................................1261
match ip address .......................................................................................1262
match ip next-hop .....................................................................................1263
match ipv6 address ...................................................................................1264
match ipv6 next-hop .................................................................................1265
match ipv6 route-source ............................................................................1266
match level ................................................................................................1267
match metric .............................................................................................1268
match metric-type .....................................................................................1269
match mpls-label .......................................................................................1270
match policy-list ........................................................................................1271
match route-type .......................................................................................1272
match-set summary prefix-tree .................................................................1273
match tag ..................................................................................................1274
max-branches ...........................................................................................1275
max-discovery-table-entries .......................................................................1276
maximum-paths ........................................................................................1277
maximum routes .......................................................................................1278
maximum-voql ..........................................................................................1279
max-interfaces ..........................................................................................1280
Table of Contents
■
xxxiii
JUNOSe 11.0.x Command Reference Guide A to M
max-lsp-lifetime ........................................................................................1281
max-response-failure .................................................................................1282
max-sessions .............................................................................................1283
mdl carrier ................................................................................................1285
mdl string ..................................................................................................1286
mdl transmit .............................................................................................1287
mdt-data-delay ..........................................................................................1288
mdt-data-holddown ...................................................................................1289
mdt-data-timeout ......................................................................................1290
mdt-interval ..............................................................................................1291
medium ipv4 .............................................................................................1292
member interface ......................................................................................1293
member-interface ......................................................................................1294
member-interface-type ..............................................................................1295
memory ....................................................................................................1296
message-digest-key md5 ...........................................................................1297
metric .......................................................................................................1298
metric-style narrow ...................................................................................1299
metric-style transition ...............................................................................1300
metric-style wide .......................................................................................1301
minimum-dynamic-rate-percent ................................................................1302
minimum-links ..........................................................................................1303
mirror .......................................................................................................1304
mirror analyzer-ip-address ........................................................................1305
mirror disable ............................................................................................1306
mirror-enable ............................................................................................1307
mirror trap-enable .....................................................................................1308
mld disable ................................................................................................1309
mode .........................................................................................................1310
monitor atm vc .........................................................................................1311
monitor atm vp .........................................................................................1312
monitor vlan interface ...............................................................................1313
more .........................................................................................................1314
motd-banner .............................................................................................1315
mount .......................................................................................................1316
mpls ..........................................................................................................1317
mpls atm vci range ....................................................................................1319
mpls atm vpi range ...................................................................................1320
mpls backup-path ......................................................................................1321
mpls bandwidth ........................................................................................1322
mpls classifier-list ......................................................................................1323
mpls copy-upc-to-exp ................................................................................1324
mpls create-dynamic-interfaces .................................................................1325
mpls diff-serv phb-id traffic-class ...............................................................1326
mpls disable ..............................................................................................1327
mpls explicit-path ......................................................................................1328
mpls ip propagate-ttl .................................................................................1329
mpls l2transport load-balancing-group ......................................................1330
mpls ldp ....................................................................................................1332
mpls ldp advertise-labels ...........................................................................1333
mpls ldp autoconfig ...................................................................................1334
xxxiv
■
Table of Contents
Table of Contents
mpls ldp deaggregate ................................................................................1335
mpls ldp disable ........................................................................................1336
mpls ldp discovery transport-address ........................................................1337
mpls ldp egress-label .................................................................................1338
mpls ldp graceful-restart ............................................................................1339
mpls ldp graceful-restart reconnect-time ...................................................1340
mpls ldp graceful-restart recovery-time .....................................................1341
mpls ldp graceful-restart timers max-recovery ..........................................1342
mpls ldp graceful-restart timers neighbor-liveness .....................................1343
mpls ldp igp sync holddown ......................................................................1344
mpls ldp independent-control ...................................................................1345
mpls ldp ip-forwarding ..............................................................................1346
mpls ldp link-hello disable .........................................................................1347
mpls ldp neighbor password .....................................................................1348
mpls ldp profile .........................................................................................1349
mpls ldp redistribute .................................................................................1350
mpls ldp session holdtime .........................................................................1351
mpls ldp session keepalive interval ...........................................................1352
mpls ldp session retries .............................................................................1353
mpls ldp session retry-time .......................................................................1354
mpls ldp strict-security ..............................................................................1355
mpls ldp sync ............................................................................................1356
mpls ldp targeted-hello holdtime ...............................................................1357
mpls ldp targeted-hello interval .................................................................1358
mpls ldp targeted-hello receive list ............................................................1359
mpls ldp targeted-hello send list ................................................................1360
mpls ldp vpls neighbor ..............................................................................1361
mpls ldp vpls vpls-id ..................................................................................1362
mpls lsp no-route retries ............................................................................1363
mpls lsp no-route retry-time ......................................................................1364
mpls lsp retries ..........................................................................................1365
mpls lsp retry-time ....................................................................................1366
mpls match exp-bits ..................................................................................1367
mpls match traffic-class .............................................................................1368
mpls policy ................................................................................................1369
mpls policy-list ..........................................................................................1370
mpls policy-parameter hierarchical ...........................................................1371
mpls policy-parameter reference-rate ........................................................1372
mpls policy-statistics .................................................................................1373
mpls preserve-vpn-exp ..............................................................................1374
mpls-relay .................................................................................................1375
mpls-relay atm cell-packing mcpt-timer ....................................................1378
mpls-relay atm vpi-range vci-range ...........................................................1379
mpls-relay disable .....................................................................................1380
mpls reoptimize ........................................................................................1381
mpls reoptimize timers frequency .............................................................1382
mpls rsvp ..................................................................................................1383
mpls rsvp authentication ...........................................................................1384
mpls rsvp authentication key ....................................................................1385
mpls rsvp bfd-liveness-detection ...............................................................1386
mpls rsvp disable ......................................................................................1387
Table of Contents
■
xxxv
JUNOSe 11.0.x Command Reference Guide A to M
mpls rsvp egress-label ...............................................................................1388
mpls rsvp message-bundling .....................................................................1389
mpls rsvp profile .......................................................................................1390
mpls rsvp refresh-reduction .......................................................................1391
mpls rsvp signalling hello ..........................................................................1392
mpls rsvp signalling hello graceful-restart ..................................................1393
mpls rsvp signalling hello graceful-restart recovery-time ...........................1394
mpls rsvp signalling hello graceful-restart restart-time ...............................1395
mpls rsvp signalling node-hello .................................................................1396
mpls signaling-interface ............................................................................1397
mpls spf-use-any-best-path ........................................................................1398
mpls statistics label ...................................................................................1399
mpls statistics next-hop .............................................................................1400
mpls statistics policy .................................................................................1401
mpls topology-driven-lsp ...........................................................................1402
mpls topology-driven-lsp ip-interfaces .......................................................1403
mpls traffic-class .......................................................................................1404
mpls traffic-eng .........................................................................................1405
mpls traffic-eng administrative-weight ......................................................1406
mpls traffic-eng area .................................................................................1407
mpls traffic-eng attribute-flags ...................................................................1408
mpls traffic-eng egress-label ......................................................................1409
mpls traffic-eng flood thresholds ...............................................................1410
mpls traffic-eng link-management timers periodic-flooding .......................1411
mpls traffic-eng multicast-intact ................................................................1412
mpls traffic-eng router-id ...........................................................................1413
mpls tunnel-model ....................................................................................1414
mpls tunnels profile ...................................................................................1415
mroute port admission-bandwidth-limit ....................................................1416
mroute port limit .......................................................................................1417
mru ...........................................................................................................1418
mtrace .......................................................................................................1419
mtu ...........................................................................................................1420
multicast ...................................................................................................1421
multicast group port limit ..........................................................................1422
Part 2
Index
Index .........................................................................................................1425
xxxvi
■
Table of Contents
List of Tables
About the Documentation
xxxix
Table 1: Notice Icons ......................................................................................xl
Table 2: Text and Syntax Conventions ...........................................................xl
Part 1
Commands, A to M
Chapter 1
Command Reference Topics
3
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models,
and ERX310 Router ..................................................................................5
Table 4: Interface Types and Specifiers for E120 Router and E320
Router .....................................................................................................13
List of Tables
■
xxxvii
JUNOSe 11.0.x Command Reference Guide A to M
xxxviii
■
List of Tables
About the Documentation
■
E Series and JUNOSe Documentation and Release Notes on page xxxix
■
Audience on page xxxix
■
E Series and JUNOSe Text and Syntax Conventions on page xxxix
■
Obtaining Documentation on page xli
■
Documentation Feedback on page xli
■
Requesting Technical Support on page xli
E Series and JUNOSe Documentation and Release Notes
For a list of related JUNOSe documentation, see
http://www.juniper.net/techpubs/software/index.html .
If the information in the latest release notes differs from the information in the
documentation, follow the JUNOSe Release Notes.
To obtain the most current version of all Juniper Networks® technical documentation,
see the product documentation page on the Juniper Networks website at
http://www.juniper.net/techpubs/.
Audience
This guide is intended for experienced system and network specialists working with
Juniper Networks E Series Broadband Services Routers in an Internet access
environment.
E Series and JUNOSe Text and Syntax Conventions
Table 1 on page xl defines notice icons used in this documentation.
E Series and JUNOSe Documentation and Release Notes
■
xxxix
JUNOSe 11.0.x Command Reference Guide A to M
Table 1: Notice Icons
Icon
Meaning
Description
Informational note
Indicates important features or instructions.
Caution
Indicates a situation that might result in loss of data or hardware damage.
Warning
Alerts you to the risk of personal injury or death.
Laser warning
Alerts you to the risk of personal injury from a laser.
Table 2 on page xl defines text and syntax conventions that we use throughout the
E Series and JUNOSe documentation.
Table 2: Text and Syntax Conventions
Convention
Description
Examples
Bold text like this
Represents commands and keywords in text.
■
Issue the clock source command.
■
Specify the keyword exp-msg.
Bold text like this
Represents text that the user must type.
host1(config)#traffic class low-loss1
Fixed-width text like this
Represents information as displayed on your
terminal’s screen.
host1#show ip ospf 2
Italic text like this
Plus sign (+) linking key names
■
Emphasizes words.
■
Identifies variables.
■
Identifies chapter, appendix, and book
names.
Indicates that you must press two or more
keys simultaneously.
Routing Process OSPF 2 with Router
ID 5.5.0.250
Router is an Area Border Router
(ABR)
■
There are two levels of access: user and
privileged.
■
clusterId, ipAddress.
■
Appendix A, System Specifications
Press Ctrl + b.
Syntax Conventions in the Command Reference Guide
Plain text like this
Represents keywords.
terminal length
Italic text like this
Represents variables.
mask, accessListName
| (pipe symbol)
Represents a choice to select one keyword
or variable to the left or to the right of this
symbol. (The keyword or variable can be
either optional or required.)
diagnostic | line
xl
■
E Series and JUNOSe Text and Syntax Conventions
About the Documentation
Table 2: Text and Syntax Conventions (continued)
Convention
Description
Examples
[ ] (brackets)
Represent optional keywords or variables.
[ internal | external ]
[ ]* (brackets and asterisk)
Represent optional keywords or variables
that can be entered more than once.
[ level1 | level2 | l1 ]*
{ } (braces)
Represent required keywords or variables.
{ permit | deny } { in | out }
{ clusterId | ipAddress }
Obtaining Documentation
To obtain the most current version of all Juniper Networks technical documentation,
see the products documentation page on the Juniper Networks Web site at
http://www.juniper.net/.
To download complete sets of technical documentation to create your own
documentation CD-ROMs or DVD-ROMs, see the CD-ROM and DVD-ROM
Documentation page at
http://www.juniper.net/techpubs/resources/cdrom.html
Copies of the Management Information Bases (MIBs) available in a software release
are included on the software CDs and at http://www.juniper.net/.
Documentation Feedback
We encourage you to provide feedback, comments, and suggestions so that we can
improve the documentation to better meet your needs. Send your comments to
[email protected], or fill out the documentation feedback form at
https://www.juniper.net/cgi-bin/docbugreport/. If you are using e-mail, be sure to include
the following information with your comments:
■
Document or topic name
■
URL or page number
■
Software release version
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical
Assistance Center (JTAC). If you are a customer with an active J-Care or JNASC support
contract, or are covered under warranty, and need post-sales technical support, you
can access our tools and resources online or open a case with JTAC.
■
JTAC policies—For a complete understanding of our JTAC procedures and policies,
review the JTAC User Guide located at
http://www.juniper.net/customers/support/downloads/7100059-EN.pdf .
Obtaining Documentation
■
xli
JUNOSe 11.0.x Command Reference Guide A to M
■
Product warranties—For product warranty information, visit
http://www.juniper.net/support/warranty/ .
■
JTAC hours of operation—The JTAC centers have resources available 24 hours a
day, 7 days a week, 365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online
self-service portal called the Customer Support Center (CSC) that provides you with
the following features:
■
Find CSC offerings: http://www.juniper.net/customers/support/
■
Search for known bugs: http://www2.juniper.net/kb/
■
Find product documentation: http://www.juniper.net/techpubs/
■
Find solutions and answer questions using our Knowledge Base:
http://kb.juniper.net/
■
Download the latest versions of software and review release notes:
http://www.juniper.net/customers/csc/software/
■
Search technical bulletins for relevant hardware and software notifications:
https://www.juniper.net/alerts/
■
Join and participate in the Juniper Networks Community Forum:
http://www.juniper.net/company/communities/
■
Open a case online in the CSC Case Management tool: http://www.juniper.net/cm/
To verify service entitlement by product serial number, use our Serial Number
Entitlement (SNE) Tool: https://tools.juniper.net/SerialNumberEntitlementSearch/
Opening a Case with JTAC
You can open a case with JTAC on the Web or by telephone.
■
Use the Case Management tool in the CSC at http://www.juniper.net/cm/ .
■
Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
For international or direct-dial options in countries without toll-free numbers, see
http://www.juniper.net/support/requesting support.html .
xlii
■
Requesting Technical Support
Part 1
Commands, A to M
■
Command Reference Topics on page 3
■
A Commands on page 21
■
B Commands on page 211
■
C Commands on page 347
■
D Commands on page 473
■
E Commands on page 553
■
F Commands on page 607
■
G Commands on page 645
■
H Commands on page 661
■
I Commands on page 677
■
K Commands on page 1127
■
L Commands on page 1131
■
M Commands on page 1243
Commands, A to M
■
1
JUNOSe 11.0.x Command Reference Guide A to M
2
■
Commands, A to M
Chapter 1
Command Reference Topics
■
Using the no Version Versus the default Version of Commands on page 3
■
Deprecated Commands on page 4
■
Filtering show Commands on page 4
■
Interface Types and Specifiers on page 5
Using the no Version Versus the default Version of Commands
Most router configuration commands have a no version, which you can use to negate
a command (or a portion of it specified by an optional keyword) or restore its default
setting. When you use a command without the keyword no, you can reenable a
disabled feature or override a default setting. You have the option of using the default
keyword whenever the no keyword is also a choice; simply enter the keyword default
instead of no.
In most cases, when you execute the default version of a command, it produces the
exact results as the no version. There are some commands for which the default
version yields a different result than the no version.
Commands for which the default behavior differs from the no behavior are clearly
identified in this guide. Unless otherwise specified, therefore, the default command
is identical to the no command and is neither documented nor discussed.
The syntax for each no command is described in this guide. Some commands do
not have a no version; this is indicated in the individual command descriptions except
for the show commands, none of which has a no version.
The CLI can act on no versions of commands when you have entered sufficient
information to distinguish the command syntactically, and ignores all subsequent
input on that line.
To be compatible with some non–E Series implementations, the no versions of
commands accept the same options as the affirmative version of the commands.
The CLI ignores the optional input if it has no effect on the command behavior. If
using the option changes the behavior of the no version, the individual command
entry in this guide describes the difference in behavior.
Using the no Version Versus the default Version of Commands
■
3
JUNOSe 11.0.x Command Reference Guide A to M
Deprecated Commands
A command that has been deprecated in a release or in a particular configuration
mode returns a notice when you issue the command manually:
NOTICE: This command is obsolete. It may be completely removed from a subsequent
software release.
A preferred alternate command is provided in the notice. If you have a script that
uses the deprecated command, the deprecated command is automatically mapped
to the preferred command when you run the script. If the deprecated command no
longer has a function, then that command has no effect when you run a script
containing the command.
We recommend that you use the preferred command when writing new scripts.
Filtering show Commands
You have access to a variety of show commands that display router and protocol
information. You can filter the output of a show command by specifying | (the UNIX
pipe symbol), one of the following keywords, and either a case-sensitive text string
or a regular expression.
■
begin—Displays output beginning with the first line that contains the text string
or regular expression
■
include—Displays output lines that contain the text string or regular expression
and excludes lines that do not contain the text string or regular expression
■
exclude—Displays output lines that do not contain the text string or regular
expression and excludes lines that do contain the text string or regular expression
You can press Ctrl+c to interrupt the show command output.
NOTE: The router does not recognize beginning spaces of the text string. For example,
if you enter the include option with IP as the text string on which to filter, the router
ignores the space and displays lines that include words such as RIP.
Example
In the following example, the output display consists only of lines that contain the
string ip. The router omits all other lines of the output from the display because none
of them contain the string ip.
host1#show config include-defaults | include ip
! Configuration script generated on FRI NOV 12 1999 16:56:41 UTC
ip address 192.168.1.229 255.255.255.0
ip rip receive version 2 1
ip rip send version 1
ip rip authentication mode md5 17
ip rip authentication key
ip route 10.6.0.0 255.255.0.0 192.168.1.1
ip route 10.10.0.0 255.255.0.0 192.168.1.1
4
■
Deprecated Commands
Chapter 1: Command Reference Topics
ip route 10.10.0.166 255.255.255.255 192.168.1.1
ip debounce-time 0
router rip
Related Topics
■
For a list of regular expressions, see Using Regular Expressions in the JUNOSe IP
Services Configuration Guide
Interface Types and Specifiers
Many commands take the variables interfaceType and interfaceSpecifier. Some
commands support all types of interfaces, whereas other commands support only
certain types of interfaces. Similarly, some commands support all interface specifier
formats for a particular interface type, whereas other commands support only certain
interface specifier formats.
Table 3 on page 5 lists the interface specifiers for each type of interface on ERX7xx
models, ERX14xx models, and the Juniper Networks ERX310 Broadband Services
Router.
NOTE: On ERX7xx models, ERX14xx models, and the ERX310 router, you can use
the atm slot/port/vpi/vci interface specifier format as an alternative to the atm
slot/port.subinterface format with the specific show interface and show subinterface
commands to monitor all ATM 1483 subinterfaces (except NBMA interfaces) as well
as the upper-layer interfaces configured over an ATM 1483 subinterface. You cannot,
however, use the atm slot/port/vpi/vci format to create or modify an ATM 1483
subinterface.
Table 4 on page 13 lists the interface specifiers for each type of interface on the
Juniper Networks E120 and E320 Broadband Services Routers.
NOTE: On the E120 router and the E320 router you can use the atm
slot/adapter/port/vpi/vci interface specifier format as an alternative to the atm
slot/adapter/port.subinterface format with the specific show interface and show
subinterface commands to monitor all ATM 1483 subinterfaces (except NBMA
interfaces) as well as the upper-layer interfaces configured over an ATM 1483
subinterface. You cannot, however, use the atm slot/adapter/port/vpi/vci format to
create or modify an ATM 1483 subinterface.
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router
Interface Type
Description
Interface Specifier
Example
atm
ATM
interface or
ATM 1483
subinterface
Refer to the individual formats listed below.
Interface Types and Specifiers
■
5
JUNOSe 11.0.x Command Reference Guide A to M
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router (continued)
Interface Type
■
■
ATM
interface
or
subinterface
ATM 1483
subinterface
Description
Interface Specifier
Example
To configure an ATM interface or
subinterface:
atm 3/2.6
slot/port[.subinterface ]
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
subinterface—Number of the
subinterface in the range
1–2147483647
To display information about an ATM 1483
subinterface by using show commands:
slot/port/vpi/vci
6
■
Interface Types and Specifiers
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
vpi—Virtual path identifier of the PVC
on this ATM 1483 subinterface;
allowable numeric range depends on
the module capabilities and current
configuration
■
vci—Virtual circuit identifier of the
PVC on this ATM 1483 subinterface;
allowable numeric range depends on
the module capabilities and current
configuration
atm 3/2/1/2
Chapter 1: Command Reference Topics
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router (continued)
Interface Type
Description
Interface Specifier
Example
fastEthernet
IEEE 802.3
Fast
Ethernet
(FE)
interface
slot/port[.subinterface1[.subinterface2 ] ]
fastEthernet
3/2.6.20
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
or port 0 for the Fast Ethernet
management port on the SRP I/O
module
The meaning of the subinterface variables
depends on the configuration context. You
can configure Fast Ethernet interfaces with
or without VLANS.
■
■
VLANs:
■
subinterface1—Number of the
VLAN subinterface in the range
1–2147483647; no more than
4096 VLAN subinterfaces per
Fast Ethernet physical port
■
subinterface2—When using
PPPoE, the number of the PPPoE
subinterface in the range
1–2147483647; no more than
8000 PPPoE subinterfaces per
Fast Ethernet line module
No VLANs:
■
subinterface1—When using
PPPoE, the number of the PPPoE
subinterface in the range
1–2147483647; no more than
8000 PPPoE subinterfaces per
Fast Ethernet line module
■
subinterface2—Not used
Interface Types and Specifiers
■
7
JUNOSe 11.0.x Command Reference Guide A to M
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router (continued)
Interface Type
Description
Interface Specifier
Example
gigabitEthernet
IEEE 802.3
Gigabit
Ethernet
(GE)
interface
slot/port[.subinterface1[.subinterface2 ] ]
gigabitEthernet
3/0.6.20
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
The meaning of the subinterface variables
depends on the configuration context. You
can configure Gigabit Ethernet interfaces
with or without VLANs.
■
■
lag
loopback
mlframe-relay
8
■
Interface Types and Specifiers
IEEE
802.3ad link
aggregation
group (LAG)
interface
Loopback
interface
Multilink
frame relay
interface
VLANs:
■
subinterface1—Number of the
VLAN subinterface in the range
1–2147483647; no more than
4096 VLAN subinterfaces per
Gigabit Ethernet physical port
■
subinterface2—When using
PPPoE, the number of the PPPoE
subinterface in the range
1–2147483647; no more than
8000 PPPoE subinterfaces per
Gigabit Ethernet line module
No VLANs:
■
subinterface1—When using
PPPoE, the number of the PPPoE
subinterface in the range
1–2147483647; no more than
8000 PPPoE subinterfaces per
Gigabit Ethernet line module
■
subinterface2—Not used
bundle-name[.subinterface ]
■
bundle-name—Name of the bundle
■
subinterface—Number of the LAG
subinterface in the range
1–2147483647
integer
■
lag paris.2
loopback 20
integer—Integer in the range
1–4294967293
bundle-name[.subinterface ]
■
bundle-name—Name of the bundle
■
subinterface—Number of the MLFR
subinterface in the range
1–4294967293
mlframe-relay
boston.1
Chapter 1: Command Reference Topics
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router (continued)
Interface Type
Description
mlppp
Multilink
PPP
interface
mplsL2shim
mplsMajor
mplsMinor
null
MPLS shim
interface
MPLS major
interface
MPLS minor
interface
Null
interface,
which acts
as a data
sink and
cannot
forward or
receive
traffic. You
cannot
configure
values on
the null
interface.
Interface Specifier
Example
bundle-name
■
mlppp chicago
bundle-name—Name of the bundle
slot/port[.subinterface ]
mplsL2shim 3/2.1
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
subinterface—Number of the
subinterface in the range
1–2147483647
slot/port[.subinterface ]
mplsMajor 3/2.1
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
subinterface—Number of the
subinterface in the range
1–2147483647
[ vr:]tunnel-name
■
vr—Name of a virtual router
■
tunnel-name—Name of the tunnel
0
mplsMinor
lsp-02020202-1-4
null 0
Interface Types and Specifiers
■
9
JUNOSe 11.0.x Command Reference Guide A to M
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router (continued)
Interface Type
Description
Interface Specifier
Example
pos
Packet over
SONET
(POS)
interface
slot/port[.subinterface ]
pos 3/2
serial
■
■
10
■
CT3
E3/T3
Frame
Interface Types and Specifiers
CT3, E3
Frame, T3
Frame, or
cOCx/STMx
interface
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
subinterface—Number of the
subinterface in the range
1–2147483647
Refer to the individual formats listed below.
slot/port:channel/subchannel[.subinterface ]
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models) and 0–13
(ERX14xx models)
■
port—Port number on the I/O module
■
channel—Number of a T1 channel on
a CT3 module; in the range 1–28
■
subchannel—Number of the channel
group associated with a range of DS0
timeslots on a CT3 module; in the
range 1–28
■
subinterface—Number of the
subinterface in the range
1–2147483647
slot/port[.subinterface ]
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models) and 0–13
(ERX14xx models)
■
port—Port number on the I/O module
■
subinterface—Number of the
subinterface in the range
1–2147483647
serial 3/2:20/15
serial 3/2
Chapter 1: Command Reference Topics
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router (continued)
Interface Type
■
■
cOCx/STMx:
unframed
E1
cOCx/STMx:
fractional
E1/T1
Description
Interface Specifier
Example
slot/port:path-channel/path-payload/
tributary-group/tributary-number/
channelNumber[.subinterface ]
serial
3/0:10/1/2/2/1
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
path-channel—Number of the STS-1or
STM-0 line in the range
1–2147483648
■
path-payload—Number of the payload
within the path
■
tributary-group—Number of the
tributary group within the path
■
tributary-number—Number of the
tributary within the group
■
channelNumber—1 (the router assigns
the number one to an unframed E1
channel)
■
subinterface—Number of the
subinterface in the range
1–2147483647
slot/port:path-channel/path-payload/
tributary-group/tributary-number/
channel-group[.subinterface ]
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
path-channel—Number of the STS-1or
STM-0 line in the range
1–2147483648
■
path-payload—Number of the payload
within the path
■
tributary-group—Number of the
tributary group within the path
■
tributary-number—Number of the
tributary within the group
■
channel-group—Number of a fractional
T1 or E1 line
■
subinterface—Number of the
subinterface in the range
1–2147483647
serial
3/0:10/1/2/2/1
Interface Types and Specifiers
■
11
JUNOSe 11.0.x Command Reference Guide A to M
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router (continued)
Interface Type
■
■
cOCx/STMx:
unchannelized
DS3
cOCx/STMx:
DS3
channelized
to DS0
sonet – line
layer
12
■
Description
Interface Types and Specifiers
Interface Specifier
Example
slot/port:path-channel/ds3-channel-number
[.subinterface ]
serial 3/0:1/1
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
path-channel—Number of the STS-1or
STM-0 line in the range
1–2147483648
■
ds3-channel-number—Number of a
T3 channel
■
subinterface—Number of the
subinterface in the range
1–2147483647
slot/port:path-channel/ds3-channel-number/
ds1-channel-number/subchannel-number
[.subinterface ]
Line layer of
a
SONET/SDH
interface
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
path-channel—Number of the STS-1or
STM-0 line in the range
1–2147483648
■
ds3-channel-number—Number of a T3
channel
■
ds1-channel-number—Number of a T1
channel
■
subchannel-number—Number of a
fractional T1 channel
■
subinterface—Number of the
subinterface in the range
1–2147483647
slot/port
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
serial
3/0:1/1/10/15
sonet 3/0
Chapter 1: Command Reference Topics
Table 3: Interface Types and Specifiers for ERX7xx Models, ERX14xx Models, and
ERX310 Router (continued)
Interface Type
Description
Interface Specifier
Example
sonet – path
layer
Path layer of
a
SONET/SDH
interface
slot/port:path-channel
sonet 3/0:2
sonet – section
layer
tunnel
Section layer
of a
SONET/SDH
interface
Tunnel
interface
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
■
path-channel—Number of the STS-1or
STM-0 line in the range
1–2147483648
slot/port
sonet 3/0
■
slot—Number of the chassis slot in the
range 0–6 (ERX7xx models), 0–13
(ERX14xx models), and 0–2 (ERX310
router)
■
port—Port number on the I/O module
tunnel-type:tunnel-name[.subinterface ]
■
tunnel-type—Type of the tunnel:
dvmrp, gre, ipsec, l2tp, or mpls
■
tunnel-name—Name of the tunnel
■
subinterface—For GRE tunnels,
number of the subinterface in the
range 1–2147483647
tunnel gre:boston
Table 4: Interface Types and Specifiers for E120 Router and E320 Router
Interface Type
Description
Interface Specifier
Example
atm
ATM
interface or
ATM 1483
subinterface
Refer to the individual formats listed below.
Interface Types and Specifiers
■
13
JUNOSe 11.0.x Command Reference Guide A to M
Table 4: Interface Types and Specifiers for E120 Router and E320 Router (continued)
Interface Type
■
■
ATM interface
or
subinterface
ATM 1483
subinterface
Description
Interface Specifier
Example
To configure an ATM interface or subinterface:
atm 3/1/7.6
slot/adapter/port[.subinterface ]
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
■
port—Port number on the IOA
■
subinterface—Number of the subinterface
in the range 1–2147483647
To display information about an ATM 1483
subinterface by using show commands:
slot/adapter/port/vpi/vci
14
■
Interface Types and Specifiers
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
■
port—Port number on the IOA
■
vpi—Virtual path identifier of the PVC on
this ATM 1483 subinterface; numeric
range for the E120 and E320 routers is
0–255
■
vci—Virtual circuit identifier of the PVC
on this ATM 1483 subinterface; numeric
range for the E120 and E320 routers is
1–65535
atm 3/1/7/1/2
Chapter 1: Command Reference Topics
Table 4: Interface Types and Specifiers for E120 Router and E320 Router (continued)
Interface Type
Description
Interface Specifier
fastEthernet
IEEE 802.3
Fast
Ethernet
(FE)
interface
slot/adapter/port
(for Fast Ethernet
management port
on SRP IOA)
gigabitEthernet
IEEE 802.3
Gigabit
Ethernet
(GE)
interface
Example
fastEthernet 6/0/0
■
slot—Number of the chassis slot, either
6 or 7
■
adapter—Identifier for the SRP I/O
adapter (IOA) within the chassis slot;
always 0
■
port—Port number on the SRP IOA;
always 0
slot/adapter/port[.subinterface1[.subinterface2
]]
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
■
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
gigabitEthernet
4/0/1.20
port—Port number on the IOA
The meaning of the subinterface variables
depends on the configuration context.
You can configure Gigabit Ethernet
interfaces with or without VLANs.
■
■
VLANs:
■
subinterface1—Number of the VLAN
subinterface in the range
1–2147483647; no more than 4096
VLAN subinterfaces per Gigabit
Ethernet physical port
■
subinterface2—When using PPPoE,
the number of the PPPoE
subinterface in the range
1–2147483647; no more than
16,000 PPPoE subinterfaces per
Gigabit Ethernet line module
No VLANs:
■
subinterface1—When using PPPoE,
the number of the PPPoE
subinterface in the range
1–2147483647; no more than
16,000 PPPoE subinterfaces per
Gigabit Ethernet line module
■
subinterface2—Not used
Interface Types and Specifiers
■
15
JUNOSe 11.0.x Command Reference Guide A to M
Table 4: Interface Types and Specifiers for E120 Router and E320 Router (continued)
Interface Type
Description
Interface Specifier
Example
lag
IEEE
802.3ad link
aggregation
group (LAG)
interface
bundle-name[.subinterface ]
lag paris.2
MPLS shim
interface
slot/adapter/port[.subinterface ]
mplsL2shim
mplsMajor
mplsMinor
16
■
Interface Types and Specifiers
MPLS major
interface
MPLS minor
interface
■
bundle-name—Name of the bundle
■
subinterface—Number of the LAG
subinterface in the range 1–2147483647
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
■
port—Port number on the IOA
■
subinterface—Number of the subinterface
in the range 1–2147483647
slot/adapter/port[.subinterface ]
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
■
port—Port number on the IOA
■
subinterface—Number of the subinterface
in the range 1–2147483647
[ vr:]tunnel-name
■
vr—Name of a virtual router
■
tunnel-name—Name of the tunnel
mplsL2shim
3/0/2.1
mplsMajor 3/0/2.1
mplsMinor
lsp-02020202-1-4
Chapter 1: Command Reference Topics
Table 4: Interface Types and Specifiers for E120 Router and E320 Router (continued)
Interface Type
Description
Interface Specifier
Example
pos
Packet over
SONET
(POS)
interface
slot/adapter/port
pos 5/0/0
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
sonet – line layer
Line layer of
a
SONET/SDH
interface
Path layer of
a
SONET/SDH
interface
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
port—Port number on the IOA
slot/adapter/port
sonet 3/0/0
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
sonet – path layer
■
■
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
port—Port number on the IOA
slot/adapter/port
sonet 3/0/0
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
■
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
port—Port number on the IOA
Interface Types and Specifiers
■
17
JUNOSe 11.0.x Command Reference Guide A to M
Table 4: Interface Types and Specifiers for E120 Router and E320 Router (continued)
Interface Type
Description
Interface Specifier
Example
sonet – section
layer
Section layer
of a
SONET/SDH
interface
slot/adapter/port
sonet 3/0/0
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot, either 0 or 1, where:
■
tenGigabitEthernet
IEEE
802.3ae
10-Gigabit
Ethernet
(GE)
interface
■
0 indicates that the IOA is installed
in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed
in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
port—Port number on the IOA
slot/adapter/port[.subinterface1[.subinterface2
]]
■
slot—Number of the chassis slot in the
range 0–5 (E120 router) and 0–5 or
11–16 (E320 router)
■
adapter—Identifier for the IOA within the
chassis slot. 0 indicates that this a
full-height IOA.
■
port—Port number on the IOA
The meaning of the subinterface variables
depends on the configuration context. You
can configure 10-Gigabit Ethernet interfaces
with or without VLANs.
■
■
18
■
Interface Types and Specifiers
VLANs:
■
subinterface1—Number of the VLAN
subinterface in the range
1–2147483647; no more than 4096
VLAN subinterfaces per 10-Gigabit
Ethernet physical port
■
subinterface2—When using PPPoE,
the number of the PPPoE
subinterface in the range
1–2147483647; no more than
16,000 PPPoE subinterfaces per
10-Gigabit Ethernet line module
No VLANs:
■
subinterface1—When using PPPoE,
the number of the PPPoE
subinterface in the range
1–2147483647; no more than
16,000 PPPoE subinterfaces per
10-Gigabit Ethernet line module
■
subinterface2—Not used
tenGigabitEthernet
4/0/1.20
Chapter 1: Command Reference Topics
Table 4: Interface Types and Specifiers for E120 Router and E320 Router (continued)
Interface Type
Description
tunnel
Tunnel
interface
Interface Specifier
Example
tunnel-type:tunnel-name[.subinterface]
■
tunnel-type—Type of the tunnel: dvmrp,
gre, l2tp, or mpls
■
tunnel-name—Name of the tunnel
■
subinterface—For GRE tunnels, number
of the subinterface in the range
1–2147483647
tunnel gre:boston
Interface Types and Specifiers
■
19
JUNOSe 11.0.x Command Reference Guide A to M
20
■
Interface Types and Specifiers
Chapter 2
A Commands
■
21
JUNOSe 11.0.x Command Reference Guide A to M
aaa accounting acct-stop on-aaa-failure
Syntax
aaa accounting acct-stop on-aaa-failure { enable | disable }
no aaa accounting acct-stop on-aaa-failure
Release Information
Description
Options
Mode
22
■
Command introduced before JUNOSe Release 7.1.0.
Configures AAA to send an Acct-Stop message if a user fails AAA, but RADIUS grants
access. The no version returns the parameter to the default of enable.
■
enable—Specifies the feature; this is the default setting
■
disable—Disables the feature
Global Configuration
aaa accounting acct-stop on-aaa-failure
Chapter 2: A Commands
aaa accounting acct-stop on-access-deny
Syntax
aaa accounting acct-stop on-access-deny { enable | disable }
no aaa accounting acct-stop on-access-deny
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Issues an Acct-Stop message if RADIUS denies access. The no version returns the
parameter to the default of disable.
■
enable—Specifies the feature
■
disable—Disables the feature; this is the default setting
Global Configuration
aaa accounting acct-stop on-access-deny
■
23
JUNOSe 11.0.x Command Reference Guide A to M
aaa accounting broadcast
Syntax
aaa accounting broadcast vrGroupName
no aaa accounting broadcast
Release Information
Description
Options
Mode
24
■
Command introduced before JUNOSe Release 7.1.0.
Broadcasts accounting records for a virtual router to accounting servers of the virtual
routers in the specified virtual router group. The no version disables the feature.
■
vrGroupName—Name of the virtual router group; a string of up to 32 characters
Global Configuration
aaa accounting broadcast
Chapter 2: A Commands
aaa accounting commands
Syntax
aaa accounting commands level { default | listName } stop-only tacacs+
no aaa accounting commands level listName
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Enables AAA accounting for TACACS+ to be captured for a specific user privilege
level and creates accounting method lists. The no version deletes the accounting
method list.
■
level—Privilege level of user commands for which accounting information is
captured; in the range 0–15
■
default—Specifies that the default method list is used to specify how accounting
is performed
■
listName—Named method list used to specify how accounting is performed
■
stop-only—Sends a stop accounting notice at the end of a process
Global Configuration
aaa accounting commands
■
25
JUNOSe 11.0.x Command Reference Guide A to M
aaa accounting default
Syntax
aaa accounting { subscriberType } default accountor [ accountor ]*
no aaa accounting { subscriberType } default
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Specifies the accounting method used for a particular type of subscriber. The no
version produces the same result as specifying the radius value.
■
■
Mode
26
■
subscriberType—Type of subscriber:
■
atm1483—Specifies ATM 1483 subscribers; not supported
■
ip—Specifies IP subscriber management interfaces
■
ipsec—Specifies IPSec subscribers
■
ppp—Specifies PPP subscribers
■
radius-relay—Specifies RADIUS relay server subscribers
■
tunnel—Specifies tunnel subscribers
accountor—Accounting method:
■
none—Disables accounting
■
radius—Enables RADIUS accounting
■
*—Indicates that one or more parameters can be repeated multiple times
in a list in the command line
Global Configuration
aaa accounting default
Chapter 2: A Commands
aaa accounting duplication
Syntax
aaa accounting duplication routerName
no aaa accounting duplication
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sends duplicate accounting records to the accounting server of a different virtual
router. The no version disables the feature.
■
routerName—Virtual router name
Global Configuration
aaa accounting duplication
■
27
JUNOSe 11.0.x Command Reference Guide A to M
aaa accounting exec
Syntax
aaa accounting exec { default | listName } start-stop tacacs+
no aaa accounting exec listName
Release Information
Description
Options
Mode
28
■
Command introduced before JUNOSe Release 7.1.0.
Enables AAA accounting for TACACS+ to be captured for User Exec terminal sessions,
and creates accounting method lists. The no version deletes the accounting method
list.
■
exec—Specifies that accounting information is captured for User Exec terminal
sessions
■
default—Specifies that the default method list is used to specify how accounting
is performed
■
listName—Named method list used to specify how accounting is performed
■
start-stop—Sends a start accounting notice at the beginning of a process and a
stop accounting notice at the end of a successful process
Global Configuration
aaa accounting exec
Chapter 2: A Commands
aaa accounting immediate-update
Syntax
aaa accounting immediate-update { enable | disable }
no aaa accounting immediate-update
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures the router to send an Acct-Update message to the accounting server on
receipt of a response (ACK or timeout) for the Acct-Start message. The no version
restores the default condition, disabling immediate updates.
■
enable—Specifies the feature
■
disable—Disables the feature; this is the default setting
Global Configuration
aaa accounting immediate-update
■
29
JUNOSe 11.0.x Command Reference Guide A to M
aaa accounting interval
Syntax
aaa accounting interval period
no aaa accounting interval
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Specifies the default accounting interval used for all users and services. The no version
sets the value to 0, which turns off interim accounting.
NOTE: This command is deprecated and might be removed completely in a future
release. Use the aaa service accounting interval and aaa user accounting interval
commands to configure default accounting intervals for services and users.
Options
Mode
30
■
■
period—Accounting interval in minutes in the range 10–1440, which sets the
time period between accounting updates
Global Configuration
aaa accounting interval
Chapter 2: A Commands
aaa accounting statistics
Syntax
aaa accounting statistics { volume-time | time }
no aaa accounting statistics
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.2.0.
Configures the router to collect either a full set of statistics or only uptime status for
the sessions AAA is managing. Collecting only the uptime status is a more efficient
use of system resources. The no version restores the default setting in which the
router collects full statistics.
■
volume-time—Collects a full complement of statistics from each connection; the
default setting
■
time—Collects only uptime status for each connection
Global Configuration
aaa accounting statistics
■
31
JUNOSe 11.0.x Command Reference Guide A to M
aaa accounting suppress null-username
Syntax
Release Information
Description
Mode
32
■
[ no ] aaa accounting suppress null-username
Command introduced before JUNOSe Release 7.1.0.
Specifies that accounting records are not generated for users whose username string
is null; accounting records will be generated only for users with explicit usernames.
The no version enables accounting records to be generated for all users, including
those who do not have usernames.
Global Configuration
aaa accounting suppress null-username
Chapter 2: A Commands
aaa accounting vr-group
Syntax
Release Information
Description
Options
Mode
[ no ] aaa accounting vr-group vrGroupName
Command introduced before JUNOSe Release 7.1.0.
Creates an accounting virtual router group and enters VR Group Configuration mode.
A virtual router group can have up to four virtual routers, whose accounting servers
can receive broadcast accounting records. A group must contain at least one virtual
router. The no version deletes the accounting virtual router group.
■
vrGroupName—Name of the virtual router group; a string of up to 32 characters
Global Configuration
aaa accounting vr-group
■
33
JUNOSe 11.0.x Command Reference Guide A to M
aaa authentication default
Syntax
aaa authentication subscriberType default authenticator [ authenticator ]*
no aaa authentication subscriberType default
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Specifies the authentication method used for a particular type of subscriber. The no
version produces the same result as specifying the radius value.
■
■
Mode
34
■
subscriberType—Type of subscriber:
■
atm1483—Specifies ATM 1483 subscribers
■
ip—Specifies IP subscriber management interfaces
■
ipsec—Specifies IPSec subscribers
■
ppp—Specifies PPP subscribers
■
radius-relay—Specifies RADIUS relay server subscribers
■
tunnel—Specifies tunnel subscribers
authenticator—Authentication method:
■
none—Disables authentication, allowing all users access
■
local—Enables local authentication; supported for PPP subscribers only
■
radius—Enables RADIUS for authentication
■
*—Indicates that one or more parameters can be repeated multiple times
in a list in the command line
Global Configuration
aaa authentication default
Chapter 2: A Commands
aaa authentication enable default
Syntax
aaa authentication enable default authenticator [ authenticator ]*
no aaa authentication enable default
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Allows privilege determination to be authenticated through the authenticator(s) you
specify. This authentication is applied to vty users. The no version removes the
authentication settings.
■
authenticator—Authentication method:
■
enable—Use the enable password
■
line—Use the line password
■
none—Use no authentication
■
radius—Use RADIUS authentication
■
tacacs+—Use TACACS+ authentication
■
*—Indicates that one or more parameters can be repeated multiple times
in a list in the command line
Global Configuration
aaa authentication enable default
■
35
JUNOSe 11.0.x Command Reference Guide A to M
aaa authentication login
Syntax
aaa authentication login { default | authListName } authenticator [ authenticator ]*
no aaa authentication login authListName
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Creates an authentication list and the criteria for login. This authentication is applied
to vty users. The no version disables AAA authentication.
■
default—Specifies the use of the default login for authentication
■
authListName—Existing authentication list name (created using the login
authentication command); a string of 1–32 characters
■
authenticator—Authentication method:
■
Mode
36
■
■
line—Use the line password for authentication
■
none—Use no authentication
■
radius—Use RADIUS authentication
■
tacacs+—Use TACACS+ authentication
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
aaa authentication login
Chapter 2: A Commands
aaa authorization
Syntax
aaa authorization { exec | commands level } authorListName authMethod
[ authMethod ]*
no aaa authorization { exec | commands level } authorListName
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Sets parameters that restrict a user's access to a network. The no version disables
authorization for a function.
■
exec—Runs authorization to determine if the user is allowed to run Exec mode
commands
■
level—Privilege level of commands for which authorization is run; in the range
0–15
■
authorListName—Name of the authorization methods list of up to 32 characters
■
authMethod—Authorization method:
■
Mode
■
if-authenticated—Allows the user to access the requested function if the user
is authenticated
■
none—NAS does not request authorization information; authorization is not
performed over this line
■
tacacs+—NAS exchanges authorization information with the TACACS+
security daemon
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
aaa authorization
■
37
JUNOSe 11.0.x Command Reference Guide A to M
aaa authorization config-commands
Syntax
Release Information
Description
[ no ] aaa authorization config-commands
Command introduced before JUNOSe Release 7.1.0.
Reauthorizes the use of Global Configuration commands. This command is enabled
by default when the aaa authorization commands command is executed. The no
version disables AAA configuration command authorization.
NOTE: Using the no version can potentially reduce the amount of administrative
control on configuration commands.
Mode
38
■
Global Configuration
aaa authorization config-commands
Chapter 2: A Commands
aaa delimiter
Syntax
aaa delimiter { domainName | realmName } delimiters
no aaa delimiter { domainName | realmName }
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies delimiters for the domain and realm names. You can specify up to eight
delimiters each for domain and realm names. The no version restores the default
value.
■
domainName—Allows you to set delimiters for the domain name
■
realmName—Allows you to set delimiters for the realm name
■
delimiters—Either the domain or realm delimiter(s). You can specify up to eight
characters.
■
The default domain name delimiter is @.
■
The default realm name delimiter is NULL (no character). In this case, realm
parsing is disabled (having no delimiter disables realm parsing).
Global Configuration
aaa delimiter
■
39
JUNOSe 11.0.x Command Reference Guide A to M
aaa dhcpv6-delegated-prefix delegated-ipv6-prefix
Syntax
Release Information
Description
[ no ] aaa dhcpv6-delegated-prefix delegated-ipv6-prefix
Command introduced in JUNOSe Release 10.1.0.
Sets the Delegated-IPv6-Prefix RADIUS attribute to be used for DHCPv6 Prefix
Delegation. The no version restores the default behavior, which causes the
Framed-IPv6-Prefix RADIUS attribute to be used for Prefix Delegation.
NOTE: If you configured the Framed-IPv6-Prefix attribute to be used for IPv6 Neighbor
Discovery router advertisements by using the aaa ipv6-nd-ra-prefix
framed-ipv6-prefix command, you must also issue the aaa dhcpv6-delegated-prefix
delegated-ipv6-prefix command after you issue the aaa ipv6-nd-ra-prefix
framed-ipv6-prefix command to enable the use of the Delegated-IPv6-Prefix attribute
for DHCPv6 Prefix Delegation. Otherwise, the Framed-IPv6-Prefix attribute will be
used for both IPv6 Neighbor Discovery router advertisements and DHCPv6 Prefix
Delegation.
Mode
40
■
Global Configuration
aaa dhcpv6-delegated-prefix delegated-ipv6-prefix
Chapter 2: A Commands
aaa dns
Syntax
aaa dns { primary | secondary } ipAddress
no aaa dns { primary | secondary }
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the IP address of the primary DNS name server. The no version sets the
corresponding address to 0.
■
primary—Specifies the primary DNS name server
■
secondary—Specifies the secondary DNS name server
■
ipAddress—IP address of the name server
Global Configuration
aaa dns
■
41
JUNOSe 11.0.x Command Reference Guide A to M
aaa domain-map
Syntax
aaa domain-map domainName
[ routerName [ loopback interfaceNumber | ipAddress ipMask ] ]
no aaa domain-map domainName
Release Information
Description
Options
Mode
42
■
aaa domain-map
Command introduced before JUNOSe Release 7.1.0.
ipAddress and ipMask variables added in JUNOSe Release 9.0.0.
Maps a user domain name to a virtual router. When you specify only the domain
name, the command sets the mode to Domain Map Configuration. The no version
deletes the map entry.
■
domainName—User domain name; specify the domain name none to assign users
without domains to a specific virtual router.
■
routerName—Router name associated with the domain name
■
loopback—Specifies the loopback interface
■
interfaceNumber—Interface number in the range 0–32000
■
ipAddress—IP address of the local interface
■
ipMask—IPv4 address mask of the local interface
Global Configuration
Chapter 2: A Commands
aaa duplicate-address-check
Syntax
Release Information
Description
aaa duplicate-address-check { enable | disable }
Command introduced before JUNOSe Release 7.1.0.
Allows you to enable or disable routing table address lookup or duplicate address
check. There is no no version.
NOTE: To use this command, you must have a B-RAS license. Run the license b-ras
command and enter your password.
Options
Mode
■
enable—Specifies the feature; this is the default
■
disable—Disables the feature
Global Configuration
aaa duplicate-address-check
■
43
JUNOSe 11.0.x Command Reference Guide A to M
aaa intf-desc-format include
Syntax
aaa intf-desc-format include { sub-intf | adapter } { enable | disable }
no aaa intf-desc-format include { sub-intf | adapter }
Release Information
Description
Options
Mode
44
■
Command introduced before JUNOSe Release 7.1.0.
Specifies whether the subinterface or adapter is included in or omitted from the
interface description that the router passes to RADIUS for inclusion in the NAS-Port-Id
attribute. Also affects the Interface field displayed by the show subscribers command.
The no version restores the default, in which the subinterface and adapter are
included.
■
sub-intf—Specifies that the subinterface is included in or omitted from the
interface description
■
adapter—Specifies that the adapter is included in or omitted from the interface
description
■
enable—Includes the subinterface or adapter in the interface description; this is
the default
■
disable—Omits the subinterface or adapter from the interface description
Global Configuration
aaa intf-desc-format include
Chapter 2: A Commands
aaa ipv6-dns
Syntax
aaa ipv6-dns { primary | secondary } ipv6Address
no aaa ipv6-dns { primary | secondary }
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the IPv6 address of the primary DNS name server. The no version sets the
corresponding address to 0 (or ::).
■
primary—Specifies the primary DNS name server
■
secondary—Specifies the secondary DNS name server
■
ipv6Address—IPv6 address of the name server
Global Configuration
aaa ipv6-dns
■
45
JUNOSe 11.0.x Command Reference Guide A to M
aaa ipv6-nd-ra-prefix framed-ipv6-prefix
Syntax
Release Information
Description
[ no ] aaa ipv6-nd-ra-prefix framed-ipv6-prefix
Command introduced in JUNOSe Release 10.1.0.
Sets the Framed-IPv6-Prefix RADIUS attribute to be used for IPv6 Neighbor Discovery
router advertisements. The no version restores the default behavior, which causes
the IPv6-NdRa-Prefix VSA to be used for router advertisements.
NOTE: If you issue this command before issuing the aaa dhcpv6-delegated-prefix
delegated-ipv6-prefix command, a warning message is displayed prompting you
to configure the Delegated-IPv6-Prefix attribute for DHCPv6 Prefix Delegation. The
message also states that the Framed-IPv6-Prefix RADIUS attribute will be used for
both IPv6 Neighbor Discovery router advertisements and DHCPv6 Prefix Delegation
if you do not configure the Delegated-IPv6-Prefix attribute for Prefix Delegation.
This warning message is displayed only if you configured the logging severity level
as warning for the aaaServerGeneral logging event category.
Mode
46
■
Global Configuration
aaa ipv6-nd-ra-prefix framed-ipv6-prefix
Chapter 2: A Commands
aaa local database
Syntax
Release Information
Description
Options
Mode
[ no ] aaa local database databaseName
Command introduced before JUNOSe Release 7.1.0.
Creates a local user database for use by a local authentication server. The no version
deletes the local user database and all entries in the database.
■
databaseName—Name of the user database; up to 32 characters; the name default
is recognized as the default user database
Global Configuration
aaa local database
■
47
JUNOSe 11.0.x Command Reference Guide A to M
aaa local select database
Syntax
aaa local select database databaseName
no aaa local select
Release Information
Description
Options
Mode
48
■
Command introduced before JUNOSe Release 7.1.0.
Assigns the local user database that the virtual router uses for local authentication.
The no version restores the default setting, which uses the default local user database
for local authentication.
■
databaseName—Name of the local user database
Global Configuration
aaa local select database
Chapter 2: A Commands
aaa local username
Syntax
Release Information
Description
Options
Mode
[ no ] aaa local username userName database databaseName
Command introduced before JUNOSe Release 7.1.0.
Configures a user entry in the specified local user database and enters Local User
Configuration mode. The no version deletes the user entry from the specified local
user database.
■
userName—User name of the subscriber
■
databaseName—Name of the local user database; database name default
configures the username in the default local user database
Global Configuration
aaa local username
■
49
JUNOSe 11.0.x Command Reference Guide A to M
aaa new-model
Syntax
Release Information
Description
Mode
50
■
aaa new-model
[ no ] aaa new-model
Command introduced before JUNOSe Release 7.1.0.
Specifies AAA authentication for Telnet sessions. The no version restores simple
authentication (login and password).
Global Configuration
Chapter 2: A Commands
aaa parse-direction
Syntax
aaa parse-direction { domainName | realmName } { left-to-right | right-to-left }
no aaa parse-direction { domainName | realmName }
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the direction the router uses for domain and realm parsing. The router
either searches from right-to-left, or from left-to-right. If searching for the realm, the
router uses the realm delimiter valued in its search. If searching for the domain, it
uses the domain delimiter values in its search. The no version returns the parse
direction to the default setting.
■
domainName—Specifies that the domain name is parsed. The router performs
domain searches from right-to-left by default.
■
realmName—Specifies that the realm name is parsed. The router performs realm
searches from left-to-right by default.
■
left-to-right—Causes the router to search from the left-most character. When the
router reaches a realm delimiter, it uses anything to the left of the delimiter as
the domain. When the router reaches a domain delimiter, it uses anything to
the right of the delimiter as the domain.
■
right-to-left—Causes the router to search from the right-most character. When
the router reaches a realm delimiter, it uses anything to the left of the delimiter
as the domain. When the router reaches a domain delimiter, it uses anything to
the right of the delimiter as the domain.
Global Configuration
aaa parse-direction
■
51
JUNOSe 11.0.x Command Reference Guide A to M
aaa parse-order
Syntax
aaa parse-order { domain-first | realm-first }
no aaa parse-order
Release Information
Description
Options
Mode
52
■
aaa parse-order
Command introduced before JUNOSe Release 7.1.0.
Specifies the order in which the router searches for a domain name. It either searches
for realm and then domain, or it searches for domain and then realm. The no version
returns the parse order to the default of searching for realm first.
■
domain-first—Causes the router to search for a domain name first. When the
router reaches a domain delimiter, it uses anything to the right of the delimiter
as the domain name.
■
realm-first—Causes the router to search for a realm name first. When the router
reaches a realm delimiter, it uses anything to the left of the delimiter as the
domain name.
Global Configuration
Chapter 2: A Commands
aaa profile
Syntax
Release Information
Description
Options
Mode
[ no ] aaa profile profileName
Command introduced before JUNOSe Release 7.1.0.
Creates a new AAA profile to allow mapping to AAA services. The no version removes
the profile.
■
profileName—Profile name of up to 32 characters
AAA Profile Configuration
aaa profile
■
53
JUNOSe 11.0.x Command Reference Guide A to M
aaa qos downstream-rate
Syntax
Release Information
Description
Mode
54
■
[ no ] aaa qos downstream-rate
Command introduced in JUNOSe Release 8.1.0.
Enables the QoS downstream rate application to shape VLANs or ATM VCs based on
downstream rates obtained from the Actual-Data-Rate-Downstream [26-130] DSL
Forum VSA. The no version returns the parameter to the default of disabled.
Global Configuration
aaa qos downstream-rate
Chapter 2: A Commands
aaa route-download
Syntax
aaa route-download [ downloadInterval ] [ retry-interval retryInterval ]
[ cost cost ] [ tag tagValue ] [ base-user-name name ] [ password password ]
[ synchronization time ]
no aaa route-download
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.1.0.
Enables the RADIUS route-download server and configures parameters for the server.
The no version disables the route-download server.
■
downloadInterval—Interval between download operations, in the range 1–1440
minutes; default is 720 minutes
■
retryInterval—Interval between retries after a failed download, in the range 1–60
minutes; default is 10 minutes
■
cost—Default cost of a downloaded route, in the range 1–254; default is 2
■
tagValue—Default tag of a downloaded route, in the range 1–4294967295; default
is 0
■
name—Name of router used for route-download requests; default is the router
hostname
■
password—Password used for route-download requests
■
time—Time the download operation is restarted each day, in 24-hour format
(hh:mm:ss)
Global Configuration
aaa route-download
■
55
JUNOSe 11.0.x Command Reference Guide A to M
aaa route-download now
Syntax
Release Information
Description
Options
Mode
56
■
aaa route-download now [ force ] [ adjust-scheduler ]
Command introduced in JUNOSe Release 8.1.0.
Specifies that the RADIUS route-download server immediately perform the route
download operation. If a download is currently in progress when you issue this
command without the force keyword, the in-progress download continues until
complete and no additional download is started. There is no no version.
■
force—Interrupts any in-progress route-download operation and immediately
starts a new download.
■
adjust-scheduler—Resets the download scheduler to use this download as the
start time for synchronizing download counts
Privileged Exec
aaa route-download now
Chapter 2: A Commands
aaa route-download suspend
Syntax
Release Information
Description
Mode
[ no ] aaa route-download suspend
Command introduced in JUNOSe Release 8.1.0.
Temporarily suspends the RADIUS route-download server operation. The no version
stops the suspend specification and restores the route download operation.
Privileged Exec
aaa route-download suspend
■
57
JUNOSe 11.0.x Command Reference Guide A to M
aaa service accounting interval
Syntax
aaa service accounting interval period
no aaa service accounting interval
Release Information
Description
Command introduced in JUNOSe Release 9.0.0.
Specifies the default accounting interval used for services on the virtual router—the
Service Manager application uses this setting for RADIUS-initiated services when no
value is specified in the Service-Interim-Acct-Interval VSA (Juniper VSA 26-140). The
no version restores the default setting of 0, which turns off interim accounting for
services associated with users attached to this virtual router.
NOTE: This command and the aaa user accounting interval command replace the
deprecated aaa accounting interval command, which may be removed completely
in a future release.
Options
Mode
58
■
■
period—Accounting interval in minutes in the range 10–1440, which sets the
time period between accounting updates for services associated with users on
this virtual router; 0 is the default
Global Configuration
aaa service accounting interval
Chapter 2: A Commands
aaa subscriber limit per-port
Syntax
aaa subscriber limit per-port interfaceSpecifier limitValue
no aaa subscriber limit per-port interfaceSpecifier
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the maximum number of active subscribers permitted on the specified port.
The no version returns the limit to the default, 0 (zero).
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
limitValue—Maximum number of subscribers; default value is 0 (zero), which
means there is no limit on the number of subscribers
Global Configuration
aaa subscriber limit per-port
■
59
JUNOSe 11.0.x Command Reference Guide A to M
aaa subscriber limit per-vr
Syntax
aaa subscriber limit per-vr limitValue
no aaa subscriber limit per-vr
Release Information
Description
Options
Mode
60
■
Command introduced before JUNOSe Release 7.1.0.
Sets the maximum number of active subscribers permitted on the virtual router. The
no version returns the limit to the default, 0 (zero).
■
limitValue—Maximum number of subscribers; default value is 0 (zero), which
means there is no limit on the number of subscribers
Global Configuration
aaa subscriber limit per-vr
Chapter 2: A Commands
aaa timeout
Syntax
To set the default idle timeout:
aaa timeout idle idleTimeout
no aaa timeout idle
To set the default session timeout:
aaa timeout session sessionTimeout
no aaa timeout session
To enable monitoring of only ingress traffic for the configured idle timeout period:
aaa timeout idle ingress-only
no aaa timeout idle [ ingress-only ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
ingress-only keyword added in JUNOSe Release 9.3.0.
Sets the default idle timeout or session timeout for B-RAS PPP users, and optionally
enables the PPP application to monitor only ingress traffic for the configured idle
timeout period to determine whether to disconnect an inactive PPP session. The no
version restores the idle timeout or session timeout to its default value, 0 seconds,
and disables ingress-only traffic monitoring for idle timeout if configured. .
NOTE: To enable ingress-only traffic monitoring for the idle timeout period by issuing
the aaa timeout idle ingress-only command, you must also set the idle timeout
value by issuing the aaa timeout idle command.
Options
Mode
■
idleTimeout—In seconds, 300–86400
■
sessionTimeout—Time in the range 60–31622400 seconds (that is, a minimum
of 1 minute to a maximum of 366 days); the router terminates the user session
once the maximum session timeout is reached, which means that the duration
of a PPP or an L2TP user session cannot exceed 366 days
■
ingress-only—Enables PPP to monitor only ingress traffic for the configured idle
timeout period to determine whether to disconnect an inactive PPP session; if
you do not specify the ingress-only keyword, PPP monitors both ingress traffic
and egress traffic for the idle timeout period to determine inactivity and
subsequent disconnection of an inactive PPP session
Global Configuration
aaa timeout
■
61
JUNOSe 11.0.x Command Reference Guide A to M
aaa tunnel assignment-id-format
Syntax
aaa tunnel assignment-id-format { assignmentId | client-server-id }
no aaa tunnel assignment-id-format
Release Information
Description
Options
Mode
62
■
Command introduced before JUNOSe Release 7.1.0.
Sets the format for the tunnel assignment ID. The no version sets the tunnel
assignment ID to the default, assignmentID.
■
assignmentId—Configures the format to be assignmentId only
■
client-server-id—Configures the format to be a combination of
clientAuthId + serverAuthId + assignmentId
Global Configuration
aaa tunnel assignment-id-format
Chapter 2: A Commands
aaa tunnel calling-number-format
Syntax
aaa tunnel calling-number-format
{ descriptive [ include-agent-circuit-id ] [ include-agent-remote-id ] |
fixed [ stacked ] |
fixed-adapter-embedded [ stacked ] |
fixed-adapter-new-field [ stacked ] |
include-agent-circuit-id [ include-agent-remote-id ] |
include-agent-remote-id }
no aaa tunnel calling-number-format
Release Information
Command introduced before JUNOSe Release 7.1.0.
include-agent-circuit-id and include-agent-remote-id keywords added in JUNOSe
Release 8.1.0.
stacked keyword added in JUNOSe Release 9.3.0.
fixed-adapter-embedded and fixed-adapter-new-field keywords added in JUNOSe
Release 10.0.0.
Description
Configures the format used by the E Series L2TP access concentrator (LAC) to generate
the L2TP Calling Number attribute value pair (AVP) 22 that it passes to the L2TP
network server (LNS). Available formats include different fixed formats and several
formats that include either or both of the agent-circuit-id (suboption 1) and
agent-remote-id (suboption 2) suboptions of the PPPoE intermediate agent tags. The
no version restores the default calling number format, descriptive.
Options
■
descriptive—Formats calling number AVP in descriptive format that includes
only interface information
■
descriptive include-agent-circuit-id—Formats calling number AVP in descriptive
format to include interface information and the agent-circuit-id suboption
■
descriptive include-agent-circuit-id include-agent-remote-id—Formats calling
number AVP in descriptive format to include interface information and both the
agent-circuit-id and agent-remote-id suboptions
■
descriptive include-agent-remote-id—Formats calling number AVP in descriptive
format to include interface information and the agent-remote-id
■
fixed—Formats calling number AVP to use a fixed format of up to 15 characters
consisting of all ASCII fields, similar to the fixed format of RADIUS attribute 31
(Calling-Station-Id):
■
Format for ATM interfaces:
systemName (up to 4 bytes) slot (2 bytes) port (1 byte) VPI (3 bytes)
VCI (5 bytes)
■
Format for Ethernet interfaces:
systemName (up to 4 bytes) slot (2 bytes) port (1 byte) VLAN (8 bytes)
■
Format for serial interfaces:
aaa tunnel calling-number-format
■
63
JUNOSe 11.0.x Command Reference Guide A to M
systemName (up to 4 bytes) slot (2 bytes) port (1 byte) 0 (8 bytes)
■
■
■
64
■
In the case of PPP terminated from LNS, the Calling-Station-Id attribute is
the value passed as the calling-station AVP.
fixed-adapter-embedded—Formats calling number AVP to use a fixed format of
up to 15 characters consisting of all ASCII fields with a 1-byte slot field, 1-byte
adapter field, and 1-byte port field:
■
Format for ATM interfaces:
systemName (up to 4 bytes) slot (1 byte) adapter (1 byte) port (1 byte)
VPI (3 bytes) VCI (5 bytes)
■
Format for Ethernet interfaces:
systemName (up to 4 bytes) slot (1 byte) adapter (1 byte) port (1 byte)
VLAN (8 bytes)
■
Format for serial interfaces:
systemName (up to 4 bytes) slot (1 byte) adapter (1 byte) port (1 byte)
0 (8 bytes)
■
For E120 and E320 routers, adapter is the number of the bay in which the
I/O adapter (IOA) resides, either 0 (representing the right IOA bay on the
E120 router and the upper IOA bay on the E320 router) or 1 (representing
the left IOA bay on the E120 router or the lower IOA bay on the E320 router).
For ERX7xx models, ERX14xx models, and ERX310 routers, which do not
use IOAs, adapter is always shown as 0.
■
Slot numbers 0 through 16 are shown as ASCII characters in the 1-byte slot
field.
fixed-adapter-new-field—Formats calling number AVP to use a fixed format of
up to 17 characters consisting of all ASCII fields with a 2-byte slot field, 1-byte
adapter field, and 2-byte port field:
■
Format for ATM interfaces:
systemName (up to 4 bytes) slot (2 bytes) adapter (1 byte) port (2 bytes)
VPI (3 bytes) VCI (5 bytes)
■
Format for Ethernet interfaces:
systemName (up to 4 bytes) slot (2 bytes) adapter (1 byte) port (2 bytes) VLAN
(8 bytes)
■
Format for serial interfaces:
systemName (up to 4 bytes) slot (2 bytes) adapter (1 byte) port (2 bytes)
0 (8 bytes)
■
For E120 routers and E320 routers, adapter is the number of the bay in
which the IOA resides, either 0 or 1. For ERX7xx models, ERX14xx models,
and ERX310 routers, which do not use IOAs, adapter is always shown as 0.
■
Slot numbers 0 through 16 are shown as integers in the 2-byte slot field.
■
include-agent-circuit-id—Formats calling number AVP to include only the
agent-circuit-id suboption
■
include-agent-circuit-id include-agent-remote-id—Formats calling number AVP
to include both the agent-circuit-id and agent-remote-id suboptions
aaa tunnel calling-number-format
Chapter 2: A Commands
Mode
■
include-agent-remote-id—Formats calling number AVP to include only the
agent-remote-id suboption
■
stacked—Includes a 4-byte stacked VLAN (S-VLAN) ID in the fixed,
fixed-adapter-embedded, and fixed-adapter-new-field calling number AVP formats
for Ethernet interfaces; by default, these formats do not include the S-VLAN ID
unless you specify the optional stacked keyword:
■
Format for Ethernet interfaces that use fixed:
systemName (up to 4 bytes) slot (2 bytes) port (1 byte) S-VLAN (4 bytes) VLAN
(4 bytes)
■
Format for Ethernet interfaces that use fixed-adapter-embedded:
systemName (up to 4 bytes) slot (1 byte) adapter (1 byte) port (1 byte) S-VLAN
(4 bytes) VLAN (4 bytes)
■
Format for Ethernet interfaces that use fixed-adapter-new-field:
systemName (up to 4 bytes) slot (2 bytes) adapter (1 byte) port (2 bytes)
S-VLAN (4 bytes) VLAN (4 bytes)
Global Configuration
aaa tunnel calling-number-format
■
65
JUNOSe 11.0.x Command Reference Guide A to M
aaa tunnel calling-number-format-fallback
Syntax
aaa tunnel calling-number-format-fallback
{ descriptive |
fixed [ stacked ] |
fixed-adapter-embedded [ stacked ] |
fixed-adapter-new-field [ stacked ] }
no aaa tunnel calling-number-format-fallback
Release Information
Command introduced in JUNOSe Release 8.1.0.
fixed-adapter-embedded, fixed-adapter-new-field, and stacked keywords added
in JUNOSe Release 10.0.0.
Description
Configures the fallback format for the tunnel calling number to be passed by the E
Series L2TP access concentrator (LAC) to the L2TP network server (LNS) in the L2TP
Calling Number attribute value pair (AVP) 22 when the PPPoE agent circuit ID is null
or unavailable. The fallback format is used only when the configured calling number
format includes either or both of the agent-circuit-id and agent-remote-id suboptions.
The no version restores the default fallback format, descriptive.
Options
■
descriptive—Configures the fallback format in descriptive format that includes
only interface information
■
fixed—Configures the fallback format in a fixed format of up to 15 characters
consisting of all ASCII fields, similar to the fixed format of RADIUS attribute 31
(Calling-Station-Id):
■
66
■
■
Fallback format for ATM interfaces:
systemName (up to 4 bytes) slot (2 bytes) port (1 byte) VPI (3 bytes)
VCI (5 bytes)
■
Fallback format for Ethernet interfaces:
systemName (up to 4 bytes) slot (2 bytes) port (1 byte) VLAN (8 bytes)
■
Fallback format for serial interfaces:
systemName (up to 4 bytes) slot (2 bytes) port (1 byte) 0 (8 bytes)
■
In the case of PPP terminated from LNS, the Calling-Station-Id attribute is
the value passed as the calling-station AVP.
fixed-adapter-embedded—Configures the fallback format in a fixed format of up
to 15 characters consisting of all ASCII fields with a 1-byte slot field, 1-byte
adapter field, and 1-byte port field:
■
Fallback format for ATM interfaces:
systemName (up to 4 bytes) slot (1 byte) adapter (1 byte) port (1 byte)
VPI (3 bytes) VCI (5 bytes)
■
Fallback format for Ethernet interfaces:
systemName (up to 4 bytes) slot (1 byte) adapter (1 byte) port (1 byte)
VLAN (8 bytes)
aaa tunnel calling-number-format-fallback
Chapter 2: A Commands
■
■
Mode
■
Fallback format for serial interfaces:
systemName (up to 4 bytes) slot (1 byte) adapter (1 byte) port (1 byte)
0 (8 bytes)
■
For E120 routers and E320 routers, adapter is the number of the bay in
which the I/O adapter (IOA) resides, either 0 (representing the right IOA bay
on the E120 router and the upper IOA bay on the E320 router) or 1
(representing the left IOA bay on the E120 router or the lower IOA bay on
the E320 router). For ERX7xx models, ERX14xx models, and ERX310 routers,
which do not use IOAs, adapter is always shown as 0.
■
Slot numbers 0 through 16 are shown as ASCII characters in the 1-byte slot
field.
fixed-adapter-new-field—Configures the fallback format in a fixed format of up
to 17 characters consisting of all ASCII fields with a 2-byte slot field, 1-byte
adapter field, and 2-byte port field:
■
Fallback format for ATM interfaces:
systemName (up to 4 bytes) slot (2 bytes) adapter (1 byte) port (2 bytes)
VPI (3 bytes) VCI (5 bytes)
■
Fallback format for Ethernet interfaces:
systemName (up to 4 bytes) slot (2 bytes) adapter (1 byte) port (2 bytes) VLAN
(8 bytes)
■
Fallback format for serial interfaces:
systemName (up to 4 bytes) slot (2 bytes) adapter (1 byte) port (2 bytes)
0 (8 bytes)
■
For E120 routers and E320 routers, adapter is the number of the bay in
which the IOA resides, either 0 or 1. For ERX7xx models, ERX14xx models,
and ERX310 routers, which do not use IOAs, adapter is always shown as 0.
■
Slot numbers 0 through 16 are shown as integers in the 2-byte slot field.
stacked—Includes a 4-byte stacked VLAN (S-VLAN) ID in the fixed,
fixed-adapter-embedded, and fixed-adapter-new-field fallback formats for Ethernet
interfaces; by default, these formats do not include the S-VLAN ID unless you
specify the optional stacked keyword:
■
Fallback format for Ethernet interfaces that use fixed:
systemName (up to 4 bytes) slot (2 bytes) port (1 byte) S-VLAN (4 bytes) VLAN
(4 bytes)
■
Fallback format for Ethernet interfaces that use fixed-adapter-embedded:
systemName (up to 4 bytes) slot (1 byte) adapter (1 byte) port (1 byte) S-VLAN
(4 bytes) VLAN (4 bytes)
■
Fallback format for Ethernet interfaces that use fixed-adapter-new-field:
systemName (up to 4 bytes) slot (2 bytes) adapter (1 byte) port (2 bytes)
S-VLAN (4 bytes) VLAN (4 bytes)
Global Configuration
aaa tunnel calling-number-format-fallback
■
67
JUNOSe 11.0.x Command Reference Guide A to M
aaa tunnel client-name
Syntax
aaa tunnel client-name name
no aaa tunnel client-name
Release Information
Description
Options
Mode
68
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the default tunnel client name. If the tunnel client name is not included in
the tunnel attributes that are returned from the domain map or authentication server,
the router uses the default name. The no version deletes the client name.
■
name—Default tunnel client name; a string of up to 32 characters
Global Configuration
aaa tunnel client-name
Chapter 2: A Commands
aaa tunnel-group
Syntax
Release Information
Description
Options
Mode
[ no ] aaa tunnel-group groupName
Command introduced before JUNOSe Release 7.1.0.
Specifies an AAA tunnel group and changes the mode to Tunnel Group Configuration
mode. In Tunnel Group Configuration mode, you can add up to 31 tunnel definitions.
The no version deletes the AAA group tunnel configuration from the router.
■
groupName—String of up to 64 characters (no spaces)
Global Configuration
aaa tunnel-group
■
69
JUNOSe 11.0.x Command Reference Guide A to M
aaa tunnel ignore
Syntax
aaa tunnel ignore { nas-port | nas-port-type } { enable | disable }
no aaa tunnel ignore { nas-port | nas-port-type }
Release Information
Description
Options
Mode
70
■
aaa tunnel ignore
Command introduced before JUNOSe Release 7.1.0.
Specifies whether to use the tunnel peer's NAS-Port [5] and NAS-Port-Type [61]
attributes. The no version negates the command or restores the default of enable.
■
nas-port—Configures the tunnel peer's supplied nas-port value
■
nas-port-type—Configures the tunnel peer's supplied nas-port-type value
■
enable—Implements the feature; this is the default setting
■
disable—Disables the feature
Global Configuration
Chapter 2: A Commands
aaa tunnel nas-port-method
Syntax
aaa tunnel nas-port-method cisco-avp
no aaa tunnel nas-port-method
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures the tunnel's default NAS port type to provide limited support for a Cisco
proprietary vendor-specific method when configuring the LAC to LNS NAS port
identification transfer mechanism. The no version disables the command.
NOTE: Use of this feature is not recommended and continued compatibility cannot
be guaranteed.
Mode
Global Configuration
aaa tunnel nas-port-method
■
71
JUNOSe 11.0.x Command Reference Guide A to M
aaa tunnel password
Syntax
aaa tunnel password name
no aaa tunnel password
Release Information
Description
Options
Mode
72
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the default tunnel password. If the tunnel password is not included in the
tunnel attributes that are returned from the domain map or authentication server,
the router uses the default password. The no version deletes the password.
■
name—Default tunnel password; a string of up to 32 characters
Global Configuration
aaa tunnel password
Chapter 2: A Commands
aaa tunnel switch-profile
Syntax
aaa tunnel switch-profile profileName
no aaa tunnel switch-profile
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.2.0.
Applies a default L2TP tunnel switch profile to a virtual router. The default tunnel
switch profile defines the L2TP tunnel switching behavior for the interfaces to which
this profile is assigned. The router uses the default tunnel switch profile if the tunnel
attributes returned from an AAA domain map or tunnel group or from a RADIUS
authentication server do not include a named tunnel switch profile. The no version
removes the default tunnel switch profile assignment from the virtual router.
■
profileName—Name of the default tunnel switch profile; a string of up to 64
alphanumeric characters
Global Configuration
aaa tunnel switch-profile
■
73
JUNOSe 11.0.x Command Reference Guide A to M
aaa tunnel tx-connect-speed-method
Syntax
aaa tunnel tx-connect-speed-method { static-layer2 | dynamic-layer2
| qos | actual }
no aaa tunnel tx-connect-speed-method
Release Information
Description
Options
Mode
74
■
Command introduced in JUNOSe Release 8.0.0.
Configures the method used to calculate the transmit connect speed of the subscriber's
access interface for establishing a tunneled L2TP session associated with a virtual
router. This speed is reported in L2TP Transmit (TX) Speed AVP 24. The router uses
the calculation method specified with the aaa tunnel tx-connect-speed-method
command if the tunnel attributes returned from an AAA domain map, an AAA tunnel
group, or a RADIUS authentication server do not include the transmit connect speed
calculation method. The no version removes configuration of the transmit connect
speed calculation method from the tunneled L2TP sessions associated with the virtual
router.
■
static-layer2—Calculates the transmit connect speed of the subscriber's access
interface based on statically configured settings for the underlying layer 2
interface
■
dynamic-layer2—Calculates the transmit connect speed of the subscriber's access
interface based on dynamically configured settings for the underlying layer 2
interface
■
qos—Calculates the transmit connect speed of the subscriber's access interface
based on settings determined by QoS
■
actual—Calculates the transmit connect speed of the subscriber's access interface
as the lesser of the dynamic-layer2 value or the qos value
Global Configuration
aaa tunnel tx-connect-speed-method
Chapter 2: A Commands
aaa user accounting interval
Syntax
aaa user accounting interval period
no aaa user accounting interval
Release Information
Description
Command introduced in JUNOSe Release 9.0.0.
Specifies the default user accounting interval used on the virtual router. This router
uses this value for users when no value is specified in the RADIUS Acct-Interim-Interval
attribute (RADIUS attribute 85). The no version restores the default setting of 0, which
turns off interim accounting for users attached to this virtual router.
NOTE: This command and the aaa service accounting interval command replace
the deprecated aaa accounting interval command, which may be removed
completely in a future release.
Options
Mode
■
period—Accounting interval in minutes in the range 10–1440, which sets the
time period between accounting updates for users on this virtual router; 0 is the
default
Global Configuration
aaa user accounting interval
■
75
JUNOSe 11.0.x Command Reference Guide A to M
aaa virtual-router
Syntax
aaa virtual-router indexInteger vrName
no aaa virtual-router indexInteger
Release Information
Description
Options
Mode
76
■
aaa virtual-router
Command introduced before JUNOSe Release 7.1.0.
For AAA broadcast accounting, adds a virtual router to a virtual router group. The
no version with the indexInteger parameter removes a specific virtual router from
the virtual router group.
■
indexInteger—Number in the range 1–4 that indicates the virtual router's listing
in the virtual router group; the indexInteger is used in the no version of the
command to delete a particular virtual router from the group
■
vrName—Name of virtual router that can receive AAA broadcast accounting
packets.
VR Group Configuration
Chapter 2: A Commands
aaa wins
Syntax
aaa wins { primary | secondary } ipAddress
no aaa wins { primary | secondary }
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the IP address of the WINS name server. The no version sets the
corresponding address to 0.
■
primary—Specifies the primary WINS name server
■
secondary—Specifies the secondary WINS name server
■
ipAddress—IP address of the name server
Global Configuration
aaa wins
■
77
JUNOSe 11.0.x Command Reference Guide A to M
access-class in
Syntax
access-class listName in
no access-class [ listName ] in
Release Information
Description
Options
Mode
78
■
access-class in
Command introduced before JUNOSe Release 7.1.0.
Restricts incoming connections between a particular virtual terminal line and the
addresses in an access list. The no version removes access restrictions.
■
listName—Name of the access list
Line Configuration
Chapter 2: A Commands
access-list
Syntax
Standard IP access list:
access-list accessListName { permit | deny }
{ srcIP srcWildIp | [ host ] srcIPHost | any } [ log ]
no access-list accessListName [ { permit | deny }
{ srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] ]
Extended IP access list:
access-list accessListName { permit | deny } ip { srcIP srcWildIp |
host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ]
no access-list accessListName [ { permit | deny } ip { srcIP srcWildIp |
host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ] ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Defines a standard or extended IP access list. The extended access list enables you
to specify a destination address or host, precedence, and type of service. This
command imposes an implicit last rule of “ deny ip any any” to deny all routes that
do not match previous rules in the access list. The no version removes the IP access
list, the specified entry in an access list, or the log for a specified entry.
■
accessListName—String of up to 32 alphanumeric characters
■
permit—Permits access if the conditions are matched
■
deny—Denies access if the conditions are matched
■
srcIP—Source IP address from which the packet is being sent
■
srcWildIp—Wildcard mask IP address
■
host—Identifies the address as a host
■
srcIPHost—Source host IP address; assumes a wildcard mask of 0
■
any—Creates an address of 0.0.0.0 with a wildcard mask of 255.255.255.255
■
dstIP—Destination IP address
■
dstWildIp—Wildcard mask IP address for destination
■
dstIPHost—Destination host IP address to which the packet is being sent
■
log—Logs an Info event into the ipAccessList log whenever the access-list rule is
matched
Global Configuration
access-list
■
79
JUNOSe 11.0.x Command Reference Guide A to M
accounting
Syntax
accounting { exec | commands level } listName
no accounting { exec | commands level }
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Enables AAA accounting services on a console line, a virtual terminal line, or a group
of lines and applies the specified accounting method list. The no version restores
the default method list.
NOTE: To disable accounting for a console line or virtual terminal line, specify a
nonexisting accounting method list name (for example, noAccounting).
Options
Mode
80
■
accounting
■
exec—Specifies that accounting information is captured for User Exec terminal
sessions on the line
■
level—Privilege level of User Exec mode commands for which accounting
information is captured; in the range 0–15
■
listName—Named method list used to specify how accounting is performed
Line Configuration
Chapter 2: A Commands
adapter accept
Syntax
Release Information
Description
adapter accept adapterSpecifier
Command introduced in JUNOSe Release 7.1.0.
Erases from NVS the type and configuration of the previous I/O adapter (IOA) in the
specified IOA bay, and allows you to configure a new IOA. Issue this command after
you have installed a different type of IOA in an IOA bay. You can use this command
only when the state of the IOA is not present or disabled (mismatch). There is no no
version.
NOTE: Issuing this command reboots the line module associated with the IOA, but
it does not accept its configuration.
To accept the configuration of the line module and its associated IOAs, issue the slot
accept command.
Options
Mode
■
adapterSpecifier—Particular IOA in the format slot/adapter:
■
slot—Number of the chassis slot; for E120 routers, in the range 0–5; for
E320 routers, in the range 0–5 or 11–16
■
adapter—Identifier for the IOA within the chassis slot, either 0 or 1, where:
■
0 indicates that the IOA is installed in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
Global Configuration
adapter accept
■
81
JUNOSe 11.0.x Command Reference Guide A to M
adapter disable
Syntax
Release Information
Description
adapter disable adapterSpecifier
Command introduced in JUNOSe Release 7.1.0.
Disables the IOA installed in the specified IOA bay. There is no no version.
NOTE: For IOAs that support hot-swapping, issuing this command does not reboot
the line module. For IOAs that do not support hot-swapping, issuing this command
reboots the line module associated with the IOA, but it does not disable it.
To disable the line module and its associated IOAs, issue the slot disable command.
Options
Mode
82
■
adapter disable
■
adapterSpecifier—Particular IOA in the format slot/adapter:
■
slot—Number of the chassis slot; for E120 routers, in the range 0–5; for
E320 routers, in the range 0–5 or 11–16
■
adapter—Identifier for the IOA within the chassis slot, either 0 or 1, where:
■
0 indicates that the IOA is installed in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
Global Configuration
Chapter 2: A Commands
adapter enable
Syntax
Release Information
Description
adapter enable adapterSpecifier
Command introduced in JUNOSe Release 7.1.0.
Enables the IOA installed in the specified IOA bay. There is no no version.
NOTE: For IOAs that support hot-swapping, issuing this command does not reboot
the line module. For IOAs that do not support hot-swapping, issuing this command
reboots the line module associated with the IOA, but it does not enable it.
To enable the line module and its associated IOAs, issue the slot enable command.
Options
Mode
■
adapterSpecifier—Particular IOA in the format slot/adapter:
■
slot—Number of the chassis slot; for E120 routers, in the range 0–5; for
E320 routers, in the range 0–5 or 11–16
■
adapter—Identifier for the IOA within the chassis slot, either 0 or 1, where:
■
0 indicates that the IOA is installed in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
Global Configuration
adapter enable
■
83
JUNOSe 11.0.x Command Reference Guide A to M
adapter erase
Syntax
Release Information
Description
adapter erase adapterSpecifier
Command introduced in JUNOSe Release 7.1.0.
Erases from NVS the type and configuration of the previous IOA in the specified IOA
bay, and allows you to configure a new IOA. Issue this command before you install
a different type of IOA in an IOA bay. There is no no version.
NOTE: Issuing this command reboots the line module associated with the IOA, but
it does not erase its configuration.
To erase the configuration of the line module and its associated IOAs, issue the slot
erase command.
Options
Mode
84
■
adapter erase
■
adapterSpecifier—Particular IOA in the format slot/adapter:
■
slot—Number of the chassis slot; for E120 routers, in the range 0–5; for
E320 routers, in the range 0–5 or 11–16
■
adapter—Identifier for the IOA within the chassis slot, either 0 or 1, where:
■
0 indicates that the IOA is installed in the right IOA bay (E120 router)
or the upper IOA bay (E320 router).
■
1 indicates that the IOA is installed in the left IOA bay (E120 router) or
the lower IOA bay (E320 router).
Global Configuration
Chapter 2: A Commands
address
Syntax
To set the tunnel endpoint address:
address serverAddress
no address
To configure RIP:
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
To configure NAT address pool ranges:
[ no ] address startIpAddress endIpAddress
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
From Domain Map Tunnel Configuration mode, sets the tunnel endpoint address of
an L2TP tunnel. The no version removes the address of the tunnel.
From Tunnel Group Tunnel Configuration mode, sets the tunnel endpoint address
of an L2TP tunnel. The no version removes the address of the tunnel.
From Interface Configuration or Subinterface Configuration mode, configures RIP to
run on the interface specified by the IP address or on an unnumbered interface. Uses
the default values: send version is RIP version 1, receive version is RIP version 1 and
version 2, authentication is not enabled. The no version deletes the RIP interface.
Use the address commands to configure RIP attributes on the network.
From IP NAT Pool Configuration mode, configures NAT IP address pool ranges. The
no version removes the range from the current NAT address pool.
Options
Mode
■
serverAddress—IP address of the LNS endpoint
■
ipAddress—Address of IP interface where RIP will be run
■
unnumbered—Specifies that RIP will be run on an unnumbered interface
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
startIpAddress—Starting IP address (inclusive) of the NAT pool range you are
creating
■
endIpAddress—Ending IP address (inclusive) of the NAT pool range you are
creating
Address Family Configuration (RIP), Domain Map Tunnel Configuration, IP NAT Pool
Configuration, Router Configuration (RIP), Tunnel Group Tunnel Configuration
address
■
85
JUNOSe 11.0.x Command Reference Guide A to M
address area
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
area { areaId | areaIdInt }
Command introduced before JUNOSe Release 7.1.0.
Creates an interface on which OSPF runs in the specified area, on top of the IP
interface at the specified IP address. Uses the default values. The no version deletes
OSPF interfaces. If the OSPF network was previously specified with the network
area command, the OSPF interface already exists, and you do not need to use this
command, unless you want to change the area of the OSPF interface to an area
different from the one specified by the network area command.
NOTE: Before you issue this command, you must first configure an interface with
the IP address specified by ipAddress or an interface configured as unnumbered.
You must issue this command before issuing any other OSPF address command.
Options
Mode
86
■
address area
■
ipAddress—IP address of the interface on which OSPF will be run
■
unnumbered—Configures OSPF on an unnumbered interface
■
interfaceType—Interface type; see “Interface Types and Specifiers” on
page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 1–4294967295
Router Configuration
Chapter 2: A Commands
address authentication key
Syntax
address { ipAddress | unnumbered interfaceType interfaceSpecifier }
authentication key [ 0 | 8 ] authkey
no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ]
authentication key
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the password for text authentication and the key for MD5 authentication.
The no version clears the key for the interface. Supported only in RIP version 2.
Authentication is disabled by default.
■
ipAddress—Address of IP interface where RIP will be run
■
unnumbered—Specifies that RIP will be run on an unnumbered interface
■
interfaceType—Interface type; see “Interface Types and Specifiers” on
page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
0—Indicates the authKey is entered in unencrypted form (plaintext); this is the
default option
■
8—Indicates the authKey is entered in encrypted form (ciphertext)
■
authkey—Password sent with RIP messages or the key used to encrypt/decrypt
RIP messages, depending on the authentication mode set for this interface
Address Family Configuration, Router Configuration
address authentication key
■
87
JUNOSe 11.0.x Command Reference Guide A to M
address authentication-key
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
authentication-key [ 0 | 8 ] authKey
Command introduced before JUNOSe Release 7.1.0.
Assigns a password used by neighboring routers that are using OSPF simple password
authentication. The no version deletes the password.
NOTE: You must issue the address area command before issuing this command.
Options
Mode
88
■
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
interfaceType—Interface type; see “Interface Types and Specifiers” on
page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
0—Indicates the authKey is entered in unencrypted form (plaintext); this is the
default option
■
8—Indicates the authKey is entered in encrypted form (ciphertext)
■
authKey—Password, string of up to 8 characters
Router Configuration
address authentication-key
Chapter 2: A Commands
address authentication message-digest
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
authentication message-digest
Command introduced before JUNOSe Release 7.1.0.
Specifies that MD5 authentication is used for the OSPF interface. The no version sets
authentication for the interface to none, but leaves any configured MD5 key intact.
NOTE: You must issue the address area command before issuing this command.
Options
Mode
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
Router Configuration
address authentication message-digest
■
89
JUNOSe 11.0.x Command Reference Guide A to M
address authentication mode
Syntax
address { ipAddress | unnumbered interfaceType interfaceSpecifier }
authentication mode { text | md5 keyID }
no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ]
authentication mode
Release Information
Description
Options
Mode
90
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the type of authentication used on this interface. The no version removes
authentication from the interface. Supported only in RIP version 2. Authentication
is disabled by default.
■
ipAddress—Address of IP interface where RIP will be run
■
unnumbered—Specifies RIP will be run on an unnumbered interface
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
text—Simple text password is sent with each RIP message. If the password is
not possessed by neighbors, the message is rejected.
■
md5—MD5 message-digest algorithms are used to encrypt and compress the
RIP message.
■
keyID—Number identifying the MD5 key. Neighbors must share the MD5 key to
decrypt the message and encrypt the response.
Address Family Configuration, Router Configuration
address authentication mode
Chapter 2: A Commands
address authentication-none
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
authentication-none
Command introduced before JUNOSe Release 7.1.0.
Specifies that no authentication is to be used for the OSPF interface. The no version
has no effect.
NOTE: You must issue the address area command before issuing this command.
Options
Mode
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
Router Configuration
address authentication-none
■
91
JUNOSe 11.0.x Command Reference Guide A to M
address bfd-liveness-detection
Syntax
address { ipAddress | unnumbered interfaceType interfaceSpecifier }
bfd-liveness-detection [ minimum-interval minInterval |
[ minimum-receive-interval minRecInterval ]
[ minimum-transmit-interval minTransInterval ] ] [ multiplier multValue ]
no address { ipAddress | unnumbered interfaceType interfaceSpecifier }
bfd-liveness-detection
Release Information
Description
Options
Mode
92
■
Command introduced in JUNOSe Release 8.0.0.
Enables BFD (bidirectional forwarding detection) on an interface running RIP and
defines BFD values to be negotiated between peers for detection of IP data path
failures. The no version disables BFD on the RIP interface.
■
ipAddress—Address of IP interface where RIP will be run
■
unnumbered—Specifies that RIP will be run on an unnumbered interface
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
minInterval —Minimum proposed transmit interval and required receive interval
for BFD control packets; has the same effect as configuring the minimum receive
interval and the minimum transmit interval to the same value; number in the
range 100–65535 milliseconds—for ES2 4G LM only, the range is 10–65535
milliseconds; default value is 300 milliseconds
■
minRecInterval—Minimum interval at which the local peer must receive BFD
control packets sent by the remote peer; number in the range 100–65535
milliseconds—for ES2 4G LM only, the range is 10–65535 milliseconds; default
value is 300 milliseconds
■
minTransInterval—Minimum proposed interval between BFD control packets
sent by the local peer; number in the range 100–65535 milliseconds—for ES2
4G LM only, the range is 10–65535 milliseconds; default value is 300 milliseconds
■
multValue—Detection multiplier value that the remote peer router multiplies by
the local peer's negotiated transmit interval to determine the remote peer's BFD
liveness detection interval; equal to the number of BFD packets that can be
missed before the BFD session is declared down; number in the range 1–255;
default value is 3
Address Family Configuration, Router Configuration
address bfd-liveness-detection
Chapter 2: A Commands
address cost
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier } cost intfCost
Command introduced before JUNOSe Release 7.1.0.
Specifies a cost metric for an OSPF interface. Used in the calculation of the SPF
routing table. The no version resets the path cost to the default.
NOTE: You must issue the address area command before issuing this command.
Options
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
Mode
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
intfCost—Link-state metric cost; a number in the range 0–65535; default value
is 10
Router Configuration
address cost
■
93
JUNOSe 11.0.x Command Reference Guide A to M
address dead-interval
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
dead-interval deadInterval
Command introduced before JUNOSe Release 7.1.0.
Sets the time period that the router's neighbors should wait without seeing hello
packets from the router before they declare the router to be down. The no version
resets the dead interval to its default.
NOTE: You must issue the address area command before issuing this command.
Options
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
Mode
94
■
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
deadInterval—Number in the range 0–2147483647 seconds; default value is 40
seconds
Router Configuration
address dead-interval
Chapter 2: A Commands
address-family
Syntax
For BGP:
[ no ] address-family { { ipv4 | ipv6 } [ unicast | multicast
| [ unicast ] vrf vrfName ] |
{ vpnv4 | vpnv6 } [ unicast ] | l2vpn [ signaling ] | route-target [ signaling ] |
vpls vplsName | vpws vpwsName }
For IS-IS:
[ no ] address-family ipv6 [ unicast | multicast | unicast multicast ]
For RIP:
[ no ] address-family ipv4 [ unicast ] vrf vrfName
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
l2vpn and signaling keywords added in JUNOSe Release 7.1.0.
vpls keyword and vplsName variable added in JUNOSe Release 7.1.0.
vpws keyword and vpwsName variable added in JUNOSe Release 8.1.0.
route-target signaling keywords and IS-IS IPv6 version added in JUNOSe
Release 8.2.0.
For BGP, configures the router to exchange addresses for the specified address family.
This command takes effect immediately.
■
For the IPv4 address family, configures the router or a specific VRF to exchange
IPv4 addresses in unicast, multicast, or VPN mode.
■
For the IPv6 address family, configures the router or a specific VRF to exchange
IPv6 addresses in unicast, multicast, or VPN mode.
■
For the L2VPN address family, configures a router to exchange layer 2 NLRI for
all VPLS instances and all L2VPN (VPWS) instances.
■
For the VPLS address family, configures the router to exchange layer 2 NLRI for
the VPLS address family for a specified VPLS instance.
■
For the VPWS address family, configures the router to exchange layer 2 NLRI
for the VPWS address family for a specified L2VPN (VPWS) instance.
■
For the route-target address family, configures the router to exchange route-target
membership NLRI (RT-MEM-NLRI) that includes information about membership
in VPN route-target extended communities.
For IS-IS, configures IS-IS to exchange IPv6 addresses.
For RIP, configures RIP in a specific VRF to exchange IPv4 addresses.
For all routing protocols, the no version removes the address family.
address-family
■
95
JUNOSe 11.0.x Command Reference Guide A to M
Options
Mode
Related Topics
96
■
address-family
■
ipv4—Specifies sessions that carry standard IPv4 address prefixes (default)
■
ipv6—Specifies sessions that carry IPv6 address prefixes
■
multicast—Specifies multicast prefixes
■
unicast—Specifies unicast prefixes (default)
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
vpnv4—Specifies sessions that carry customer VPN-IPv4 prefixes, each of which
has been made globally unique by adding an 8-byte route distinguisher
■
vpnv6—Specifies sessions that carry customer VPN-IPv6 prefixes, each of which
has been made globally unique by adding an 8-byte route distinguisher
■
l2vpn—Specifies sessions that carry L2VPN reachability information
■
l2vpn signaling—Specifies BGP signaling of L2VPN reachability information;
currently, you can omit the signaling keyword with no adverse effects
■
route-target—Specifies sessions that carry route-target membership information
■
route-target signaling—Specifies BGP signaling of route-target membership
information; currently, this can be omitted with no adverse effects
■
vplsName—Name of a VPLS instance for which you are specifying the L2VPN
address family; must be issued for each separate VPLS instance
■
vpwsName—Name of a layer 2 VPN (VPWS) instance for which you are specifying
the L2VPN address family; must be issued for each separate L2VPN instance
Router Configuration
■
Configuring BGP Signaling for L2VPNS and Configuring BGP Signaling for VPLS in
the JUNOSe BGP and MPLS Configuration Guide
Chapter 2: A Commands
address hello-interval
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
hello-interval helloInterval
Command introduced before JUNOSe Release 7.1.0.
Specifies the interval between hello packets that the router sends on the interface.
The no version resets the hello interval to its default.
NOTE: You must issue the address area command before issuing this command.
Options
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
Mode
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
helloInterval—Number in the range 1–65535 seconds; default value is 10 seconds
Router Configuration
address hello-interval
■
97
JUNOSe 11.0.x Command Reference Guide A to M
address message-digest-key md5
Syntax
address { ipAddress | unnumbered interfaceType interfaceSpecifier }
message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey
no address { ipAddress | unnumbered interfaceType interfaceSpecifier }
message-digest-key keyID
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Enables OSPF MD5 authentication and configures the MD5 key. The no version
deletes an MD5 key.
NOTE: If all the MD5 keys have been deleted, the authentication type is still MD5,
but you need to configure MD5 keys.
To disable MD5 authentication for the interface, use the address authentication-none
command.
You must issue the address area command before issuing this command.
Options
Mode
98
■
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
keyID—Key identifier in the range 1–255
■
md5—Specifies use of the MD5 algorithm
■
0—Indicates the msgDigestKey is entered in unencrypted form (plaintext); this
is the default option
■
8—Indicates the msgDigestKey is entered in encrypted form (ciphertext)
■
msgDigestKey—OSPF password; string of up to 16 alphanumeric characters
Router Configuration
address message-digest-key md5
Chapter 2: A Commands
address network
Syntax
address { ipAddress | unnumbered interfaceType interfaceSpecifier }
network { broadcast | non-broadcast | point-to-point }
no address { ipAddress | unnumbered interfaceType interfaceSpecifier } network
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures the OSPF network type for the specified interface to something other
than the default for the network medium. The no version restores the default value
for the medium.
NOTE: You must issue the address area command before issuing this command.
Options
Mode
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
broadcast—Sets network type to broadcast
■
non-broadcast—Sets network type to NBMA
■
point-to-point—Sets network type to point-to-point
Router Configuration
address network
■
99
JUNOSe 11.0.x Command Reference Guide A to M
address passive-interface
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
passive-interface
Command introduced before JUNOSe Release 7.1.0.
Disables the transmission of routing updates on an interface. OSPF routing information
is neither sent nor received through the specified router interface. The specified
interface address appears as a stub network in the OSPF domain. The no version
reenables the transmission of routing updates.
NOTE: You must issue the address area command before issuing this command.
Options
Mode
100
■
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
Router Configuration
address passive-interface
Chapter 2: A Commands
address-pool-name
Syntax
address-pool-name poolName
no address-pool-name
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies an address pool name to associate with the domain name being configured.
The no version removes the pool name.
■
poolName—Name of the pool to associate with the domain name
Domain Map Configuration
address-pool-name
■
101
JUNOSe 11.0.x Command Reference Guide A to M
address priority
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
priority intfPriority
Command introduced before JUNOSe Release 7.1.0.
Sets the router priority. Used in determining the designated router for the particular
network. This designation only applies to multi-access networks. Every broadcast
and nonbroadcast multiaccess network has a designated router. The no version
restores the default value.
NOTE: You must issue the address area command before issuing this command.
Options
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
Mode
102
■
address priority
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
intfPriority—Priority value, an 8-bit number in the range 1–255; default value
is 1
Router Configuration
Chapter 2: A Commands
address receive version
Syntax
address { ipAddress | unnumbered interfaceType interfaceSpecifier }
receive version { 1 | 2 | 1 2 | 2 1 | off }
no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] receive version
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Restricts the RIP version that the router can receive on an interface. The no version
sets the interface back to the default value, receiving both RIP version 1 and version 2.
■
ipAddress—Address of IP interface where RIP will be run
■
unnumbered—Specifies that RIP will be run on an unnumbered interface
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
1—Specifies RIP version 1 only
■
2—Specifies RIP version 2 only
■
1 2—Specifies RIP version 1 and version 2; the default value
■
2 1—Specifies RIP version 2 and version 1
■
off—Turns reception off
Address Family Configuration, Router Configuration
address receive version
■
103
JUNOSe 11.0.x Command Reference Guide A to M
address retransmit-interval
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
retransmit-interval retransInterval
Command introduced before JUNOSe Release 7.1.0.
Specifies the time between LSA retransmissions for the interface when an
acknowledgment for the LSA is not received. The no version restores the default
value.
NOTE: You must issue the address area command before issuing this command.
Options
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
Mode
104
■
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
retransInterval—Number in the range 0–3600 seconds; default value is 5 seconds
Router Configuration
address retransmit-interval
Chapter 2: A Commands
address send version
Syntax
address { ipAddress | unnumbered interfaceType interfaceSpecifier }
send version { 1 | 2 | 1 2 | 2 1 | off }
no address [ ipAddress | unnumbered interfaceType interfaceSpecifier ] send version
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Restricts the RIP version that the router can send on an interface. The no version
sets the interface back to the default value, sending only RIP version 1.
■
ipAddress—Address of IP interface where RIP will be run
■
unnumbered—Specifies that RIP will be run on an unnumbered interface
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
■
1—Specifies RIP version 1 only
■
2—Specifies RIP version 2 only
■
1 2—Specifies RIP version 1 and version 2
■
2 1—Specifies RIP version 2 and version 1
■
off—Turns reception off
Address Family Configuration, Router Configuration
address send version
■
105
JUNOSe 11.0.x Command Reference Guide A to M
address transmit-delay
Syntax
Release Information
Description
[ no ] address { ipAddress | unnumbered interfaceType interfaceSpecifier }
transmit-delay transmDelay
Command introduced before JUNOSe Release 7.1.0.
Sets the estimated time it takes to transmit a link-state update packet on the interface.
The no version restores the default value.
NOTE: You must issue the address area command before issuing this command.
Options
■
ipAddress—OSPF interface address previously specified with the address
command
■
unnumbered—Indicates that OSPF is running on an unnumbered interface
previously specified with the address command
■
Mode
106
■
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface
type; see Interface Types and Specifiers on page 5
transmDelay—Link-state transmit delay, a number in the range 0–3600 seconds;
default value is 1 second
Router Configuration
address transmit-delay
Chapter 2: A Commands
adjustment-factor
Syntax
adjustment-factor dslType value
no adjustment-factor dslType
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 9.1.0.
Configures an adjustment factor that is applied globally to the ANCP-reported
downstream and upstream data rate for all subscribers of a particular DSL line type.
The adjusted data rate results in an accurate QoS shaping rate. The no version restores
the default, wherein the rate is not adjusted.
■
dslType—Type of DSL subscriber line for which the data rate is adjusted by the
specified QoS adjustment factor: adsl1, adsl2, adsl2+, vdsl, vdsl2, or sds
■
value—QoS adjustment factor applied to upstream or down stream data rates
for the DSL type; a percentage in the range 1–100
L2C Configuration
adjustment-factor
■
107
JUNOSe 11.0.x Command Reference Guide A to M
agent context-name
Syntax
agent context-name contextName [ wildcard ] [ limit contextNameLimit ]
no agent
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Specifies the virtual router SNMP agent on which you want to poll MIB objects. The
no version returns the context name to the default context (virtual router).
■
contextName—Context name of the agent
NOTE: The contextName value is the virtual router number in the order the virtual
router was created (for example, router1, router2, and so on). Use the show snmp
agent command to obtain the context name for the virtual router.
Mode
108
■
■
wildcard—Specifies that the context name is a wildcard value
■
contextNameLimit—Maximum number of agents to be polled
SNMP Trigger Configuration
agent context-name
Chapter 2: A Commands
aggregate-address
Syntax
Release Information
Description
Options
Mode
[ no ] aggregate-address { address mask | ipv6Prefix }
[ as-set | summary-only | attribute-map attributeMapTag |
advertise-map advertiseMapTag | suppress-map suppressMapName ]*
Command introduced before JUNOSe Release 7.1.0.
Creates an aggregate entry in a BGP routing table. The no version removes the
aggregate.
■
address—Aggregate IPv4 address
■
mask—Aggregate IPv4 mask
■
ipv6Prefix—Aggregate IPv6 prefix
■
as-set—If the as-set option is not specified, the path attributes of the aggregate
route are set in the same way as locally originated routes, except that the
atomic_aggregate and aggregator attributes are added. If the as-set option is
used, the path attributes of the aggregate route are determined by combining
the path attributes of the aggregated routes as described in RFC 4271—A Border
Gateway Protocol 4 (BGP-4). If the as-set option is used, the path attributes of the
aggregate route may change whenever one of the aggregated routes changes,
causing the aggregate route to be readvertised.
■
summary-only—Filters all more specific routes from updates. summary-only
not only creates the aggregate route but also suppresses advertisements of
more-specific routes to all neighbors. If you only want to suppress advertisements
to certain neighbors, you may use the neighbor distribute-list command, with
caution. If a more-specific route leaks out, all BGP speakers will prefer that route
over the less-specific aggregate you are generating (using longest-match routing).
Alternatively, you can use the suppress-map keyword to suppress specific routes.
■
attributeMapTag—String of up to 32 characters that identifies the route map used
to set the attributes of the aggregate route
■
advertiseMapTag—String of up to 32 characters that identifies the route map
used to set the routes to create AS-SET origin communities in the range
■
suppressMapName—String of up to 32 characters that identifies a route map that
filters routes to be suppressed
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Address Family Configuration, Router Configuration
aggregate-address
■
109
JUNOSe 11.0.x Command Reference Guide A to M
aggregation-node
Syntax
aggregation-node { nodeValue | atm | atm-vc | atm-vp vpValue | ethernet | fr-vc |
forwarding | ppp-interface | svlan svlanValue | vlan }
no aggregation-node
Release Information
Description
Options
Mode
Related Topics
110
■
aggregation-node
Command introduced in JUNOSe Release 8.0.0.
ppp-interface keyword added in JUNOSe Release 10.3.0.
Configures the aggregation node value. The no version restores the default value,
where the forwarding interface becomes the aggregation node.
■
nodeValue— Aggregation node number in the range 1–65535
■
vpValue—ATM VPI number in the range 0–255
■
svlanValue—S-VLAN ID number in the range 0–4095
Policy Parameter Configuration
■
Creating a Classifier Group for a Policy List
Chapter 2: A Commands
aggressive-mode
Syntax
aggressive-mode { accepted | requested | required }
no aggressive-mode
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
accepted, requested, and required keywords added in JUNOSe Release 7.3.0.
Enables aggressive mode negotiation for the tunnel. The no version restores the
default, no aggressive mode.
■
accepted—Accepts aggressive mode when proposed by peers
■
requested—Requests aggressive mode when negotiating with peers
■
required—Only requests and accepts aggressive mode when negotiating with
peers
IKE Policy Configuration
aggressive-mode
■
111
JUNOSe 11.0.x Command Reference Guide A to M
allow
Syntax
Release Information
Description
Options
Mode
112
■
allow
[ no ] allow domainName
Command introduced before JUNOSe Release 7.1.0.
Specifies the domain names that are to be allowed access to AAA authentication.
The no version negates the command.
■
domainName—Name of the domain; maximum of 64 characters
AAA Profile Configuration
Chapter 2: A Commands
append-after
Syntax
Release Information
Description
Options
Mode
append-after indexNumber next-address ipAddress [ [ mask ] ipMask ] [ loose ]
Command introduced before JUNOSe Release 7.1.0.
Adds a next hop after a particular index in the MPLS explicit path. The sequence
numbers for existing hops after the index adjust automatically. There is no no version.
■
indexNumber—Number of a node in an ordered set of abstract nodes
■
ipAddress—Address of the next hop
■
ipMask—[ not currently used ] mask for the next adjacent address
■
loose—Indicates the node is not necessarily directly connected (adjacent) to the
previous node in the path. If loose is not configured, the configuration defaults
to strict. Strict indicates that the node is directly connected to the previous node.
Explicit Path Configuration
append-after
■
113
JUNOSe 11.0.x Command Reference Guide A to M
application
Syntax
application applicationType1 [ applicationType2 [ applicationType3 ] ]
no application
Release Information
Description
Options
Mode
114
■
application
Command introduced before JUNOSe Release 7.1.0.
Specifies the type of application that is secured by connections created with this
IPSec transport profile. You can specify multiple application types. The no version
restores the default application, L2TP.
■
applicationType—One of the following application types:
■
dvmrp—Secures DVMRP traffic.
■
gre—Secures GRE traffic.
■
l2tp—Secures L2TP traffic; this is the default application
■
l2tp-nat-passthrough—Secures L2TP traffic and also allows clients to connect
from behind NAT devices that support IPSec passthrough
IPSec Transport Profile Configuration
Chapter 2: A Commands
aps events
Syntax
aps events list [ list ]*
no aps events
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.2.0.
Enables line modules to deliver APS events to the necessary SNMP traps. You can
configure notification for specific events. The no version disables the delivery of APS
events from line modules to SNMP traps.
■
list—One of the following APS events:
■
all—Configures notification of all APS events
■
channel-mismatch—Configures notification of APS channel mismatches
■
feplf—Configures notification of APS far-end protection line failures
■
mode-mismatch—Configures notification of APS mode mismatches
■
psbf—Configures notification of APS protection signal byte failures
■
switchover—Configures notification of APS switchovers
■
*—Indicates that one or more parameters can be repeated multiple times
in a list in the command line
Global Configuration
aps events
■
115
JUNOSe 11.0.x Command Reference Guide A to M
aps force
Syntax
aps force channelNumber
no aps force
Release Information
Description
Options
Mode
116
■
aps force
Command introduced before JUNOSe Release 7.1.0.
Forces the specified interface to be replaced by the inactive interface in an APS/MSP
group. The no version allows the specified interface to resume operation.
■
channelNumber—One of the following channel numbers:
■
0—Switches from the protect interface back to the working interface
■
1—Switches from the working interface to the protect interface
Controller Configuration
Chapter 2: A Commands
aps group
Syntax
aps group groupName
no aps group
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Assigns an interface to an APS/MSP group. The no version removes a group of
APS/MSP interfaces.
■
groupName—Name of the APS/MSP group to which the active and standby
interfaces belong; string of up to 32 characters
Controller Configuration
aps group
■
117
JUNOSe 11.0.x Command Reference Guide A to M
aps lockout
Syntax
aps lockout [ 0 ]
no aps lockout
Release Information
Description
Options
Mode
118
■
aps lockout
Command introduced before JUNOSe Release 7.1.0.
Prevents the working interface from switching to the protect interface. The no version
restores the default situation, in which the working interface can switch to the protect
interface.
■
0—Specifies the channel number that identifies the protect interface; because
the protect interface is always assigned channel number 0, this is the only valid
option
Controller Configuration
Chapter 2: A Commands
aps manual
Syntax
aps manual channelNumber
no aps manual
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Forces the working interface to switch to the protect interface, unless a request of
equal or higher priority exists. The no version allows the specified working interface
to resume the active role.
■
channelNumber—One of the following channel numbers:
■
0—Switches from the protect interface back to the working interface
■
1—Switches from the working interface to the protect interface
Controller Configuration
aps manual
■
119
JUNOSe 11.0.x Command Reference Guide A to M
aps protect
Syntax
aps protect [ 0 ]
no aps protect
Release Information
Description
Options
Mode
120
■
aps protect
Command introduced before JUNOSe Release 7.1.0.
Configures an interface as a protect interface. The no version removes the relationship
between the protect interface and the active interface.
■
0—Specifies the channel number that identifies the protect interface; because
the protect interface is always assigned channel number 0, this is the only valid
option
Controller Configuration
Chapter 2: A Commands
aps revert
Syntax
aps revert minutes
no aps revert
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures the APS/MSP group to operate in revertive mode. The no version restores
the default setting, nonrevertive mode.
■
minutes—Number of minutes in the range 5–12 at which the interface resumes
the active role after that interface becomes available
Controller Configuration
aps revert
■
121
JUNOSe 11.0.x Command Reference Guide A to M
aps unidirectional
Syntax
Release Information
Description
Mode
122
■
[ no ] aps unidirectional
Command introduced before JUNOSe Release 7.1.0.
Configures the APS/MSP group to operate in unidirectional mode, the default setting.
The no version configures the APS/MSP group to operate in bidirectional mode.
Controller Configuration
aps unidirectional
Chapter 2: A Commands
aps working
Syntax
aps working [ 1 ]
no aps working
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures an interface as a working interface. The no version removes the
configuration.
■
1—Channel number that identifies the working interface; because the working
interface is always assigned channel number 1, this is the only valid option
Controller Configuration
aps working
■
123
JUNOSe 11.0.x Command Reference Guide A to M
area
Syntax
Description
124
■
area
no area { areaId | areaIdInt }
This command has only a no version. See the no area command for a complete
description.
Chapter 2: A Commands
area-authentication
Syntax
Release Information
Description
Options
Mode
[ no ] area-authentication { csnp | psnp }
Command introduced before JUNOSe Release 7.1.0.
Enables or disables (suppresses) simple text authentication or HMAC MD5
authentication of IS-IS level 1 CSNP packets or PSNP packets. The no version restores
the default behavior, in which authentication of IS-IS level 1 CSNPs and PSNPs is
disabled.
■
csnp—Enables authentication of IS-IS level 1 complete sequence number PDUs
(CSNPs)
■
psnp—Enables authentication of IS-IS level 1 partial sequence number PDUs
(PSNPs)
Router Configuration
area-authentication
■
125
JUNOSe 11.0.x Command Reference Guide A to M
area-authentication-key
Syntax
area-authentication-key [ 0 | 8 ] authKey
no area-authentication-key
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Assigns a password used by neighboring routers for authentication of IS-IS level 1
LSPs, CSNPs, and PSNPs. The no version deletes the password.
NOTE: Issuing this command enables simple authentication of level 1 LSPs only. To
enable authentication of level 1 CSNPs or PSNPs, use the area-authentication
command.
Options
Mode
126
■
■
0—Indicates the authKey is entered in unencrypted form (plaintext); this is the
default option
■
8—Indicates the authKey is entered in encrypted form (ciphertext)
■
authKey—Password, string of up to 8 characters
Router Configuration
area-authentication-key
Chapter 2: A Commands
area default-cost
Syntax
area { areaId | areaIdInt } default-cost defaultCost
no area { areaId | areaIdInt } default-cost
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies a cost for the default summary route sent into a stub area. A stub area is
an OSPF area that carries a default route, intra-area routes, and interarea routes, but
does not carry external routes. You cannot configure virtual links across a stub area.
Stub areas cannot contain an AS boundary router. The no version removes the
configured default route cost.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value 0–4294967295
■
defaultCost—Stub area's advertised external route cost (cost metric); an integer
in the range 0–16777215
Router Configuration
area default-cost
■
127
JUNOSe 11.0.x Command Reference Guide A to M
area-message-digest-key
Syntax
area-message-digest-key keyId hmac-md5 [ 0 | 8 ] key
[ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay
startAcceptMonth } startAcceptYear ] ]
[ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay
startGenMonth } startGenYear ] ]
[ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay |
stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ]
[ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay
stopGenMonth } stopGenYear ] } ]
no area-message-digest-key keyId
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Specifies an HMAC MD5 key that the router uses to create a secure, encrypted
message digest of each IS-IS level 1 packet (LSPs, CSNPs, and PSNPs). The digest is
inserted into the packet from which it is created. Using this algorithm for area routers
protects against unauthorized routers injecting false routing information into your
network.
You can specify when the router will start (default is the current time) and stop
(default is never) accepting packets that include a digest made with this key. You
can specify when the router will start (default is the current time plus 2 minutes) and
stop (default is never) generating packets that include a digest made with this key.
The no version deletes the key specified by the keyId.
NOTE: Issuing this command enables MD5 authentication of level 1 LSPs only. To
enable authentication of level 1 CSNPs or PSNPs, use the area-authentication
command.
Options
128
■
■
keyId—Integer from 1 to 255 that is a unique identifier for the secret key, sent
with the message digest in the packet.
■
0—Indicates the key is entered in unencrypted form (plaintext); default option
■
8—Indicates the key is entered in encrypted form (ciphertext)
■
key—String of up to 20 alphanumeric characters; secret key used by the HMAC
MD5 algorithm to generate the message digest
■
startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear—Time, month,
day, year that the router will start accepting packets created with this password.
Use military time format HH : MM[: SS ].
■
startGenTime, startGenMonth, startGenDay, startGenYear—Time, month, day,
year that the router will start inserting this password into packets. Use military
time format HH : MM[: SS ].
area-message-digest-key
Chapter 2: A Commands
Mode
■
never—Indicates the router never stops accepting or generating packets; overrides
previously specified stop times and keeps using the authentication key in sending
and receiving PDUs with the corresponding authentication indefinitely
■
stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear—Time, month,
day, year that the router will stop accepting packets created with this password.
Use military time format HH : MM[: SS ].
■
stopGenTime, stopGenMonth, stopGenDay, stopGenYear—Time, month, day, year
that the router will stop inserting this password into packets. Use military time
format HH : MM[: SS ].
Router Configuration
area-message-digest-key
■
129
JUNOSe 11.0.x Command Reference Guide A to M
area nssa
Syntax
Release Information
Description
Options
Mode
130
■
area nssa
[ no ] area { areaId | areaIdInt } nssa [ default-information-originate [ always |
metric absoluteValue | metric-type 1 | metric-type 2 | route-map mapTag ]* ]
[ no-summary ]
Command introduced before JUNOSe Release 7.1.0.
no-summary keyword added in JUNOSe Release 7.2.0.
Configures an area as an NSSA and controls generation of type 7 default LSAs. NSSAs
are similar to stub areas but have the additional capability of importing AS external
routes in a limited fashion. The no version removes the specified option for
default-information-originate, removes default-information-originate, or removes the
NSSA designation from the area.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
default-information-originate—Causes the generation of a type 7 default LSA if
a default route exists in the routing table.
■
always—Creates the default route if it does not exist
■
absoluteValue—Metric applied to the generated type 7 default LSAs; ranges from
0–4294967295
■
metric-type 1—Cost of the external routes is equal to the sum of all internal costs
and the external cost
■
metric-type 2—Cost of the external routes is equal to the external cost alone;
this is the OSPF default
■
mapTag—String of up to 32 alphanumeric characters that specifies a route map
applied to the generated type 7 default LSAs
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
■
no-summary—Restricts T3 summary LSAs from flowing into the NSSA area (T7
external LSAs and T3 default route LSAs are still injected into the area)
Router Configuration
Chapter 2: A Commands
area range
Syntax
For OSPFv2:
[ no ] area { areaId | areaIdInt } range ipAddress mask [ do-not-advertise ]
[ cost costValue ]
For OSPFV3:
[ no ] area { areaId | areaIdInt } range ipv6Prefix/ipv6PrefixLength
[ do-not-advertise | advertise | cost costValue ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
cost keyword and costValue variable for OSPFv2 added in JUNOSe Release 8.1.0.
Aggregates routes at an area boundary. By default, the range of configured networks
is advertised in type 3 (summary) LSAs. The no version disables this function.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address to match
■
mask—IP address mask
■
ipv6Prefix—IPv6 network number to match
■
ipv6PrefixLength—Length of the IPv6 prefix; a decimal value that indicates how
many of the higher-order contiguous bits of the IPv6 address make up the prefix
(the network portion of the IPv6 address). A slash (/) must precede this value.
■
do-not-advertise—Specifies that the range of configured networks is not advertised
■
advertise—Specifies that the range of configured networks is advertised (IPv6
only)
■
costValue—Cost value for the specified range of networks in the range 0–65535
Router Configuration
area range
■
131
JUNOSe 11.0.x Command Reference Guide A to M
area stub
Syntax
Release Information
Description
Options
Mode
132
■
area stub
[ no ] area { areaId | areaIdInt } stub [ no-summary ]
Command introduced before JUNOSe Release 7.1.0.
no-summary keyword for OSPFv2 added in JUNOSe Release 7.2.0.
Defines an area as a stub area. A stub area is an OSPF area that carries a default
route, intra-area routes, and interarea routes, but does not carry AS external routes.
This reduces the size of the area's OSPF database and decreases memory usage for
external routers in the stub area. The no version disables this function.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
no-summary—Specifies that the summary LSA not be sent into the stub area
Router Configuration
Chapter 2: A Commands
area virtual-link
Syntax
Release Information
Description
Options
Mode
[ no ] area { areaId | areaIdInt } virtual-link ipAddress
Command introduced before JUNOSe Release 7.1.0.
Defines an OSPF virtual link. The no version removes the virtual link.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address associated with the virtual link neighbor
Router Configuration
area virtual-link
■
133
JUNOSe 11.0.x Command Reference Guide A to M
area virtual-link authentication-key
Syntax
Release Information
Description
Options
Mode
134
■
[ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication-key [ 0 | 8 ] key
Command introduced before JUNOSe Release 7.1.0.
Configures simple password (type 1) authentication for OSPF virtual links. The no
version removes the password.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address of the virtual link neighbor
■
0—Indicates the key is entered in unencrypted form (plaintext); this is the default
option
■
8—Indicates the key is entered in encrypted form (ciphertext)
■
key—Password to be used by neighbors; string of up to 16 alphanumeric
characters. All neighboring routers on the same network must have the same
password.
Router Configuration
area virtual-link authentication-key
Chapter 2: A Commands
area virtual-link authentication message-digest
Syntax
Release Information
Description
Options
Mode
[ no ] area { areaID | areaIdInt } virtual-link ipAddress authentication message-digest
Command introduced before JUNOSe Release 7.1.0.
Specifies that MD5 authentication is used for the virtual link. The no version sets the
authentication for the virtual link to none, but leaves any configured MD5 key intact.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address of the virtual link neighbor
Router Configuration
area virtual-link authentication message-digest
■
135
JUNOSe 11.0.x Command Reference Guide A to M
area virtual-link authentication-none
Syntax
Release Information
Description
Options
Mode
136
■
[ no ] area { areaId | areaIdInt } virtual-link ipAddress authentication-none
Command introduced before JUNOSe Release 7.1.0.
Specifies that no authentication is to be used for the virtual link. The no version has
no effect.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address of the virtual link neighbor
Router Configuration
area virtual-link authentication-none
Chapter 2: A Commands
area virtual-link dead-interval
Syntax
Release Information
Description
Options
Mode
[ no ] area { areaId | areaIdInt } virtual-link ipAddress dead-interval deadInterval
Command introduced before JUNOSe Release 7.1.0.
Defines an OSPF virtual link and the time interval allowed for detecting a dead router.
The no version removes the virtual link's dead interval.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address of the virtual link neighbor
■
deadInterval—Integer in the range 0–2147483647 seconds; default value is 40
seconds
Router Configuration
area virtual-link dead-interval
■
137
JUNOSe 11.0.x Command Reference Guide A to M
area virtual-link hello-interval
Syntax
Release Information
Description
Options
Mode
138
■
[ no ] area { areaId | areaIdInt } virtual-link ipAddress hello-interval helloInterval
Command introduced before JUNOSe Release 7.1.0.
Defines an OSPF virtual link and the time between the hello packets. The hello interval
value must be the same for both ends of the virtual link. The no version removes
the virtual link's hello interval.
■
areaId—OSPF area ID in IP address format.
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address associated with the virtual link neighbor
■
helloInterval—Integer in the range 1–65535 seconds; default value is 10 seconds
Router Configuration
area virtual-link hello-interval
Chapter 2: A Commands
area virtual-link message-digest-key md5
Syntax
area { areaId | areaIdInt } virtual-link ipAddress
message-digest-key md5KeyId md5 [ 0 | 8 ] msgDigestKey
no area { areaId | areaIdInt } virtual-link ipAddress message-digest-key md5KeyId
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Enables MD5 authentication and configures MD5 keys for virtual links. The no version
deletes MD5 keys.
NOTE: If you delete all the MD5 keys, the authentication type for the virtual link is
still MD5, but you need to configure MD5 keys.
To disable MD5 authentication for the virtual link, use the area virtual-link
authentication-none command.
Options
Mode
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address of the virtual link neighbor
■
md5KeyId—Key identifier in the range 1–255
■
0—Indicates the msgDigestKey is entered in unencrypted form (plaintext); this
is the default option
■
8—Indicates the msgDigestKey is entered in encrypted form (ciphertext)
■
msgDigestKey—Password to be used by neighbors; string of up to 16 alphanumeric
characters. All neighboring routers on the same network must have the same
password.
Router Configuration
area virtual-link message-digest-key md5
■
139
JUNOSe 11.0.x Command Reference Guide A to M
area virtual-link retransmit-interval
Syntax
Release Information
Description
Options
Mode
140
■
[ no ] area { areaId | areaIdInt } virtual-link ipAddress retransmit-interval
retransmInterval
Command introduced before JUNOSe Release 7.1.0.
Defines an OSPF virtual link and the time between link-state advertisement
retransmissions for the adjacency belonging to the virtual link. The no version
removes the virtual link's retransmit interval.
■
areaId—OSPF area ID in IP address format.
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address of the virtual link neighbor
■
retransmInterval—LSA retransmit interval; an integer in the range 0–3600
seconds; default value is 5 seconds
Router Configuration
area virtual-link retransmit-interval
Chapter 2: A Commands
area virtual-link transmit-delay
Syntax
Release Information
Description
Options
Mode
[ no ] area { areaId | areaIdInt } virtual-link ipAddress transmit-delay transmDelay
Command introduced before JUNOSe Release 7.1.0.
Defines an OSPF virtual link and the estimated time it takes to transmit a link-state
update packet on the virtual link. The no version removes the virtual link's transmit
delay.
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value in the range 0–4294967295
■
ipAddress—IP address associated with the virtual link neighbor
■
transmDelay—LSA transmit delay; an integer in the range 0–3600 seconds;
default value is 1 second
Router Configuration
area virtual-link transmit-delay
■
141
JUNOSe 11.0.x Command Reference Guide A to M
arp
Syntax
To add a permanent ARP cache entry in Global Configuration mode:
[ no ] arp [ vrf vrfName ] ipAddress interfaceType interfaceSpecifier
[ macAddress [ validate ] ]
To modify the subscriber policy for ARP packets in Subscriber Policy Configuration
mode:
arp { permit | deny }
no arp
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
In Global Configuration mode, adds a permanent entry in the ARP cache. This
command applies only to Fast Ethernet, Gigabit Ethernet, 10-Gigabit Ethernet
interfaces, and bridged Ethernet interfaces configured over ATM 1483. The no version
removes an entry from the ARP cache.
In Subscriber Policy Configuration mode, modifies the subscriber policy for ARP to
define whether the subscriber (client) interfaces belonging to a bridge group or VPLS
instance forward (permit) or filter (deny) ARP packets. The no version restores the
default value, permit ARP packets.
In Subscriber Policy Configuration mode, you cannot change the default subscriber
policy values for trunk (server) interfaces belonging to a bridge group or VPLS
interface. You also cannot change the default subscriber policy values for a VPLS
virtual core interface, which acts as a trunk interface. The VPLS virtual core interface
represents all of the MPLS tunnels from the router to the remote VPLS edge (VE)
device.
Options
142
■
arp
■
vrfName—Name of the VRF to which the command applies; string of 1–32
alphanumeric characters
■
ipAddress—IP address in 32-bit dotted-decimal format corresponding to the local
data link address
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
macAddress—MAC address of the interface
■
validate—Allows the inclusion of MAC validation entries
■
permit—Specifies that the subscriber interface associated with the bridge group
or VPLS instance forwards ARP packets
■
deny—Specifies that the subscriber interface associated with the bridge group
or VPLS instance filters ARP packets
Chapter 2: A Commands
Mode
Global Configuration, Subscriber Policy Configuration
arp
■
143
JUNOSe 11.0.x Command Reference Guide A to M
arp spoof-check
Syntax
Release Information
Description
Mode
144
■
arp spoof-check
[ no ] arp spoof-check
Command introduced in JUNOSe Release 9.3.0.
Configures the router to check for spoofed ARP packets received on an IP interface.
By default, the router checks all ARP packets received on a major IP interface or a
subinterface to identify and discard spoofed ARP packets. The no version disables
checking for spoofed ARP packets received on the interface.
Interface Configuration
Chapter 2: A Commands
arp timeout
Syntax
arp timeout timeoutVal
no arp timeout
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies how long an entry remains in the ARP cache. You can set the ARP timeout
on Fast Ethernet, Gigabit Ethernet, and 10-Gigabit Ethernet interfaces, and bridged
Ethernet interfaces configured over ATM 1483. The default value is 21600 seconds
(6 hours). Use the show configuration command to display the current value. The
no version restores the default value.
■
timeoutVal—Time in seconds that an entry remains in the ARP cache
Interface Configuration
arp timeout
■
145
JUNOSe 11.0.x Command Reference Guide A to M
assured-rate
Syntax
assured-rate { assuredRate | hierarchical | [ operator operandValue ]* }
no assured-rate
Release Information
Description
Options
Mode
Related Topics
146
■
assured-rate
Command introduced before JUNOSe Release 7.1.0.
operator and operandValue variables added in JUNOSe Release 7.1.0.
Sets the assured rate for the scheduler profile. The assured rate overrides the HRR
weight of the scheduler node or queue. The no version deletes the assured rate.
■
assuredRate—Constant assured rate in bits per second; in the range
25000–1000000000 (25 Kbps to 1 Gbps)
■
hierarchical—Specifies that the node use the hierarchical assured rate (HAR)
feature, in which the scheduler node's assured rate is dynamically adjusted based
on the sum of the assured rates of all its child nodes and queues
■
operator—Mathematical function
■
operatorValue—Input for the operator; can be a QoS parameter definition name
or an integer
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Scheduler Profile Configuration
■
Configuring an Assured Rate for a Scheduler Node or Queue
■
Configuring a Basic Parameter Definition for QoS Administrators
Chapter 2: A Commands
atm
Syntax
atm { ubr | ubrpcr pcr | nrtvbr pcr scr mbs | rtvbr pcr scr mbs | cbr pcr }
no atm
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures traffic-shaping parameters for PPPoA via domain-based parameters. The
no version removes the ATM traffic-shaping configuration.
■
ubr—Sets the traffic category to unspecified bit rate
■
ubrpcr—Sets the traffic category to unspecified bit rate with peak cell rate
■
nrtvbr—Sets the traffic category to non–real time variable bit rate
■
rtvbr—Set the traffic category to real time variable bit rate
■
cbr—Sets the traffic category to constant bit rate
■
pcr—Peak cell rate in the range 0–4294967295 Kbps
■
scr—Sustained cell rate in the range 0–4294967295 Kbps
■
mbs—Maximum burst size in the range 0–4294967295 Kbps
Domain Map Configuration
atm
■
147
JUNOSe 11.0.x Command Reference Guide A to M
atm aal5 description
Syntax
atm aal5 description name
no atm aal5 description
Release Information
Description
Options
Mode
148
■
Command introduced before JUNOSe Release 7.1.0.
Assigns a text description or alias to an ATM AAL5 interface. The no version removes
the text description or alias. Use the show atm aal5 interface command to display
the text description.
■
name—Alias for the AAL5 interface; up to 32 characters
Interface Configuration
atm aal5 description
Chapter 2: A Commands
atm aal5 shutdown
Syntax
Release Information
Description
Mode
[ no ] atm aal5 shutdown
Command introduced before JUNOSe Release 7.1.0.
Sets the administrative state of an ATM AAL5 interface to disabled. The no version
enables a disabled interface.
Interface Configuration
atm aal5 shutdown
■
149
JUNOSe 11.0.x Command Reference Guide A to M
atm aal5 snmp trap link-status
Syntax
Release Information
Description
Mode
150
■
[ no ] atm aal5 snmp trap link-status
Command introduced before JUNOSe Release 7.1.0.
Enables SNMP link status traps on the AAL5 layer on a per-interface basis. The no
version disables the traps.
Interface Configuration
atm aal5 snmp trap link-status
Chapter 2: A Commands
atm atm1483 advisory-rx-speed
Syntax
atm atm1483 advisory-rx-speed speed
no atm atm1483 advisory-rx-speed
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets an advisory receive (RX) speed that the LAC sends in the RX Connect-Speed
AVP [38] to the LNS. The no version restores the default behavior, in which the RX
speed is not sent to the LNS.
■
speed—Speed in the range 0–2147483647 kbps
Profile Configuration, Subinterface Configuration
atm atm1483 advisory-rx-speed
■
151
JUNOSe 11.0.x Command Reference Guide A to M
atm atm1483 auto-configure
Syntax
atm atm1483 auto-configure upperInterfaceType
[ lockout-time { minValue maxValue | none } ]
no atm atm1483 auto-configure upperInterfaceType [ lockout-time ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Specifies one or more types of dynamic upper interface encapsulations that are
accepted or detected by a dynamic ATM 1483 subinterface. Optionally, specifies the
lockout time range for the encapsulation type. You can issue this command repeatedly
in Profile Configuration mode to include autodetection of multiple upper interface
encapsulation types within the base profile for a dynamic ATM 1483 subinterface.
The no version terminates detection of the specified encapsulation type.
NOTE: Encapsulation type lockout is available for bridged Ethernet, IP, PPP, and
PPPoE encapsulation types.
Options
Mode
152
■
■
upperInterfaceType—One of the following dynamic encapsulation types:
■
bridgedEthernet
■
ip
■
ppp
■
pppoe
■
minValue—Minimum lockout time in the range 1–86400 seconds (24 hours);
default value is 1 second
■
maxValue—Maximum lockout time in the range 1–86400 seconds (24 hours);
default value is 300 seconds (5 minutes)
■
none—Disables lockout for the specified dynamic encapsulation type
Profile Configuration
atm atm1483 auto-configure
Chapter 2: A Commands
atm atm1483 description
Syntax
atm atm1483 description name
no atm atm1483 description
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Assigns a text description or alias to an ATM 1483 interface. The no version removes
the text description or alias. Use the show atm subinterface command to display the
text description.
■
name—Text string or alias for the ATM 1483 interface; up to 255 characters
Profile Configuration, Subinterface Configuration
atm atm1483 description
■
153
JUNOSe 11.0.x Command Reference Guide A to M
atm atm1483 export-subinterface-description
Syntax
Release Information
Description
Mode
154
■
[ no ] atm atm1483 export-subinterface-description
Command introduced before JUNOSe Release 7.1.0.
Exports ATM 1483 subinterface descriptions to the line module. The no version
restores the default behavior, where ATM 1483 subinterface descriptions are not
sent to the line module.
Global Configuration
atm atm1483 export-subinterface-description
Chapter 2: A Commands
atm atm1483 mtu
Syntax
atm atm1483 mtu size
no atm atm1483 mtu
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the MTU size for an ATM 1483 subinterface. The no version restores the default
MTU size of 9180.
■
size—Maximum number of packet transmissions permitted on an ATM 1483
subinterface; in the range 256–9180; default value is 9180
Subinterface Configuration
atm atm1483 mtu
■
155
JUNOSe 11.0.x Command Reference Guide A to M
atm atm1483 profile
Syntax
atm atm1483 profile upperInterfaceType profileName
no atm atm1483 profile upperInterfaceType
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Adds a nested profile assignment to a base profile for a dynamic ATM 1483
subinterface. A nested profile assignment references another profile that dynamically
configures upper interface encapsulation types over the ATM 1483 subinterface. The
no version removes the profile assignment for the upper interface type.
■
■
Mode
156
■
upperInterfaceType—One of the following dynamic encapsulation types:
■
bridgedEthernet
■
ip
■
ppp
■
pppoe
profileName—Profile name of up to 80 characters
Profile Configuration
atm atm1483 profile
Chapter 2: A Commands
atm atm1483 shutdown
Syntax
Release Information
Description
Mode
[ no ] atm atm1483 shutdown
Command introduced before JUNOSe Release 7.1.0.
Sets the administrative state of an ATM 1483 subinterface to disabled. The no version
enables a disabled subinterface.
Subinterface Configuration
atm atm1483 shutdown
■
157
JUNOSe 11.0.x Command Reference Guide A to M
atm atm1483 snmp trap link-status
Syntax
Release Information
Description
Mode
158
■
[ no ] atm atm1483 snmp trap link-status
Command introduced before JUNOSe Release 7.1.0.
Enables SNMP link status traps on the ATM1483 layer. The no version disables the
traps.
Subinterface Configuration
atm atm1483 snmp trap link-status
Chapter 2: A Commands
atm atm1483 subscriber
Syntax
atm atm1483 subscriber upperInterfaceType { user | user-prefix } userName
domain domainName [ { password | password-prefix }
password ] [ no-authenticate ]
no atm atm1483 subscriber upperInterfaceType
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures a local subscriber (when one cannot be obtained externally, as in PPP)
for a dynamic upper interface encapsulation type configured over a dynamic ATM
1483 subinterface. A subscriber supports authentication and configuration from the
RADIUS server. The no version removes the subscriber.
■
upperInterfaceType—One of the following dynamic encapsulation types:
■
bridgedEthernet
■
ip
■
user—Employs the username as specified
■
user-prefix—Appends the interface physical location to the username
■
userName—RADIUS username
■
domainName—Domain name
■
password—Employs the password as specified
■
password-prefix—Appends the interface physical location to the password
■
password—RADIUS password
■
no-authenticate—Disables authentication
Profile Configuration
atm atm1483 subscriber
■
159
JUNOSe 11.0.x Command Reference Guide A to M
atm auto-configuration
Syntax
Release Information
Description
Mode
160
■
[ no ] atm auto-configuration
Command introduced before JUNOSe Release 7.1.0.
Enables autoconfiguration of ILMI. Autoconfiguration is enabled by default. This
command overrides any previous configuration of the atm uni-version command.
The no version disables auto configuration and sets the ILMI parameters to the UNI
version configured using the atm uni-version command, which has a default value
of UNI 4.0.
Interface Configuration
atm auto-configuration
Chapter 2: A Commands
atm bulk-config
Syntax
atm bulk-config bulkConfigName [ vc-range vpiStart vpiEnd vciStart vciEnd ]*
no atm bulk-config bulkConfigName [ vc-range vpiStart vpiEnd vciStart vciEnd ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures a range of ATM PVCs for use by a dynamic ATM 1483 subinterface, and
assigns a name to the virtual circuit (VC) range. Each VC range consists of one or
more nonoverlapping VC subranges. A VC subrange is a group of VCs that resides
within the specified VPI and VCI ranges. You can configure multiple VC ranges on
an ATM AAL5 interface. The no version removes the specified VC range (including
all subranges in the range) from the ATM AAL5 interface or the specified subrange
from the VC range. The no version also removes any overriding profile assignments
for ATM PVCs within the deleted VC range or VC subrange.
NOTE: The total number of VCs configured with the atm bulk-config command
cannot exceed the maximum ATM VC capacity of the line module you are using. For
details about the ATM VC capacity of supported line modules, see JUNOSe Release
Notes, Appendix A, System Maximums.
Options
Mode
■
bulkConfigName—Name of the VC range; string of up to 80 characters
■
vpiStart—Starting virtual path identifier (inclusive) of the VC subrange you are
configuring
■
vpiEnd—Ending virtual path identifier (inclusive) of the VC subrange you are
configuring
■
vciStart—Starting virtual circuit identifier (inclusive) of the VC subrange you are
configuring
■
vciEnd—Ending virtual circuit identifier (inclusive) of the VC subrange you are
configuring
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Interface Configuration
atm bulk-config
■
161
JUNOSe 11.0.x Command Reference Guide A to M
atm bulk-config modify
Syntax
Release Information
Description
Options
Mode
162
■
atm bulk-config bulkConfigName modify vc-range vpiStart vpiEnd vciStart vciEnd
Command introduced before JUNOSe Release 7.1.0.
Modifies the VC subrange values for the specified bulk configuration VC range. If the
new subrange encompasses previously configured subranges within that range, those
subranges are merged into the new one, freeing subrange resources. There is no no
version.
■
bulkConfigName—Name of the VC range; string of up to 80 characters
■
vpiStart—Starting virtual path identifier (inclusive) of the VC subrange you are
configuring
■
vpiEnd—Ending virtual path identifier (inclusive) of the VC subrange you are
configuring
■
vciStart—Starting virtual circuit identifier (inclusive) of the VC subrange you are
configuring
■
vciEnd—Ending virtual circuit identifier (inclusive) of the VC subrange you are
configuring
Interface Configuration
atm bulk-config modify
Chapter 2: A Commands
atm bulk-config shutdown
Syntax
Release Information
Description
Options
Mode
[ no ] atm bulk-config bulkConfigName shutdown
[ vc-range vpiStart vpiEnd vciStart vciEnd ]
Command introduced before JUNOSe Release 7.1.0.
Administratively disables (shuts down) the specified VC range or subrange. The no
version reenables the specified VC range or the specified subranges; this is the default
condition.
■
bulkConfigName—Name of the VC range; string of up to 80 characters
■
vpiStart—Starting virtual path identifier (inclusive) of the VC subrange you are
configuring
■
vpiEnd—Ending virtual path identifier (inclusive) of the VC subrange you are
configuring
■
vciStart—Starting virtual circuit identifier (inclusive) of the VC subrange you are
configuring
■
vciEnd—Ending virtual circuit identifier (inclusive) of the VC subrange you are
configuring
Interface Configuration
atm bulk-config shutdown
■
163
JUNOSe 11.0.x Command Reference Guide A to M
atm cac
Syntax
Release Information
Description
[ no ] atm cac [ subscriptionBandwidth ] [ ubr ubrWeight ]
Command introduced before JUNOSe Release 7.1.0.
Enables CAC on the ATM interface. If the subscription limit or UBR weight parameters
are set to zero, the router uses the effective port bandwidth as the subscription
bandwidth. The effective bandwidth varies according to line module. The no version
disables CAC on the interface.
NOTE: If you modify one of these parameters after CAC is enabled, you must modify
both parameters. Otherwise, the parameter not specified reverts to its default value.
Options
Mode
164
■
atm cac
■
subscriptionBandwidth—Maximum allowable bandwidth on this port in the range
0–2147482647 Kbps; default value is 0
■
ubrWeight—Bandwidth associated with UBR and UBR-PCR connections in the
range 0–2147482647 Kbps; default value is 0
Interface Configuration
Chapter 2: A Commands
atm cell-packing
Syntax
atm cell-packing maxCellsPerPacket mcpt-timer timerIdentifier
no atm cell-packing
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures cell concatenation parameters for an ATM 1483 subinterface that provides
ATM layer 2 services over MPLS with virtual channel connection (VCC) cell relay
encapsulation. The no version restores the default cell concatenation parameters for
the subinterface.
NOTE: See the atm mcpt-timers command for information about configuring
systemwide values for the three ATM Martini cell packing timers to define the cell
collection time threshold.
Options
Mode
Related Topics
■
maxCellsPerPacket—Maximum number of ATM cells in the range 1–190 that the
router can concatenate in a single VCC cell relay–encapsulated packet and
transmit on an MPLS pseudowire connection; default value is 1 cell per packet
■
timerIdentifier—Integer in the range 1–3 that identifies which of the three ATM
Martini cell packing timers (timer 1, timer 2, or timer 3) you want to use to detect
timeout of the cell collection time threshold; default value is 1. When the timer
expires, the router forwards the packet even if the number of concatenated ATM
cells in the packet is fewer than the specified maximum number of cells per
packet.
Subinterface Configuration
■
Configuring an MPLS Pseudowire with VCC Cell Relay Encapsulation in the JUNOSe
BGP and MPLS Configuration Guide
atm cell-packing
■
165
JUNOSe 11.0.x Command Reference Guide A to M
atm-cell-mode
Syntax
Release Information
Description
Mode
Related Topics
166
■
atm-cell-mode
[ no ] atm-cell-mode
Command introduced in JUNOSe Release 7.2.0.
Accounts for the ATM cell tax in rate calculationsfor interface types that support
rate-limiting and are stackable over ATM. The no version restores the default, which
uses the frame size with the layer 2 header included.
Policy List Configuration
■
Enabling ATM Cell Mode
Chapter 2: A Commands
atm classifier-list
Syntax
atm classifier-list classifierName [ traffic-class trafficClassName ]
[ color { green | yellow | red } ] [ user-packet-class userPacketClassValue ]
[ clp clpValue ]
no atm classifier-list classifierName [ classifierNumber ]
Release Information
Description
Options
Mode
Related Topics
Command introduced in JUNOSe Release 7.1.0.
Creates a classifier control list that can only be used in ATM policy lists. The no
version removes the ATM classifier control list. ATM packets are classified on CLP.
The CLP bit is not available on frame-based interfaces on E Series Broadband Services
Router line modules.
■
classifierName—Name of the classifier control list entry
■
trafficClassName—Name of the traffic class to match
■
green—Matches packet color to green, indicating a low drop preference
■
yellow—Matches packet color to yellow, indicating a medium drop preference
■
red—Matches packet color to red, indicating a high drop preference
■
userPacketClassValue—User packet value to match in the range 0–15
■
clpValue—Value of the CLP, 0 or 1
■
classifierNumber—Index of the classifier control list entry to be deleted
Global Configuration
■
Creating or Modifying Classifier Control Lists for ATM Policy Lists
atm classifier-list
■
167
JUNOSe 11.0.x Command Reference Guide A to M
atm class-vc
Syntax
atm class-vc vcClassName
no atm class-vc [ vcClassName ]
Release Information
Description
Options
Mode
168
■
atm class-vc
Command introduced in JUNOSe Release 7.3.0.
Assigns a previously configured VC class to a base profile for a dynamic ATM 1483
subinterface. Issuing this command applies the set of attributes in the specified VC
class to all bulk-configured VC ranges that are dynamically created from this profile.
The no version removes the VC class association with the base profile.
■
vcClassName—Name of the VC class configured with the vc-class atm command
Profile Configuration
Chapter 2: A Commands
atm clock internal
Syntax
Release Information
Description
Options
Mode
[ no ] atm clock internal [ internalSource ]
Command introduced before JUNOSe Release 7.1.0.
Causes the ATM interface to generate the transmit clock internally. The no version
causes ATM interfaces to recover the clock from the received signal. If the internal
clock is chosen and no internal source is specified, then the internal clock source is
taken from the line module.
■
internalSource—One of the following:
■
module—Specifies that the internal clock is from the line module
■
chassis—Specifies that the internal clock is from the configured router clock
Interface Configuration
atm clock internal
■
169
JUNOSe 11.0.x Command Reference Guide A to M
atm description
Syntax
atm description name
no atm description
Release Information
Description
Options
Mode
170
■
atm description
Command introduced before JUNOSe Release 7.1.0.
Assigns a text description or alias to the ATM interface. The first 32 characters of the
description are pushed out to RADIUS during authentication and accounting. The
show atm interface command displays the text description. The no version removes
the text description or alias.
■
name—Text string or alias of up to 255 characters; can include the # (pound sign)
character
Interface Configuration
Chapter 2: A Commands
atm dos-protection-group
Syntax
atm dos-protection-group groupName
no atm dos-protection-group
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.1.0.
Attaches an ATM denial of service (DoS) protection group to an interface. The no
version removes the DoS protection group.
■
groupName—Name of the DoS protection group; string of up to 31 alphanumeric
characters
Interface Configuration
atm dos-protection-group
■
171
JUNOSe 11.0.x Command Reference Guide A to M
atm framing
Syntax
atm framing framingType
no atm framing
Release Information
Description
Options
Mode
172
■
atm framing
Command introduced before JUNOSe Release 7.1.0.
Configures T3 or E3 framing on an ATM interface. The no version returns framing
to the default. For a T3 interface, the default value is cbitplcp. For an E3 interface,
the default value is g751plcp.
■
framingType—One of the following:
■
cbitadm—c-bit with ATM direct mapping for a DS3 (T3) interface
■
cbitplcp—c-bit with PLCP framing for a DS3 (T3) interface (default for T3)
■
g832adm—G.832 ATM direct mapping for an E3 interface
■
g751adm—G.751 ATM direct mapping for an E3 interface
■
g751plcp—G.751 PLCP mapping for an E3 interface (default for E3)
■
m23adm—M23 ATM direct mapping for a DS3 (T3) interface
■
m23plcp—M23 with PLCP framing for a DS3 (T3)
Interface Configuration
Chapter 2: A Commands
atm ilmi-enable
Syntax
Release Information
Description
Mode
[ no ] atm ilmi-enable
Command introduced before JUNOSe Release 7.1.0.
Enables ILMI on the interface. The no version removes the ILMI PVC.
Interface Configuration
atm ilmi-enable
■
173
JUNOSe 11.0.x Command Reference Guide A to M
atm ilmi-keepalive
Syntax
Release Information
Description
Options
Mode
174
■
[ no ] atm ilmi-keepalive [ seconds ]
Command introduced before JUNOSe Release 7.1.0.
Enables generation of ILMI keepalive messages on the router, affecting the operational
state of the ATM interface. The no version disables the generation of keepalive
messages.
■
seconds—Number in the range 0–4294967295; the interval in seconds between
two consecutive ILMI keepalive requests
Interface Configuration
atm ilmi-keepalive
Chapter 2: A Commands
atm lbo
Syntax
atm lbo { long | short }
no atm lbo
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the cable length (line build-out) for the ATM T3 or E3 interface. The length
of cable determines power requirements. The no version restores the default value.
■
long—Specifies cable length in the range 226–450 feet
■
short—Specifies cable length in the range 0–225 feet (the default)
Interface Configuration
atm lbo
■
175
JUNOSe 11.0.x Command Reference Guide A to M
atm mcpt-timers
Syntax
atm mcpt-timers timer1 timer2 timer3
no atm mcpt-timers
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures systemwide values for the three ATM Martini cell packing timers. These
timers define the time threshold that the router uses to collect and concatenate ATM
cells in a single VCC cell relay–encapsulated packet and transmit the packet on an
MPLS pseudowire connection. When the timer expires, the router forwards the packet
even if the number of concatenated ATM cells in the packet is fewer than the specified
maximum number of cells per packet. The no version restores the default values for
all three timers.
NOTE: See the atm cell-packing command for information about specifying the
maximum number of concatenated cells per packet and identifying which of the
three ATM Martini cell packing timers you want to use to detect timeout of the cell
collection threshold.
Options
Mode
Related Topics
176
■
atm mcpt-timers
■
timer1—Number of microseconds in the range 100–4095; default value is 100
■
timer2—Number of microseconds in the range 100–4095; default value is 500
■
timer3—Number of microseconds in the range 100–4095; default value is 1000
Global Configuration
■
Configuring an MPLS Pseudowire with VCC Cell Relay Encapsulation in the JUNOSe
BGP and MPLS Configuration Guide
Chapter 2: A Commands
atm oam
Syntax
atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ]
[ cc { source | sink | both } ] ]
no atm oam [ vpi ] [ [ seg-loopback | end-loopback [ loopback-timer time ] ] ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures F4 OAM on an interface or circuit. The no version deletes F4 OAM circuits.
NOTE: If you do not specify any options, both F4 end-to-end OAM and F4 segment
OAM are enabled on all VPIs on the interface.
Options
Mode
■
vpi—VPI on which you want to enable F4 OAM. If you do not specify a VPI, F4
OAM flow is enabled on all VPIs on the interface.
■
seg-loopback—Enables F4 segment OAM
■
end-loopback—Enables F4 end-to-end OAM
■
loopback-timer—To generate F4 loopback cells on the VPI, you must configure
the loopback timer; you can set the loopback timer only for end-to-end loopback
■
time—Time interval in the range 1–600 seconds between transmissions of F4
loopback cells.
■
cc—Enables CC cells on the PVC; you can enable CC cells only on data circuits,
not on control circuits, such as ILMI or signaling circuits
■
sink—Enables this VC as a sink point (cell receiver)
■
source—Enables this VC as the source point (cell generator)
■
both—Enables this VC as both a sink point and a source point
Interface Configuration, Subinterface Configuration
atm oam
■
177
JUNOSe 11.0.x Command Reference Guide A to M
atm oam flush
Syntax
Release Information
Description
Options
Mode
178
■
atm oam flush
[ no ] atm oam flush [ alarm-cells ]
Command introduced before JUNOSe Release 7.1.0.
Configures the router to ignore all OAM cells received on an ATM interface, and to
stop sending OAM cells on this interface. OAM performs fault management and
performance management functions on an ATM interface. The no version disables
OAM flush on the interface.
■
alarm-cells—Causes the router to ignore only AIS and RDI cells and to accept all
other OAM cells
Interface Configuration
Chapter 2: A Commands
atm oam loopback-location
Syntax
atm oam loopback-location locationID
[ no ] atm oam loopback-location
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the location ID of the ATM interface. The no version returns the loopback location
to the default setting of all 1s (ones).
■
locationID—Value of the four-octet long location ID of the ATM interface
Interface Configuration
atm oam loopback-location
■
179
JUNOSe 11.0.x Command Reference Guide A to M
atm policy
Syntax
atm policy { input | output } policyName
[ statistics { enabled [ preserve | merge ] | disabled [ merge ] } | merge ]
no atm policy { input | output } [ policyName ]
Release Information
Description
Options
Command introduced in JUNOSe Release 7.1.0.
merge keyword added in JUNOSe Release 7.2.0.
Assigns a policy list to the ingress or egress of an ATM interface. If you enter this
command when the policy list does not exist, the router creates a policy list with a
filter rule as the default. You must specify the input or output keyword to assign the
policy list to the ingress or egress of the interface. The no version removes the
association between a policy list and an interface.
■
input—Applies policy to data arriving at this interface
■
output—Applies policy to data leaving this interface
■
policyName—Name of the policy; a maximum of 40 characters
■
statistics—Enables or disables collection of policy routing statistics
■
Mode
Related Topics
180
■
atm policy
■
enabled—Enables collection of policy routing statistics
■
preserve—Preserves existing statistics for any classifier-list that is the same
for both the new and old policy attachments when you attach a new policy
to an interface
■
disabled—Disables collection of policy routing statistics
merge—Enables merging of multiple policies to form a single policy
Interface Configuration
■
Setting a Statistics Baseline for Policies
Chapter 2: A Commands
atm policy-list
Syntax
Release Information
Description
Options
Mode
Related Topics
[ no ] atm policy-list policyName
Command introduced in JUNOSe Release 7.1.0.
Creates an ATM policy list and accesses Policy List Configuration mode. If you execute
an atm policy-list command and type exit, the router creates a policy list with a
filter rule as the default. Attaching this policy list to an interface filters all packets on
that interface. The no version removes a policy list.
■
policyName—Name of the policy list; a maximum of 40 characters
Global Configuration
■
Creating Policy Lists for ATM
atm policy-list
■
181
JUNOSe 11.0.x Command Reference Guide A to M
atm pvc
Syntax
To create a PVC on an ATM interface when using the aal5snap, aal5autoconfig, or
aal5mux ip encapsulation type:
atm pvc vcd vpi vci encapsulation [ cbr cbr | peak [ average burst [ rt ] ] ]
[ oam [ seconds | cc [ segment | end-to-end ] { source | sink | both } ] ]
[ inArp [ minutes ] ]
no atm pvc vcd
To create a PVC on an ATM interface when using the aal5all, aal0, or ilmi
encapsulation type:
atm pvc vcd vpi vci encapsulation [ cbr cbr | peak [ average burst [ rt ] ] ]
no atm pvc vcd
To use a profile to apply encapsulation and traffic-shaping parameters to a bulk range
of PVCs configured for a dynamic ATM 1483 subinterface:
atm pvc encapsulation [ cbr cbr | peak [ average burst [ rt ] ] ] [oam seconds ]
no atm pvc
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
From Interface Configuration or Subinterface Configuration mode, creates a PVC on
an ATM interface. The no version removes the specified PVC.
From Profile Configuration mode, applies encapsulation, traffic-shaping, and OAM
parameters to the range of PVCs configured on a static ATM AAL5 interface for use
by a dynamic ATM 1483 subinterface. The no version restores the default service
type, UBR, on the VC range.
NOTE: The optional peak, average, and burst parameters configure traffic-shaping
parameters for the circuit. The allowable traffic-shaping features and range
specifications depend on the line module capabilities.
Options
182
■
atm pvc
■
vcd—Virtual circuit descriptor that is an identifier for the VC in other commands;
in the range 1–2147483647
■
vpi—Virtual path identifier of this PVC. The allowable numeric range depends
on the line module capabilities and current configuration. The VPI and VCI cannot
both be set to 0; if one is 0, the other cannot be 0.
■
vci—Virtual circuit identifier of this PVC. The allowable numeric range depends
on the line module capabilities and current configuration. The VPI and VCI cannot
both be set to 0; if one is 0, the other cannot be 0.
Chapter 2: A Commands
■
encapsulation—Available options differ for ATM interfaces and dynamic ATM
1483 subinterfaces, as follows:
■
■
For PVCs created on ATM interfaces:
■
aal5all—Causes the router to pass through all ATM AAL5 traffic without
interpreting it; supported for ATM layer 2 services over MPLS
■
aal0—Causes the router to receive raw ATM cells on this circuit and
forward the cells without performing AAL5 packet reassembly; supported
for ATM layer 2 services over MPLS
■
aal5snap—LLC encapsulated circuit; LLC/SNAP header precedes the
protocol datagram
■
aal5mux ip—VC-based multiplexed circuit used for IP only
■
aal5autoconfig—Enables autodetection of the 1483 encapsulation
(LLC/SNAP or VC multiplexed)
■
ilmi—Integrated local management interface encapsulation
For PVCs created on dynamic ATM 1483 subinterfaces:
■
aal5snap—LLC encapsulated circuit; LLC/SNAP header precedes the
protocol datagram
■
aal5mux ip—VC-based multiplexed circuit used for IP only
■
aal5autoconfig—Enables autodetection of the 1483 encapsulation
(LLC/SNAP or VC multiplexed)
■
cbr—Constant bit rate in Kbps
■
peak—PCR in Kbps
■
average—Average rate in Kbps; also referred to as SCR
■
burst—Length in cells of the burst; also referred to as MBS
■
rt—Selects VBR-RT as the service type; the default type is VBR-NRT. You can
select rt only if you set the peak, average, and burst parameters.
■
oam—Enables generation of OAM F5 loopback cells on this circuit. This option
enables VC integrity features that affect the operational state of the ATM PVC.
You can use the oam keyword only if you specify the aal5snap, aal5autoconfig,
or aal5mux ip encapsulation type.
■
seconds—Time interval in the range 1–600 seconds between transmissions of
OAM F5 end-to-end loopback cells for VC connectivity verification.
■
inArp—Enables Inverse ARP. You can use the inArp keyword only if you specify
the aal5snap encapsulation type.
■
minutes—Inverse ARP refresh rate in minutes; 15 minutes is the default
■
cc—Enables CC cells on the PVC; you can enable CC cells only on data circuits,
not on control circuits, such as ILMI or signaling circuits
■
segment—Opens an OAM CC segment cell flow
■
end-to-end—Opens an OAM CC end-to-end cell flow
atm pvc
■
183
JUNOSe 11.0.x Command Reference Guide A to M
Mode
Related Topics
184
■
atm pvc
■
sink—Enables this VC as a sink point (cell receiver)
■
source—Enables this VC as the source point (cell generator)
■
both—Enables this VC as both a sink point and a source point
Interface Configuration, Profile Configuration, Subinterface Configuration
■
Configuring an MPLS Pseudowire with VCC Cell Relay Encapsulation, Configuring
Local ATM Cross-Connects with AAL5 Encapsulation, and Configuring MPLS LSPs
for L2VPNs in the JUNOSe BGP and MPLS Configuration Guide
Chapter 2: A Commands
atm shutdown
Syntax
Release Information
Description
Mode
[ no ] atm shutdown
Command introduced before JUNOSe Release 7.1.0.
Administratively disables an ATM interface. The no version enables a disabled
interface.
Interface Configuration
atm shutdown
■
185
JUNOSe 11.0.x Command Reference Guide A to M
atm snmp trap link-status
Syntax
Release Information
Description
Mode
186
■
[ no ] atm snmp trap link-status
Command introduced before JUNOSe Release 7.1.0.
Enables SNMP link status traps on the ATM layer on a per-interface basis. The no
version disables the traps.
Interface Configuration
atm snmp trap link-status
Chapter 2: A Commands
atm sonet stm-1
Syntax
Release Information
Description
Mode
[ no ] atm sonet stm-1
Command introduced before JUNOSe Release 7.1.0.
Sets the mode of operation on the physical interface to SDH STM-1. The no version
restores the default value, SONET STS-3c operation.
Interface Configuration
atm sonet stm-1
■
187
JUNOSe 11.0.x Command Reference Guide A to M
atm uni-version
Syntax
Release Information
Description
Options
Mode
188
■
atm uni-version
atm uni-version versionNumber
Command introduced before JUNOSe Release 7.1.0.
Specifies the UNI version the interface should use. There is no no version.
■
versionNumber—UNI version number: 3.0, 3.1, or 4.0
Interface Configuration
Chapter 2: A Commands
atm vc-per-vp
Syntax
atm vc-per-vp [ vcCount ]
no atm vc-per-vp
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures the number of virtual circuits per virtual path. This command controls
the VPI and VCI range on the ATM interface. The allowable configuration range
depends on the line module. The router will not execute the command if any virtual
circuits are open on the interface. The no version restores the default.
NOTE: This command is not available for ATM interfaces on the E120 router and the
E320 router because they support the entire VPI/VCI range.
The minimum number of VCs per VP is 4096 for OC3-4 modules and 1024 for T3
ATM modules. If you enter a value that is below the minimum, the router uses the
minimum value.
VCs and VP tunnels must not exist when you issue this command. If they do, you
must delete the VC and VP tunnel configuration before you issue this command.
Options
Mode
■
vcCount—Number of virtual circuits per virtual path
Interface Configuration
atm vc-per-vp
■
189
JUNOSe 11.0.x Command Reference Guide A to M
atm vp-description
Syntax
atm vp-description vpi description
no atm vp-description vpi
Release Information
Description
Options
Mode
190
■
Command introduced before JUNOSe Release 7.1.0.
Assigns a text description to an individual virtual path (VP) on an ATM interface. Use
the show atm vp-description command to display the description. The no version
restores the default value, a null string.
■
vpi—Virtual path identifier number in the range 0–255
■
description—Text string or alias for the specified VPI; up to 32 characters
Interface Configuration
atm vp-description
Chapter 2: A Commands
atm-vp qos-parameter
Syntax
atm-vp vpi qos-parameter qosParameterInstanceName qosParameterInstanceValue
no atm-vp vpi qos-parameter qosParameterInstanceName
Release Information
Description
Options
Mode
Related Topics
Command introduced in JUNOSe Release 7.1.0.
Attaches a QoS parameter instance to the specified VP on the ATM major interface.
The no version detaches the parameter instance from the specified VP.
■
vpi—Virtual path identifier of this PVC; number in the range 0–255
■
qosParameterInstanceName—Name of the parameter instance that you want to
attach to the VP
■
qosParameterInstanceValue—Number of the scheduler rate for the parameter
instance; the default value is the minimum value defined in the parameter
definition
Interface Configuration
■
Creating Parameter Instances
atm-vp qos-parameter
■
191
JUNOSe 11.0.x Command Reference Guide A to M
atm-vp qos-profile
Syntax
Release Information
Description
Options
Mode
Related Topics
192
■
[ no ] atm-vp vpi qos-profile qosProfileName
Command introduced before JUNOSe Release 7.1.0.
Attaches a QoS profile to the specified VP on the interface. The no version detaches
the QoS profile from the VP.
■
vpi—Virtual path identifier of this PVC; number in the range 0–255
■
qosProfileName—Name of the QoS profile that you want to attach to the VP
Interface Configuration
■
atm-vp qos-profile
Attaching a QoS Profile to an Interface
Chapter 2: A Commands
atm vp-tunnel
Syntax
atm vp-tunnel vpi { cbr kbps | kbps }
no atm vp-tunnel vpi
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Defines a virtual path tunnel and configures the rate of traffic flow within the tunnel.
For QoS configurations, use to configure a shapeless VP tunnel. The no version
removes the restriction.
■
vpi—Number in the range 0–255; virtual path identifier of this PVC
■
cbr—Specifies the service class as constant bit rate
■
kbps—Tunnel rate for a virtual path. The tunnel rate can be a value in the range
0–4294967295, when you specify the rate of traffic flow without the constant
bit rate (CBR) service category, and can be a value in the range 1–4294967295,
when you specify the rate of traffic flow with the CBR service class. Because the
CBR service category guarantees a fixed amount of bandwidth to be allotted to
the client, an error message is displayed if you configure a value of 0 for the
tunnel rate for CBR traffic flows. The aggregate to this traffic from all circuits
configured in the tunnel is held to the specified rate. Certain line modules may
have minimum rates for VP tunnels. Using a rate of 0 configures a shapeless
tunnel (a tunnel with no rate) that is used for VP shaping in the SAR.
Interface Configuration
atm vp-tunnel
■
193
JUNOSe 11.0.x Command Reference Guide A to M
authentication
Syntax
authentication { rsa-sig | pre-share }
no authentication
Release Information
Description
Options
Mode
194
■
authentication
Command introduced before JUNOSe Release 7.1.0.
Specifies the authentication method to use in the IKE policy. The no version restores
the default, preshared keys.
■
rsa-sig—Specifies RSA signature as the authentication method
■
pre-share—Specifies preshared keys as the authentication method
IKE Policy Configuration
Chapter 2: A Commands
authentication key
Syntax
authentication key [ 0 | 8 ] authkey
no authentication key
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the password for text authentication and the key for MD5 authentication
for RIP remote-neighbor interface. The no version clears the key for the interface.
Supported only in RIP version 2. Authentication is disabled by default.
■
0—Indicates the authKey is entered in unencrypted form (plaintext); this is the
default option
■
8—Indicates the authKey is entered in encrypted form (ciphertext)
■
authkey—Password sent with RIP messages or the key used to encrypt/decrypt
RIP messages, depending on the authentication mode set for this remote-neighbor
interface.
Remote Neighbor Configuration
authentication key
■
195
JUNOSe 11.0.x Command Reference Guide A to M
authentication-key
Syntax
authentication-key [ 0 | 8 ] authKey
no authentication-key
Release Information
Description
Options
Mode
196
■
Command introduced before JUNOSe Release 7.1.0.
Enables simple password authentication and assigns a password used by OSPF
remote neighbors. The no version deletes the password.
■
0—Indicates the authKey is entered in unencrypted form (plaintext); this is the
default option
■
8—Indicates the authKey is entered in encrypted form (ciphertext)
■
authKey—Password; string of up to 8 characters
Remote Neighbor Configuration
authentication-key
Chapter 2: A Commands
authentication message-digest
Syntax
Release Information
Description
Mode
authentication message-digest
Command introduced before JUNOSe Release 7.1.0.
Specifies that MD5 authentication is used for the OSPF remote-neighbor interface.
There is no no version.
Remote Neighbor Configuration
authentication message-digest
■
197
JUNOSe 11.0.x Command Reference Guide A to M
authentication mode
Syntax
authentication mode { text | md5 keyID }
no authentication mode
Release Information
Description
Options
Mode
198
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the type of authentication used on the RIP remote-neighbor interface.
Authentication is disabled by default. The no version removes authentication from
the interface. Supported only in RIP version 2.
■
text—Sends a simple text password with each RIP message; if the password is
not possessed by remote neighbors, the message is rejected
■
md5—Encrypts and compresses the RIP message with MD5 message-digest
algorithms
■
keyID—Number identifying the MD5 key in the range 1–255; remote neighbors
must share the MD5 key to decrypt the message and encrypt the response
Remote Neighbor Configuration
authentication mode
Chapter 2: A Commands
authentication-none
Syntax
Release Information
Description
Mode
authentication-none
Command introduced before JUNOSe Release 7.1.0.
Specifies that no authentication is to be used for the OSPF remote-neighbor interface.
There is no no version.
Remote Neighbor Configuration
authentication-none
■
199
JUNOSe 11.0.x Command Reference Guide A to M
authorization
Syntax
authorization { exec | commands level } authorListName
no authorization {exec | commands level }
Release Information
Description
Options
Mode
200
■
authorization
Command introduced before JUNOSe Release 7.1.0.
Enables AAA authorization for a specified vty line or group of vty lines. Associates
the authorization list with the specified line. If the list does not exist or is empty,
authorization always succeeds. For a command to be authorized, its level must match
exactly with the level of one of the configured lists. The no version disables
authorization.
■
exec—Applies this authorization to CLI access in general
■
commands—Applies this authorization to user commands of the specified
privilege level
■
level—Privilege level; a number in the range 0–15
■
authorListName—Name of an authorization method list of up to 32 characters;
if no methods list is specified, the default is used
Line Configuration
Chapter 2: A Commands
authorization change
Syntax
Release Information
Description
Mode
Related Topics
[ no ] authorization change
Command introduced before JUNOSe Release 7.1.0.
Enables the router to receive change-of-authorization messages, such as packet
mirroring attributes and Service Manager attributes, from the RADIUS server. The
no version restores the default, in which support for RADIUS-initiated
change-of-authorization messages is disabled on the router.
RADIUS Configuration
■
Configuring RADIUS-Based Mirroring
authorization change
■
201
JUNOSe 11.0.x Command Reference Guide A to M
auth-router-name
Syntax
Release Information
Description
[ no ] auth-router-name [ routerName ]
Command introduced in JUNOSe Release 9.0.0.
Assigns an access virtual router. The no version restores the default router.
NOTE: This command replaces the deprecated router-name command, which may
be removed completely in a future release.
Options
Mode
202
■
auth-router-name
■
routerName—Name of the virtual router; string of 1–32 alphanumeric characters
Domain Map Configuration
Chapter 2: A Commands
auto-configure
Syntax
auto-configure upperInterfaceType [ lockout-time { minValue maxValue | none } ]
no auto-configure upperInterfaceType [ lockout-time ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Specifies the type(s) of dynamic encapsulations that are accepted or detected by the
static ATM 1483 interface. Optionally, specifies the lockout time range for the
encapsulation type. You can enter this command repeatedly in Subinterface
Configuration mode. The no version terminates detection of the specified
encapsulation type or, if the lockout-time keyword is specified, restores the lockout
time range to its default values.
NOTE: Encapsulation type lockout is available for bridged Ethernet, IP, PPP, and
PPPoE encapsulation types.
Options
Mode
■
upperInterfaceType—One of the following dynamic encapsulation types:
■
bridgedEthernet
■
ip
■
ppp
■
pppoe
■
minValue—Minimum lockout time in the range 1–86400 seconds (24 hours);
default value is 1 second
■
maxValue—Maximum lockout time in the range 1–86400 seconds (24 hours);
default value is 300 seconds (5 minutes)
■
none—Disables lockout for the specified dynamic encapsulation type
Interface Configuration, Subinterface Configuration
auto-configure
■
203
JUNOSe 11.0.x Command Reference Guide A to M
auto-configure atm1483
Syntax
Release Information
Description
Mode
204
■
[ no ] auto-configure atm1483
Command introduced before JUNOSe Release 7.1.0.
Configures the static ATM AAL5 interface to support autodetection of an ATM 1483
dynamic encapsulation type. The no version terminates autodetection of the ATM
1483 encapsulation type.
Interface Configuration
auto-configure atm1483
Chapter 2: A Commands
auto-configure vlan
Syntax
Release Information
Description
Mode
[ no ] auto-configure vlan
Command introduced in JUNOSe Release 7.1.0.
Configures the static VLAN major interface to support autodetection of a dynamic
VLAN subinterface. The no version terminates autodetection of the VLAN subinterface.
Interface Configuration
auto-configure vlan
■
205
JUNOSe 11.0.x Command Reference Guide A to M
auto-cost reference-bandwidth
Syntax
Release Information
Description
Options
Mode
206
■
[ no ] auto-cost reference-bandwidth refBw
Command introduced before JUNOSe Release 7.1.0.
Controls how OSPFv3 calculates default metrics for the interface. The no version
assigns cost based only on the interface type.
■
refBw—Bandwidth in megabits per second in the range 1–4294967; default value
is 100
Router Configuration
auto-cost reference-bandwidth
Chapter 2: A Commands
automatic-virtual-link
Syntax
Release Information
Description
Mode
[ no ] automatic-virtual-link
Command introduced before JUNOSe Release 7.1.0.
Enables or disables automatic virtual link configuration. The no version disables an
automatic virtual link.
Router Configuration
automatic-virtual-link
■
207
JUNOSe 11.0.x Command Reference Guide A to M
auto-summary
Syntax
Release Information
Description
Mode
208
■
auto-summary
[ no ] auto-summary
Command introduced before JUNOSe Release 7.1.0.
Reenables the automatic summarization of routes redistributed into BGP to their
natural network masks. Automatic summarization is enabled by default. The no
version disables automatic summarization.
Address Family Configuration, Router Configuration
Chapter 2: A Commands
average-length-exponent
Syntax
average-length-exponent exponent
no average-length-exponent
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Specifies the exponent used to weight the average queue length over time, controlling
WRED responsiveness. The no version negates the average-length-exponent.
■
exponent—Total average queue length (TAQL) coefficient
Drop Profile Configuration
■
Configuring RED
■
Configuring WRED
average-length-exponent
■
209
JUNOSe 11.0.x Command Reference Guide A to M
avp
Syntax
avp avpType action
no avp avpType
Release Information
Description
Options
Command introduced in JUNOSe Release 7.2.0.
Configures the L2TP tunnel switching behavior for a specified L2TP AVP type. The
no version restores the default L2TP tunnel switching behavior for AVPs of the
specified type.
■
■
avpType—One of the following L2TP AVPs
■
bearer-type—L2TP Bearer Type AVP 18; by default, the router regenerates
this AVP at the outbound LAC session, based on the local policy that is in
effect
■
calling-number—L2TP Calling Number AVP 22; by default, the router
regenerates this AVP at the outbound LAC session, based on the local policy
that is in effect
■
cisco-nas-port—Cisco NAS Port Info AVP 100; by default, the router drops
this AVP
action—One of the following actions that characterize the tunnel switching
behavior; currently, only the relay action is supported
■
Mode
210
■
avp
relay—Causes the router to preserve the value of an incoming AVP of the
specified type when packets are switched between an inbound LNS session
and an outbound LAC session
L2TP Tunnel Switch Profile Configuration
Chapter 3
B Commands
■
211
JUNOSe 11.0.x Command Reference Guide A to M
backup-address-pool-name
Syntax
backup-address-pool-name poolName
no address-pool-name
Release Information
Description
Command introduced in JUNOSe Release 10.0.0.
Specifies a backup local address pool name to associate with the domain name being
configured. This pool is used to assign IP addresses to users, if the primary local pool
has been fully allocated. The no version removes the backup pool name.
NOTE: You must configure a primary local address pool for the backup local address
pool to take effect.
Options
Mode
Related Topics
212
■
■
poolName—Name of the backup pool to associate with the domain name; string
of up to 16 alphanumeric characters
Domain Map Configuration
■
Configuring Local Address Servers in the JUNOSe BGP and MPLS Configuration
Guide
backup-address-pool-name
Chapter 3: B Commands
bandwidth
Syntax
bandwidth bandwidth
no bandwidth
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Specifies the total bandwidth available on the interface. For total reservable
bandwidth, see the mpls bandwidth command. The no version removes the admission
control configuration from the interface.
■
bandwidth—Available bandwidth in kilobits per second, a value from
1–10,000,000
Interface Configuration, Subinterface Configuration
ospf bandwidth
bandwidth
■
213
JUNOSe 11.0.x Command Reference Guide A to M
bandwidth oversubscription
Syntax
Release Information
Description
Mode
214
■
[ no ] bandwidth oversubscription
Command introduced before JUNOSe Release 7.1.0.
Allows the line modules to operate below line rate performance. The no version
forces the line modules to operate at line rate performance.
Privileged Exec
bandwidth oversubscription
Chapter 3: B Commands
banner
Syntax
banner [ motd | login | exec ] bannerText
no banner [ motd | login | exec ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures message-of-the-day, login, or exec banners to be displayed by the CLI. If
you do not specify an option, the behavior is the same as if you specified the motd
option. The no version deletes the banner.
■
motd—Displays the banner when a console or vty connection is initiated
■
login—Displays the banner before any user authentication (line or RADIUS
authentication); the banner is also displayed if user authentication is not
configured
■
exec—Displays the banner after user authentication (if any) and before the first
prompt of a CLI session
■
bannerText—Alphanumeric string truncated at 1024 characters; delimited by the
first character of the string, which must be repeated at the end of the string and
must not occur anywhere else in the string
Global Configuration
banner
■
215
JUNOSe 11.0.x Command Reference Guide A to M
baseline aaa
Syntax
Release Information
Description
Mode
216
■
baseline aaa
baseline aaa
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for authentication and authorization statistics. The router
implements the baseline by reading and storing the statistics at the time the baseline
is set and then subtracting this baseline whenever baseline-relative statistics are
retrieved. There is no no version.
Privileged Exec
Chapter 3: B Commands
baseline aaa route-download
Syntax
Release Information
Description
Mode
baseline aaa route-download
Command introduced in JUNOSe Release 8.1.0.
Sets a statistics baseline for route downloads. The router implements the baseline
by reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline aaa route-download
■
217
JUNOSe 11.0.x Command Reference Guide A to M
baseline atm vp interface
Syntax
Release Information
Description
Options
Mode
218
■
baseline atm vp interface atm interfaceSpecifier vpi
Command introduced in JUNOSe Release 7.1.0.
Sets a statistics baseline for an ATM virtual path (VP) interface. The router implements
the baseline by reading and storing the statistics at the time the baseline is set and
then subtracting this baseline whenever baseline-relative statistics are retrieved.
There is no no version.
■
interfaceSpecifier—ATM interface specifier; see Interface Types and Specifiers
on page 5
■
vpi—Virtual path identifier of the PVC. The numeric range depends on the line
module capabilities and current configuration.
Privileged Exec
baseline atm vp interface
Chapter 3: B Commands
baseline bridge
Syntax
Release Information
Description
Options
Mode
Related Topics
baseline bridge { bridgeGroupName | vplsName }
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Sets a statistics baseline for a bridge group or VPLS instance. The router implements
the baseline by reading and storing the statistics at the time the baseline is set and
then subtracting this baseline whenever baseline-relative statistics are retrieved.
There is no no version.
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
Privileged Exec
■
Setting a Baseline for VPLS Statistics in the JUNOSe BGP and MPLS Configuration
Guide
baseline bridge
■
219
JUNOSe 11.0.x Command Reference Guide A to M
baseline bridge interface
Syntax
Release Information
Description
baseline bridge interface interfaceType interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for a specified network interface belonging to a bridge group
or VPLS instance. The router implements the baseline by reading and storing the
statistics at the time the baseline is set and then subtracting this baseline whenever
baseline-relative statistics are retrieved. There is no no version.
NOTE: Using the baseline bridge interface command for a VPLS instance affects
the specified network interface associated with the VPLS instance, but has no effect
on the VPLS virtual core interface, which represents all of the MPLS tunnels from the
router to the remote VPLS edge (VE) devices. To set a statistics baseline for the VPLS
virtual core interface, use the baseline bridge interface vpls command.
Options
■
■
Mode
Related Topics
220
■
interfaceType—One of the following interface types listed in Interface Types and
Specifiers on page 5
■
atm
■
fastEthernet
■
gigabitEthernet
■
tenGigabitEthernet
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
■
Setting a Baseline for VPLS Statistics in the JUNOSe BGP and MPLS Configuration
Guide
baseline bridge interface
Chapter 3: B Commands
baseline bridge interface vpls
Syntax
Release Information
Description
baseline bridge interface vpls vplsName
Command introduced in JUNOSe Release 7.1.0.
Sets a statistics baseline for a VPLS instance on the VPLS virtual core interface, which
represents all of the MPLS tunnels from the router to the remote VPLS edge (VE)
devices. The router implements the baseline by reading and storing the statistics at
the time the baseline is set and then subtracting this baseline whenever
baseline-relative statistics are retrieved. There is no no version.
NOTE: Using the baseline bridge interface vpls command affects the VPLS virtual
core interface, but has no effect on the network interfaces associated with the VPLS
instance. To set a statistics baseline for a VPLS network interface, use the baseline
bridge interface command.
Options
Mode
Related Topics
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
Privileged Exec
■
Setting a Baseline for VPLS Statistics in the JUNOSe BGP and MPLS Configuration
Guide
baseline bridge interface vpls
■
221
JUNOSe 11.0.x Command Reference Guide A to M
baseline clns
Syntax
Release Information
Description
Options
Mode
222
■
baseline clns
baseline clns [ interfaceType interfaceSpecifier ]
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for CLNS. The router implements the baseline by reading
and storing the statistics at the time the baseline is set and then subtracting this
baseline whenever baseline-relative statistics are retrieved. There is no no version.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
Chapter 3: B Commands
baseline cops
Syntax
Release Information
Description
Mode
baseline cops
Command introduced in JUNOSe Release 7.1.0.
Sets a baseline for the Common Open Policy Service (COPS) statistics. The router
implements the baseline by reading and storing the statistics at the time the baseline
is set and then subtracting this baseline whenever baseline-relative statistics are
retrieved. There is no no version.
Privileged Exec
baseline cops
■
223
JUNOSe 11.0.x Command Reference Guide A to M
baseline dhcp
Syntax
Release Information
Description
Options
Mode
Related Topics
224
■
baseline dhcp
baseline dhcp { server | relay }
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for DHCP relay and DHCP relay proxy statistics. The router
implements the baseline by reading and storing the statistics at the time the baseline
is set and then subtracting this baseline whenever baseline-relative statistics are
retrieved. There is no no version.
■
server—Sets baseline for DHCP proxy server statistics
■
relay—Sets baseline for DHCP relay statistics
Privileged Exec
■
Setting Baselines for DHCP Statistics
Chapter 3: B Commands
baseline frame-relay interface
Syntax
Release Information
Description
Options
Mode
baseline frame-relay interface interfaceType interfaceSpecifier [ dlci ]
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for Frame Relay and MLFR interfaces, subinterfaces, and
circuits. The router implements the baseline by reading and storing the statistics at
the time the baseline is set and then subtracting this baseline whenever
baseline-relative statistics are retrieved. There is no no version.
■
interfaceType—One of the following interface types listed in Interface Types and
Specifiers on page 5
■
mlframe-relay
■
pos
■
serial
■
tunnel
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
dlci—DLCI number to be used on the specified subinterface to identify a virtual
circuit in the range 16–1007
Privileged Exec
baseline frame-relay interface
■
225
JUNOSe 11.0.x Command Reference Guide A to M
baseline frame-relay multilinkinterface
Syntax
Release Information
Description
Options
baseline frame-relay multilinkinterface interfaceType interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for MLFR links. The router implements the baseline by
reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
■
■
Mode
226
■
interfaceType—One of the following interface types listed in Interface Types and
Specifiers on page 5
■
serial
■
pos
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline frame-relay multilinkinterface
Chapter 3: B Commands
baseline hdlc interface
Syntax
Release Information
Description
Options
baseline hdlc interface interfaceType interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for Cisco HDLC interfaces. The router implements the baseline
by reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
■
■
Mode
interfaceType—One of the following interface types listed in Interface Types and
Specifiers on page 5
■
pos
■
serial
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline hdlc interface
■
227
JUNOSe 11.0.x Command Reference Guide A to M
baseline interface
Syntax
Release Information
Description
Options
Mode
228
■
baseline interface interfaceType interfaceSpecifier [ vcd ]
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for an interface or a specific ATM virtual circuit. The router
implements the baseline by reading and storing the statistics at the time the baseline
is set and then subtracting this baseline whenever baseline-relative statistics are
retrieved. There is no no version.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
vcd—Virtual circuit descriptor; number in the range 1–4294967295; an identifier
for the VC in other commands (ATM interfaces only)
Privileged Exec
baseline interface
Chapter 3: B Commands
baseline ip
Syntax
Release Information
Description
Options
Mode
baseline ip [ vrf vrfName ]
Command introduced before JUNOSe Release 7.1.0.
Sets the baseline on general IP traffic statistics as the current value. There is no no
version.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
Privileged Exec
baseline ip
■
229
JUNOSe 11.0.x Command Reference Guide A to M
baseline ip bgp
Syntax
Release Information
Description
Mode
230
■
baseline ip bgp
baseline ip bgp
Command introduced before JUNOSe Release 7.1.0.
Sets the baseline on all BGP statistics as the current value. There is no no version.
Privileged Exec
Chapter 3: B Commands
baseline ip dhcp-external
Syntax
Release Information
Description
Mode
Related Topics
baseline ip dhcp-external
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for DHCP external server statistics. The router implements the baseline
by reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
■
Setting Baselines for DHCP Statistics
baseline ip dhcp-external
■
231
JUNOSe 11.0.x Command Reference Guide A to M
baseline ip dhcp-local
Syntax
Release Information
Description
Options
baseline ip dhcp-local [ interface interfaceType interfaceSpecifier ]
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for DHCP local server statistics. The router implements the baseline
by reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
■
■
Mode
232
■
interfaceType—One of the following interface types listed in Interface Types and
Specifiers on page 5
■
atm
■
fastEthernet
■
gigabitEthernet
■
tenGigabitEthernet
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline ip dhcp-local
Chapter 3: B Commands
baseline ip dvmrp
Syntax
Release Information
Description
Mode
baseline ip dvmrp
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for DVMRP statistics. The router implements the baseline by reading
and storing the statistics at the time the baseline is set and then subtracting this
baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline ip dvmrp
■
233
JUNOSe 11.0.x Command Reference Guide A to M
baseline ip http
Syntax
Release Information
Description
Mode
234
■
baseline ip http
baseline ip http
Command introduced in JUNOSe Release 7.2.0.
Sets a baseline for HTTP local server statistics. The router implements the baseline
by reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
Chapter 3: B Commands
baseline ip igmp
Syntax
Release Information
Description
Mode
baseline ip igmp
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for IGMP statistics. The router implements the baseline by reading
and storing the statistics at the time the baseline is set and then subtracting this
baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline ip igmp
■
235
JUNOSe 11.0.x Command Reference Guide A to M
baseline ip igmp-proxy interface
Syntax
Release Information
Description
Mode
236
■
baseline ip igmp-proxy interface
Command introduced before JUNOSe Release 7.1.0.
Sets the baseline on all IGMP statistics by setting the counters for the numbers of
queries received and reports sent on the upstream interface to zero. There is no no
version.
Privileged Exec
baseline ip igmp-proxy interface
Chapter 3: B Commands
baseline ip interface
Syntax
Release Information
Description
Options
Mode
baseline ip interface [ vrf vrfName ] interfaceType interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for IP interface statistics. There is no no version.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline ip interface
■
237
JUNOSe 11.0.x Command Reference Guide A to M
baseline ip mobile home-agent
Syntax
Release Information
Description
Mode
238
■
baseline ip mobile home-agent
Command introduced in JUNOSe Release 9.0.0.
Sets a statistics baseline for a specified Mobile IP home agent for control traffic. The
router implements the baseline by reading and storing the statistics at the time the
baseline is set and then subtracting this baseline whenever baseline-relative statistics
are retrieved. There is no no version.
Privileged Exec
baseline ip mobile home-agent
Chapter 3: B Commands
baseline ip nat
Syntax
Release Information
Description
Mode
baseline ip nat
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for NAT statistics and counters. There is no no version.
Privileged Exec
baseline ip nat
■
239
JUNOSe 11.0.x Command Reference Guide A to M
baseline ip ospf
Syntax
Release Information
Description
Mode
240
■
baseline ip ospf
baseline ip ospf
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for OSPF statistics and counters. There is no no version.
Privileged Exec
Chapter 3: B Commands
baseline ip rip
Syntax
Release Information
Description
Mode
baseline ip rip
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for RIP interfaces. The router implements the baseline by
reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline ip rip
■
241
JUNOSe 11.0.x Command Reference Guide A to M
baseline ip tunnel-reassembly
Syntax
Release Information
Description
Mode
242
■
baseline ip tunnel-reassembly
Command introduced in JUNOSe Release 8.0.0.
Sets a statistics baseline for tunnel reassembly statistics on the current virtual router.
The router implements the baseline by reading and storing the statistics at the time
the baseline is set and then subtracting this baseline whenever you retrieve
baseline-relative statistics. There is no no version.
Privileged Exec
baseline ip tunnel-reassembly
Chapter 3: B Commands
baseline ip udp
Syntax
Release Information
Description
Options
Mode
baseline ip udp [ vrf vrfName ]
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for UDP statistics. The router implements the baseline by
reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
Privileged Exec
baseline ip udp
■
243
JUNOSe 11.0.x Command Reference Guide A to M
baseline ip vrrp
Syntax
Release Information
Description
Mode
244
■
baseline ip vrrp
baseline ip vrrp
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for VRRP statistics. The router implements the baseline by
reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
Chapter 3: B Commands
baseline ipv6
Syntax
Release Information
Description
Options
Mode
baseline ipv6 [ udp ]
Command introduced before JUNOSe Release 7.1.0.
Sets the baseline on general IPv6 traffic statistics as the current value. Use the udp
keyword to set a baseline for UDP statistics. There is no no version.
■
udp—Sets a baseline for UDP statistics
Privileged Exec
baseline ipv6
■
245
JUNOSe 11.0.x Command Reference Guide A to M
baseline ipv6 dhcpv6-local
Syntax
Release Information
Description
Mode
Related Topics
246
■
baseline ipv6 dhcpv6-local
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for DHCPv6 local server statistics. The router implements the baseline
by reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
■
Setting Baselines for DHCP Statistics
baseline ipv6 dhcpv6-local
Chapter 3: B Commands
baseline ipv6 interface
Syntax
Release Information
Description
Options
Mode
baseline ipv6 interface interfaceType interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for IPv6 interface statistics. There is no no version.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline ipv6 interface
■
247
JUNOSe 11.0.x Command Reference Guide A to M
baseline ipv6 local pool
Syntax
Release Information
Description
Mode
248
■
baseline ipv6 local pool
Command introduced in JUNOSe Release 10.1.0.
Sets a baseline for the IPv6 local pool prefix assignment statistics. The router
implements the baseline by reading and storing the statistics at the time the baseline
is set and then subtracting this baseline whenever baseline-relative statistics are
retrieved. There is no no version.
Privileged Exec, User Exec
baseline ipv6 local pool
Chapter 3: B Commands
baseline ipv6 mld
Syntax
Release Information
Description
Mode
baseline ipv6 mld
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for MLD statistics. The router implements the baseline by reading
and storing the statistics at the time the baseline is set and then subtracting this
baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline ipv6 mld
■
249
JUNOSe 11.0.x Command Reference Guide A to M
baseline ipv6 mld-proxy interface
Syntax
Release Information
Description
Mode
250
■
baseline ipv6 mld-proxy interface
Command introduced before JUNOSe Release 7.1.0.
Sets the baseline on all MLD statistics by setting the counters for the numbers of
queries received and reports sent on the upstream interface to zero. There is no no
version.
Privileged Exec
baseline ipv6 mld-proxy interface
Chapter 3: B Commands
baseline ipv6 ospf
Syntax
Release Information
Description
Options
Mode
baseline ipv6 ospf [ processId ]
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for OSPFv3 statistics and counters. There is no no version.
■
processId—Integer in the range 1–65535
Privileged Exec
baseline ipv6 ospf
■
251
JUNOSe 11.0.x Command Reference Guide A to M
baseline ipv6 tcp
Syntax
Release Information
Description
Options
Mode
252
■
baseline ipv6 tcp
baseline ipv6 tcp [ vrf vrfName ] [ localAddress localPort remoteAddress remotePort ]
Command introduced before JUNOSe Release 7.1.0.
ip keyword removed and ipv6 keyword added in JUNOSe Release 7.2.0.
Sets a statistics baseline for only IPv6 TCP statistics. The router implements the
baseline by reading and storing the statistics at the time the baseline is set and then
subtracting this baseline whenever baseline-relative statistics are retrieved. There is
no no version.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
localAddress—Local IPv6 address on the router
■
localPort—Local TCP port number on the router
■
remoteAddress—IPv6 address of remote router
■
remotePort—TCP port number on remote router
Privileged Exec
Chapter 3: B Commands
baseline line interface sonet
Syntax
Release Information
Description
Options
Mode
baseline line interface sonet interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for SONET/SDH statistics at the line layer. The router
implements the baseline by reading and storing the MIB statistics at the time the
baseline is set and then subtracting this baseline whenever baseline-relative statistics
are retrieved. There is no no version.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline line interface sonet
■
253
JUNOSe 11.0.x Command Reference Guide A to M
baseline local pool
Syntax
Release Information
Description
Mode
254
■
baseline local pool
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for the router local address pool statistics. The router
implements the baseline by reading and storing the statistics at the time the baseline
is set and then subtracting this baseline whenever baseline-relative statistics are
retrieved. There is no no version.
Privileged Exec
baseline local pool
Chapter 3: B Commands
baseline log
Syntax
baseline log [ last-reset | time [ utc ] month day year ]
Release Information
Command introduced before JUNOSe Release 7.1.0.
Description
Options
Sets a baseline for logging events. To use the current system time, do not enter any
options. There is no no version.
■
last-reset—Causes the router to display log messages generated since the last
time the router was reset
■
time—Time and date after which the router displays messages that are
timestamped. To set the time, use the following syntax:
Hour:Minute[:Second]—Current time in 24-hour format; seconds are optional
Mode
■
utc—Indicates that the time entered is UTC (GMT) time; if you do not include
this keyword, the router considers the time entered to be local time
■
month—Name of the month in English
■
day—Number of the day in the range 1–31
■
year—Four-digit number of the year
Privileged Exec
baseline log
■
255
JUNOSe 11.0.x Command Reference Guide A to M
baseline mpls interface
Syntax
Release Information
Description
Options
Mode
Related Topics
256
■
baseline mpls interface interfaceName
Command introduced in JUNOSe Release 7.1.0.
Sets a statistics baseline for the specified MPLS major interface or MPLS shim
interface. By default, the interface counters are baselined at zero. There is no no
version.
■
interfaceName—Name of interface; up to 15 alphanumeric characters
Privileged Exec
■
Setting Baselines for Layer 2 Services over MPLS in the JUNOSe BGP and MPLS
Configuration Guide
baseline mpls interface
Chapter 3: B Commands
baseline mpls label
Syntax
Release Information
Description
Options
Mode
baseline mpls label { interface interfaceName atm vpi vci | labelValue }
Command introduced in JUNOSe Release 7.1.0.
Sets a statistics baseline for the specified MPLS in label. Statistics for an in label must
be enabled with the mpls statistics label command before they can be baselined.
By default, the in-label counters are baselined at zero. There is no no version.
■
interfaceName—Name of interface for label in interface label space on an ATM
AAL5 interface; up to 15 alphanumeric characters
■
vpi—Virtual path identifier for a label, a value in the range 0–255
■
vci—Virtual circuit identifier for a label, a value in the range 33–65535
■
labelValue—Integer identifying a label in the platform label space, a value in the
range 16–1048575
Privileged Exec
baseline mpls label
■
257
JUNOSe 11.0.x Command Reference Guide A to M
baseline mpls next-hop
Syntax
Release Information
Description
Options
Mode
258
■
baseline mpls next-hop nextHopIndex
Command introduced in JUNOSe Release 7.1.0.
Sets a statistics baseline for the specified MPLS next hop. Statistics for a next hop
must be enabled with the mpls statistics next-hop command before they can be
baselined. By default, the next-hop counters are baselined at zero. There is no no
version.
■
nextHopIndex—Number identifying a next hop; displayed by the show mpls
forwarding command
Privileged Exec
baseline mpls next-hop
Chapter 3: B Commands
baseline mpls tunnel
Syntax
Release Information
Description
Options
Mode
baseline mpls tunnel tunnelName
Command introduced in JUNOSe Release 7.1.0.
Sets a statistics baseline for the specified MPLS tunnel. Statistics for a tunnel must
be enabled with the mpls statistics policy command before they can be baselined.
By default, the next-hop counters are baselined at zero. There is no no version.
■
tunnelName—Name identifying a tunnel; displayed by the show mpls tunnels
command
Privileged Exec
baseline mpls tunnel
■
259
JUNOSe 11.0.x Command Reference Guide A to M
baseline path interface sonet
Syntax
Release Information
Description
Options
Mode
260
■
baseline path interface sonet interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for SONET/SDH statistics at the path layer. The router
implements the baseline by reading and storing the MIB statistics at the time the
baseline is set and then subtracting this baseline whenever baseline-relative statistics
are retrieved. There is no no version.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline path interface sonet
Chapter 3: B Commands
baseline ppp interface
Syntax
Release Information
Description
Options
Mode
baseline ppp interface { atm | fastEthernet | gigabitEthernet | serial | mlppp | pos }
interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
fastEthernet and gigabitEthernet keywords added in JUNOSe Release 11.0.0
Sets a statistics baseline for PPP interfaces. The router implements the baseline by
reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
■
atm—Specifies an ATM interface
■
fastEthernet—Specifies a Fast Ethernet interface
■
gigabitEthernet—Specifies a Gigabit Ethernet interface
■
mlppp—Specifies an MLPPP interface
■
pos—Specifies a POS interface
■
serial—Specifies a serial interface
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline ppp interface
■
261
JUNOSe 11.0.x Command Reference Guide A to M
baseline pppoe interface
Syntax
Release Information
Description
Options
baseline pppoe interface interfaceType interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for PPPoE interfaces, subinterfaces, and/or circuits. The
router implements the baseline by reading and storing the statistics at the time the
baseline is set and then subtracting this baseline whenever baseline-relative statistics
are retrieved. There is no no version.
■
■
Mode
262
■
interfaceType—One of the following interface types listed in Interface Types and
Specifiers on page 5
■
atm
■
fastEthernet
■
gigabitEthernet
■
lag
■
serial—PPPoE is not currently supported on serial interfaces
■
tenGigabitEthernet
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline pppoe interface
Chapter 3: B Commands
baseline radius
Syntax
Release Information
Description
Mode
baseline radius
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for RADIUS statistics. The router implements the baseline
by reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline radius
■
263
JUNOSe 11.0.x Command Reference Guide A to M
baseline radius dynamic-request
Syntax
Release Information
Description
Mode
Related Topics
264
■
baseline radius dynamic-request
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for RADIUS dynamic-request statistics. The router implements
the baseline by reading and storing the statistics at the time the baseline is set and
then subtracting this baseline whenever baseline-relative statistics are retrieved.
There is no no version.
Privileged Exec
■
Monitoring Packet Mirroring Overview
baseline radius dynamic-request
Chapter 3: B Commands
baseline radius relay
Syntax
Release Information
Description
Mode
baseline radius relay
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for RADIUS relay statistics. The router implements the baseline by
reading and storing the statistics at the time the baseline is set and then subtracting
this baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline radius relay
■
265
JUNOSe 11.0.x Command Reference Guide A to M
baseline section interface sonet
Syntax
Release Information
Description
Options
Mode
266
■
baseline section interface sonet interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Sets a statistics baseline for SONET/SDH statistics at the section layer. The router
implements the baseline by reading and storing the MIB statistics at the time the
baseline is set and then subtracting this baseline whenever baseline-relative statistics
are retrieved. There is no no version.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
baseline section interface sonet
Chapter 3: B Commands
baseline show-delta-counts
Syntax
Release Information
Description
Mode
[ no ] baseline show-delta-counts
Command introduced before JUNOSe Release 7.1.0.
Configures the router to always display the statistics relative to the most recent
appropriate baseline. The no version removes the configuration.
Global Configuration
baseline show-delta-counts
■
267
JUNOSe 11.0.x Command Reference Guide A to M
baseline snmp
Syntax
Release Information
Description
Mode
268
■
baseline snmp
baseline snmp
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for SNMP statistics. The router implements the baseline by reading
and storing the statistics at the time the baseline is set and then subtracting this
baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
Chapter 3: B Commands
baseline sscc
Syntax
Release Information
Description
Mode
baseline sscc
Command introduced in JUNOSe Release 7.1.0.
Sets a baseline for the SRC statistics. The router implements the baseline by reading
and storing the statistics at the time the baseline is set and then subtracting this
baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline sscc
■
269
JUNOSe 11.0.x Command Reference Guide A to M
baseline suspicious-control-flow-detection counts
Syntax
Release Information
Description
Mode
270
■
baseline suspicious-control-flow-detection counts
Command introduced in JUNOSe Release 7.3.0.
Sets a baseline for statistics for suspicious control flow detection. There is no no
version.
Privileged Exec, User Exec
baseline suspicious-control-flow-detection counts
Chapter 3: B Commands
baseline tacacs
Syntax
Release Information
Description
Mode
baseline tacacs
Command introduced before JUNOSe Release 7.1.0.
Sets a baseline for TACACS+ statistics. The router implements the baseline by reading
and storing the statistics at the time the baseline is set and then subtracting this
baseline whenever baseline-relative statistics are retrieved. There is no no version.
Privileged Exec
baseline tacacs
■
271
JUNOSe 11.0.x Command Reference Guide A to M
baseline tcp
Syntax
Release Information
Description
Options
Mode
272
■
baseline tcp
baseline [ ip | ipv6 ] tcp [ vrf vrfName ] [ localAddress localPort remoteAddress
remotePort ]
Command introduced in JUNOSe Release 7.2.0.
ip keyword made optional in JUNOSe Release 7.2.0.
ipv6 keyword added in JUNOSe Release 7.2.0.
Sets a baseline for all TCP statistics or for only IPv4 or IPv6 TCP statistics. The router
implements the baseline by reading and storing the statistics at the time the baseline
is set and then subtracting this baseline whenever baseline-relative statistics are
retrieved. There is no no version.
■
ip—Implements a baseline for only IPv4 statistics
■
ipv6—Implement a baseline for only IPv6 statistics
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
localAddress—Local IP or IPv6 address on the router
■
localPort—Local TCP port number on the router
■
remoteAddress—IP or IPv6 address of remote router
■
remotePort—TCP port number on remote router
Privileged Exec
Chapter 3: B Commands
bert
Syntax
bert pattern pattern interval time [ unframed ]
no bert
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Enables bit error rate tests using the specified pattern on T3 interfaces on channelized
and unchannelized T3 modules. The no version stops the test that is running.
NOTE: The BERT patterns supported can vary depending on the line module and I/O
module assembly you are using.
Options
Mode
■
pattern—One of the following test patterns:
■
0s—Repetitive test pattern of all zeros, 00000...
■
1s—Repetitive test pattern of all ones, 11111...
■
2^9—Pseudorandom test pattern, 511 bits in length
■
2^11—Pseudorandom test pattern, 2047 bits in length
■
2^15—Pseudorandom test pattern, 32,767 bits in length
■
2^20-O153—Pseudorandom test pattern, 1,048,575 bits in length
■
2^20-QRSS—Pseudorandom QRSS test pattern, 1,048,575 bits in length
■
2^23—Pseudorandom test pattern, 8,388,607 bits in length
■
alt-0-1—Repetitive alternating test pattern of zeros and ones, 01010101...
■
time—Duration of the test in the range 1–1440 minutes
■
unframed—(available for E1 and T1 interfaces only) if specified, the test bit
pattern occupies all bits on the link, overwriting the framing bits; if not specified,
the test bit pattern occupies only the payload bits
Controller Configuration
bert
■
273
JUNOSe 11.0.x Command Reference Guide A to M
bfd adapt
Syntax
Release Information
Description
Mode
274
■
bfd adapt
[ no ] bfd adapt
Command introduced in JUNOSe Release 7.3.0.
Enables all BFD sessions to adapt timer intervals on all virtual routers on the router.
The no version disables subsequent BFD sessions from adapting timer intervals
without resetting any already adapted intervals.
Global Configuration
Chapter 3: B Commands
bgp advertise-best-external-to-internal
Syntax
Release Information
Description
Mode
[ no ] bgp advertise-best-external-to-internal
Command introduced before JUNOSe Release 7.1.0.
Causes the BGP selection process to select two best routes to every destination. BGP
advertises to external peers the best route selected from the complete set of routes
known to that destination. BGP advertises to internal peers the best route from the
set of routes received from external and confederation peers. The no version restores
the default condition, wherein BGP selects only one best route for each destination
from the complete set of routes; if the best route was received from an internal peer,
BGP does not advertise any route to that destination to the internal peers.
Router Configuration
bgp advertise-best-external-to-internal
■
275
JUNOSe 11.0.x Command Reference Guide A to M
bgp advertise-inactive
Syntax
Release Information
Description
Mode
276
■
[ no ] bgp advertise-inactive
Command introduced before JUNOSe Release 7.1.0.
Enables the advertisement of inactive BGP received routes—routes that are considered
by BGP to be “ best routes” and therefore are present in the IP forwarding table, but
that are not being used for forwarding. The no version restores the default state of
normal route advertisement, whereby BGP advertises received routes only if they
are in the IP forwarding table and are being used to forward traffic, or if
synchronization is enabled.
Router Configuration
bgp advertise-inactive
Chapter 3: B Commands
bgp always-compare-med
Syntax
Release Information
Description
Mode
[ no ] bgp always-compare-med
Command introduced before JUNOSe Release 7.1.0.
Enables the comparison of the MED for paths from neighbors in different ASs. The
no version disables the feature.
Router Configuration
bgp always-compare-med
■
277
JUNOSe 11.0.x Command Reference Guide A to M
bgp bestpath med confed
Syntax
Release Information
Description
Mode
278
■
[ no ] bgp bestpath med confed
Command introduced before JUNOSe Release 7.1.0.
Specifies that BGP considers the MED when comparing routes originated from
different sub-ASs within the confederation to which this BGP speaker belongs. The
no version restores the default state, where the MED attribute is not considered.
Router Configuration
bgp bestpath med confed
Chapter 3: B Commands
bgp bestpath missing-as-worst
Syntax
Release Information
Description
Mode
[ no ] bgp bestpath missing-as-worst
Command introduced before JUNOSe Release 7.1.0.
Specifies that a route with a MED is always considered to be better than a route
without a MED by causing the missing MED attribute to have a value of infinity. The
no version restores the default state, where the missing MED attribute is considered
to have a value of zero.
Router Configuration
bgp bestpath missing-as-worst
■
279
JUNOSe 11.0.x Command Reference Guide A to M
bgp client-to-client reflection
Syntax
Release Information
Description
Mode
280
■
[ no ] bgp client-to-client reflection
Command introduced before JUNOSe Release 7.1.0.
Restores route reflection from a BGP route reflector to clients. The no version disables
client-to-client reflection. By default, BGP reflects routes received from any route
reflector client to all other route reflector clients. This command can be used to
disable or restore this behavior.
Router Configuration
bgp client-to-client reflection
Chapter 3: B Commands
bgp cluster-id
Syntax
bgp cluster-id { clusterId | ipAddress }
no bgp cluster-id [ clusterId | ipAddress ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures a cluster ID if the BGP cluster has more than one route reflector. The no
version causes BGP to use the router ID as the cluster ID.
■
clusterId—Number in the range 0–4294967295; the cluster ID of this router
acting as a route reflector
■
ipAddress—Cluster ID of this router acting as a route reflector specified as an IP
address
Router Configuration
bgp cluster-id
■
281
JUNOSe 11.0.x Command Reference Guide A to M
bgp confederation identifier
Syntax
bgp confederation identifier autonomousSystem
no bgp confederation identifier [ autonomousSystem ]
Release Information
Description
Options
Mode
282
■
Command introduced before JUNOSe Release 7.1.0.
Configures a BGP confederation identifier. The no version removes a BGP
confederation identifier.
■
autonomousSystem—Number in the range 1–4294967295; the confederation
identifier
Router Configuration
bgp confederation identifier
Chapter 3: B Commands
bgp confederation peers
Syntax
bgp confederation peers { autonomousSystem [ autonomousSystem ]* |
filter-list filterListName }
no bgp confederation peers [ autonomousSystem [ autonomousSystem ]* |
filter-list filterListName ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the sub-ASs that belong to a confederation by listing individual AS numbers
or by reference to an AS-path access list (the filter list). If the remote AS of a peer
appears in the list of sub-AS numbers or in the filter list, then the peer is considered
to be in the same confederation. The no version removes individually specified
sub-ASs, all sub-ASs specified by the filter list, or all sub-ASs from the confederation.
■
autonomousSystem—AS number in the range 1– 4294967295
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
■
filterListName—Name of an AS-path access list; a string of up to 32 characters
Router Configuration
bgp confederation peers
■
283
JUNOSe 11.0.x Command Reference Guide A to M
bgp dampening
Syntax
Release Information
Description
Options
Mode
284
■
bgp dampening
[ no ] bgp dampening [ halfLife [ reuse suppress maxSuppressTime
[ halfLifeUnreachable ] ] ] [ route-map mapTag ]
Command introduced before JUNOSe Release 7.1.0.
Enables BGP route dampening. The router assesses a penalty of 1000 each time a
route flaps and adds this to any previously accumulated penalty value. Penalties are
cumulative. The no version disables route flap dampening.
■
halfLife—Half-life period in minutes in the range 1–45; default value is 15. When
a BGP route has been assigned a penalty, the penalty is decreased by half after
the half-life period.
■
reuse—Reuse limit in the range 1–20000; default value is 750. As the penalty
for a flapping route decreases and falls below this reuse limit, the route is
unsuppressed. That is, the route is added back to the BGP table and used for
forwarding.
■
suppress—Suppress limit in the range 1–20000; default value is 2000. A route
is suppressed when its penalty exceeds this limit.
■
maxSuppressTime—Maximum suppression time in minutes in the range 1–255.
This value is the maximum amount of time a route can be suppressed. The
default value is four times the half-life value.
■
halfLifeUnreachable—Alternate half-life period in minutes for unreachable routes;
a number in the range 1–45. If this value is not specified, the same half-life period
is used for both reachable and unreachable routes.
■
route-map—Specifies that dampening can be applied to routes according to the
route map behavior. If the route map permits a route, the route is subject to
dampening. If the route map denies a route, the route is not subject to dampening.
The route map can contain a no dampening clause that determines dampening
characteristics.
■
mapTag—Name of the route map; a string of up to 32 alphanumeric characters.
Address Family Configuration, Router Configuration
Chapter 3: B Commands
bgp default ipv4-unicast
Syntax
Release Information
Description
Mode
[ no ] bgp default ipv4-unicast
Command introduced before JUNOSe Release 7.1.0.
Causes all neighbors subsequently created with the neighbor remote-as or neighbor
peer-group commands to be automatically activated in the IPv4 unicast address
family. The no version disables the IPv4 unicast address family on all neighbors.
Address Family Configuration, Router Configuration
bgp default ipv4-unicast
■
285
JUNOSe 11.0.x Command Reference Guide A to M
bgp default local-preference
Syntax
bgp default local-preference value
no bgp default local-preference [ value ]
Release Information
Description
Options
Mode
286
■
Command introduced before JUNOSe Release 7.1.0.
Changes the default local preference value. Generally, the default value of 100 allows
you to easily define a particular path as less preferable than paths with no local
preference attribute. The preference is sent to all routers in the local AS. The preferred
path is the one with the highest preference value. The no version restores the default
setting.
■
value—Local preference number in the range 0–4294967295
Router Configuration
bgp default local-preference
Chapter 3: B Commands
bgp default route-target filter
Syntax
Release Information
Description
Mode
[ no ] bgp default route-target filter
Command introduced before JUNOSe Release 7.1.0.
Controls whether incoming BGP routes are filtered according to membership in
route-target communities. Automatic filtering is enabled by default. The no version
disables automatic filtering.
Router Configuration
bgp default route-target filter
■
287
JUNOSe 11.0.x Command Reference Guide A to M
bgp enforce-first-as
Syntax
Release Information
Description
Mode
288
■
[ no ] bgp enforce-first-as
Command introduced before JUNOSe Release 7.1.0.
Forces BGP to compare the configured remote AS number of an external peer with
the first AS in the AS path of routes received from the peer. If the AS numbers do
not match, BGP sends the peer an error message. The no version restores the default
condition, which does not perform the AS comparison.
Router Configuration
bgp enforce-first-as
Chapter 3: B Commands
bgp fast-external-fallover
Syntax
Release Information
Description
Mode
[ no ] bgp fast-external-fallover
Command introduced before JUNOSe Release 7.1.0.
Automatically brings down a BGP session to any adjacent external peer immediately
after the link fails (as opposed to waiting for the TCP connection to fail or the hold
timer to expire). The no version disables automatic session termination.
Router Configuration
bgp fast-external-fallover
■
289
JUNOSe 11.0.x Command Reference Guide A to M
bgp graceful-restart
Syntax
Release Information
Description
[ no | default ] bgp graceful-restart
Command introduced before JUNOSe Release 7.1.0.
Enables the BGP graceful restart capability globally, which enables BGP to maintain
its forwarding state during a peer restart, avoiding network-wide route flaps and
interruptions in traffic forwarding. Graceful restart is enabled by default. The default
version restores the default condition, wherein graceful restart is enabled. The no
version disables the graceful restart capability.
NOTE: The E Series router currently supports graceful restart only as a receiving
peer, not as a restarting peer.
Mode
290
■
Router Configuration
bgp graceful-restart
Chapter 3: B Commands
bgp graceful-restart path-selection-defer-time-limit
Syntax
bgp graceful-restart path-selection-defer-time-limit seconds
no bgp graceful-restart path-selection-defer-time-limit [ seconds ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the maximum time period after a peer session restart during which the best-path
selection process is deferred. The period is measured from when the session is
detected in a down state. The no version restores the default value, 360 seconds.
■
seconds—Integer in the range 1–3600; default value is 600 seconds
Router Configuration
bgp graceful-restart path-selection-defer-time-limit
■
291
JUNOSe 11.0.x Command Reference Guide A to M
bgp graceful-restart restart-time
Syntax
bgp graceful-restart restart-time seconds
no bgp graceful-restart restart-time [ seconds ]
Release Information
Description
Options
Mode
292
■
Command introduced before JUNOSe Release 7.1.0.
Sets the time period advertised to all peers during which a restart is expected to be
complete on this BGP speaker. If the speaker does not reestablish peering sessions
within this period, the peers flush all routes from this speaker that they marked as
stale when the speaker restarted and the sessions went down. The no version restores
the default value, 120 seconds.
■
seconds—Integer in the range 1–3600; default value is 120 seconds
Router Configuration
bgp graceful-restart restart-time
Chapter 3: B Commands
bgp graceful-restart stalepaths-time
Syntax
bgp graceful-restart stalepaths-time seconds
no bgp graceful-restart stalepaths-time [ seconds ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the time period after a peer session restart for all peers during which BGP waits
for an End-of-RIB marker from a peer before flushing all stale routes from that peer.
The period is measured from when the session is detected in a down state. The no
version restores the default value, 360 seconds.
■
seconds—Integer in the range 1–3600; default value is 360 seconds
Router Configuration
bgp graceful-restart stalepaths-time
■
293
JUNOSe 11.0.x Command Reference Guide A to M
bgp log-neighbor-changes
Syntax
Release Information
Description
Mode
294
■
[ no ] bgp log-neighbor-changes
Command introduced before JUNOSe Release 7.1.0.
Causes BGP to log a message of severity notice to the bgpNeighborChanges log
whenever a peer enters or leaves the Established state for any reason. No other
messages are logged to the bgpNeighborChanges log. The no version disables this
log.
Router Configuration
bgp log-neighbor-changes
Chapter 3: B Commands
bgp maxas-limit
Syntax
bgp maxas-limit limit
no bgp maxas-limit [ limit ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Causes BGP to check the length of AS paths received in update messages and to not
forward routes whose AS paths are greater than the specified length. The no version
halts checking of the AS path length.
■
limit—Maximum acceptable length of a received AS path; number in the range
1–1000
Router Configuration
bgp maxas-limit
■
295
JUNOSe 11.0.x Command Reference Guide A to M
bgp redistribute-internal
Syntax
Release Information
Description
Mode
296
■
[ no ] bgp redistribute-internal
Command introduced before JUNOSe Release 7.1.0.
Authorizes redistribution of internal BGP routes (in addition to external BGP routes)
into protocols that have BGP route redistribution enabled. This command is not
required for IBGP routes within a VRF, for which redistribution is always enabled.
The no version restores the default, redistributing only external BGP routes.
Router Configuration
bgp redistribute-internal
Chapter 3: B Commands
bgp router-id
Syntax
bgp router-id ipAddress
no bgp router-id [ ipAddress ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the BGP identifier. The no version restores the router ID as the identifier.
■
ipAddress—IP address to be used as the BGP identifier; ignored if present in the
no version
Router Configuration
bgp router-id
■
297
JUNOSe 11.0.x Command Reference Guide A to M
bgp shutdown
Syntax
Release Information
Description
Mode
298
■
bgp shutdown
[ no ] bgp shutdown
Command introduced before JUNOSe Release 7.1.0.
Administratively disables BGP. The no version reenables BGP.
Router Configuration
Chapter 3: B Commands
bgp wait-on-end-of-rib
Syntax
bgp wait-on-end-of-rib seconds
no bgp wait-on-end-of-rib
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.2.0.
Specifies how long BGP waits to receive an End-of-RIB marker sent by route-target
address family peers to signal the peer has finished advertising route-target
membership information. Applies to all peers in the route-target address family. The
no version restores the default value.
■
seconds—Number of seconds BGP wait for End-of-RIB marker, in the range
1–3600; default is 60 seconds
Address Family Configuration, Router Configuration
bgp wait-on-end-of-rib
■
299
JUNOSe 11.0.x Command Reference Guide A to M
boolean-test
Syntax
boolean-test { comparison comparisonType | event eventOwner eventName
| startup |
value booleanValue }
no boolean-test [ comparison | event | startup | value ]
Release Information
Description
Options
Mode
300
■
boolean-test
Command introduced before JUNOSe Release 7.1.0.
Defines Boolean test values for the trigger that you are configuring, including
comparison settings, a Boolean value, a startup condition, and binding an event to
the boolean-test trigger. The no version deletes the Boolean-test values for this trigger
or removes either the startup condition or event binding.
■
comparisonType—One of the following types of Boolean comparison to perform:
(equal, greater, greaterOrEqual, less, lessOrEqual, unequal
■
eventOwner—Name of event owner that partially specifies event to trigger the
Boolean test; string of up to 32 alphanumeric characters
■
eventName—Name of event that partially specifies event to trigger the Boolean
test; string of up to 32 alphanumeric characters
■
startup—Specifies not to perform the Boolean comparison when this trigger first
becomes active
■
booleanValue—Value in the range -2147483648–2147483647 to use for the
Boolean test
SNMP Trigger Configuration
Chapter 3: B Commands
boot backup
Syntax
boot backup relFilename { cnfFilename | scrFilename | factory-defaults }
no boot backup
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the release and the configuration to be used the next (and every subsequent)
time the boot logic chooses backup mode. The no version removes the setting.
■
relFilename—System software file
■
cnfFilename—Name of an existing configuration file (.cnf)
■
scrFilename—Name of an existing script file (.scr)
■
factory-defaults—Specifies that the router reverts to factory default configuration
when rebooted
Global Configuration
boot backup
■
301
JUNOSe 11.0.x Command Reference Guide A to M
boot config
Syntax
boot config { cnfFilename [ once ] | scrFilename | running-configuration |
startup-configuration | factory-defaults }
no boot config
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Specifies how the router obtains its startup configuration. The no version clears a
previous request to reboot in a specified manner; the next reboot uses the
configuration saved in nonvolatile storage.
CAUTION: All boot config commands except for boot config running-configuration
and boot config startup-configuration erase the existing running configuration when
you reboot the router. Before executing this command, you might want to save the
current configuration to a .cnf file using the copy running-configuration command.
Options
Mode
302
■
boot config
■
cnfFilename—Name of an existing startup configuration file (.cnf) to be used on
all subsequent reboots
■
once—Restores a configuration from the specified configuration file only on the
next reboot. Subsequent reboots revert to the running-configuration settings.
■
scrFilename—Name of an existing script file (.scr)
■
running-configuration—Specifies that the running configuration is to be used for
reboot; only available if the router is in Automatic Commit mode
■
startup-configuration—Specifies that the running configuration is to be used for
reboot; only available if the router is in Manual Commit mode
■
factory-defaults—Specifies that the factory default configuration is to be used
for the next reboot. Subsequent reboots revert to the running-configuration
settings.
Global Configuration
Chapter 3: B Commands
boot force-backup
Syntax
Release Information
Description
[ no ] boot force-backup
Command introduced before JUNOSe Release 7.1.0.
Forces the router to use the backup software release file or router configuration file
on the next boot. The no version sets the router to use the default release or
configuration file on the next boot.
NOTE: After the router has used the backup settings, the no boot force-backup
command is the only way to get the router to use the default settings again.
Mode
Global Configuration
boot force-backup
■
303
JUNOSe 11.0.x Command Reference Guide A to M
boot hotfix
Syntax
boot hotfix hfixFilename
no boot hotfix { hfixFilename | all-releases }
Release Information
Description
Command introduced in JUNOSe Release 7.2.0.
Arms the specified hotfix as a startup hotfix that is automatically activated during
system initialization when the SRP module is reloaded. The no version disarms the
specified armed hotfix or all armed hotfixes.
NOTE: See also the no boot hotfix all-releases command.
Options
Mode
304
■
boot hotfix
■
hfixFileName—Name of a hotfix software file (.hfx) on the local file system
■
all-releases—Disarms all hotfixes currently armed for the armed release
Global Configuration
Chapter 3: B Commands
boot revert-tolerance
Syntax
boot revert-tolerance count time
no boot revert-tolerance
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the reversion tolerances that the boot logic uses to determine whether the router
should use the normal or backup settings. Issuing this command when high availability
is enabled results in the system cold-restarting the router and using the backup
settings if the tolerance settings are met. The no version restores the default reversion
tolerance settings. The default settings are 3 crashes in 30 minutes.
■
count—Number of times the operational SRP software crashes; in the range
0–4294967295; default value is 3
■
time—Time in the range 0–4294967295 seconds in which the set number (count)
of crashes occurs; the default setting is 1800
Global Configuration
boot revert-tolerance
■
305
JUNOSe 11.0.x Command Reference Guide A to M
boot revert-tolerance never
Syntax
Release Information
Description
Mode
306
■
boot revert-tolerance never
Command introduced before JUNOSe Release 7.1.0.
Sets the boot logic to never revert to the backup release or configuration. There is
no no version.
Global Configuration
boot revert-tolerance never
Chapter 3: B Commands
boot subsystem
Syntax
boot [ backup ] subsystem subsysName relFileName
no boot [ backup ] subsystem [ subsysName ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures the selected subsystem to use the specified release the next time the
subsystem is booted. The no version disables the subsystem. The backup option
enables you to specify a backup release for the module in the specified slot in case
the module reboots more times than allowed within the period specified by the boot
revert-tolerance command.
■
backup—Configures a backup setting
■
subsysName—Name of the subsystem to be configured
■
relFileName—Name of system software file to use
Global Configuration
boot subsystem
■
307
JUNOSe 11.0.x Command Reference Guide A to M
boot system
Syntax
Release Information
Description
boot system relFileName
Command introduced before JUNOSe Release 7.1.0.
Specifies the software release (.rel) file to use on reboot. There is no no version.
NOTE: In a dual SRP module configuration, when this information is synchronized
to the standby SRP module, the standby SRP module is reloaded to boot the specified
release. The high availability feature requires the release to be the same on the active
and the standby SRP modules. This means that arming the system to boot with a
different release causes the standby module to reload and prevent high availability
from becoming active or to disable high availability if it is active or pending.
Options
Mode
308
■
boot system
■
relFileName—Name of the software release file (.rel) that contains the software
release
Global Configuration
Chapter 3: B Commands
bridge1483 dos-protection-group
Syntax
bridge1483 dos-protection-group groupName
no bridge1483 dos-protection-group
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.1.0.
Attaches a bridge 1483 denial of service (DoS) protection group to an interface. The
no version removes the attachment of the DoS protection group from the interface.
■
groupName—Name of the DoS protection group; string of up to 31 alphanumeric
characters
Interface Configuration
bridge1483 dos-protection-group
■
309
JUNOSe 11.0.x Command Reference Guide A to M
bridge1483 mtu
Syntax
bridge1483 mtu mtuSize
no bridge1483 mtu
Release Information
Description
Options
Mode
310
■
bridge1483 mtu
Command introduced in JUNOSe Release 7.3.0.
Sets the maximum allowable size, in bytes, of the maximum transmission unit (MTU)
for bridged Ethernet interfaces. The no version restores the default MTU size for
bridged Ethernet interfaces, 1518 bytes.
■
mtuSize—Maximum allowable size of the MTU, in the range 64–9180 bytes;
default value is 1518
Profile Configuration, Subinterface Configuration
Chapter 3: B Commands
bridge1483 service-profile
Syntax
Release Information
Description
Options
Mode
[ no ] bridge1483 service-profile profileName
Command introduced in JUNOSe Release 9.0.0.
Assigns the specified IP service profile to the interface profile from which a dynamic
bridged Ethernet interface is created. The IP service profile must be defined in the
default virtual router. The no version removes the IP service profile assignment from
the interface profile.
■
profileName—Name of the IP service profile; maximum of 32 alphanumeric
characters
Profile Configuration
bridge1483 service-profile
■
311
JUNOSe 11.0.x Command Reference Guide A to M
bridge
Syntax
Release Information
Description
[ no ] bridge bridgeGroupName
Command introduced before JUNOSe Release 7.1.0.
Creates a bridge group to use for transparent bridging. A bridge group is a named
collection of network interfaces (ports) on an E Series router that forms a broadcast
domain. Each bridge group has its own set of forwarding tables and filters and, as
such, functions as a logical bridging device. The no version removes the bridge group
configuration from the router.
To configure an existing bridge group as a VPLS instance, you must use the bridge
vpls transport-virtual-router command.
NOTE: Do not assign the bridge group the same name as an existing virtual router
configured on the router.
Options
Mode
312
■
bridge
■
bridgeGroupName—Name of the bridge group; string of up to 32 alphanumeric
characters
Global Configuration
Chapter 3: B Commands
bridge acquire
Syntax
Release Information
Description
[ no ] bridge { bridgeGroupName | vplsName } acquire
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Configures a bridge group or VPLS instance to acquire dynamically learned MAC
addresses. Issuing this command enables the router to forward any frames it receives
for nodes (stations) whose addresses it has learned dynamically. The no version
prevents the router or VPLS instance from acquiring dynamically learned MAC
addresses, and limits forwarding only to those nodes that have a statically configured
address entry in the forwarding table.
To configure the maximum number of MAC addresses that the router can learn, use
the bridge learn command (for a bridge group or VPLS instance) or the bridge-group
learn command (for a network interface associated with a bridge group or VPLS
instance).
Options
Mode
Related Topics
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
Global Configuration
■
Configuring Optional Attributes for VPLS Instances in the JUNOSe BGP and MPLS
Configuration Guide
bridge acquire
■
313
JUNOSe 11.0.x Command Reference Guide A to M
bridge address
Syntax
bridge { bridgeGroupName | vplsName } address macAddress
{ forward interfaceType interfaceSpecifier | discard }
no bridge { bridgeGroupName | vplsName } address macAddress
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Enables a bridge group or VPLS instance to filter (forward or discard) frames based
on their MAC address. Use this command to filter frames by a specific MAC address
and to add a static (nonlearned) entry to the forwarding table. The no version removes
the static MAC address entry from the forwarding table.
NOTE: For a VPLS instance, you cannot create a static (nonlearned) MAC address
entry to forward to the VPLS virtual core interface.
Options
Mode
314
■
bridge address
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
macAddress—Unique 48-bit (6-byte) number that is programmed into each LAN
network interface card (NIC) at the time of manufacture; also known as a
hardware address or physical address. The MAC address format is a dotted triple
of four-digit hexadecimal numbers; for example, 0090.1a40.4c7c
■
forward—Forwards frames destined for the specified MAC address out the
specified network interface
■
interfaceType—One of the following interface types listed in “Interface Types
and Specifiers” on page 5
■
atm
■
fastEthernet
■
gigabitEthernet
■
tenGigabitEthernet
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
discard—Discards (drops) frames sent from or destined for the specified MAC
address without further processing
Global Configuration
Chapter 3: B Commands
Related Topics
■
Configuring Optional Attributes for VPLS Instances in the JUNOSe BGP and MPLS
Configuration Guide
bridge address
■
315
JUNOSe 11.0.x Command Reference Guide A to M
bridge aging-time
Syntax
bridge { bridgeGroupName | vplsName } aging-time seconds
no bridge { bridgeGroupName | vplsName } aging-time
Release Information
Description
Options
Mode
Related Topics
316
■
bridge aging-time
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Sets the aging time of a dynamic (learned) entry in the forwarding table of a bridge
group or VPLS instance. The aging time is the length of time, in seconds, that an
entry can remain in the forwarding table. An entry expires from the forwarding table
when it reaches the specified aging time. The no version restores the default value,
300 seconds.
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
seconds—Aging time in the range 10–1000000 seconds
Global Configuration
■
Configuring Optional Attributes for VPLS Instances in the JUNOSe BGP and MPLS
Configuration Guide
Chapter 3: B Commands
bridge crb
Syntax
Release Information
Description
[ no ] bridge crb
Command introduced before JUNOSe Release 7.1.0.
Enables concurrent routing and bridging (CRB) for all bridge groups configured on
the router except those bridge groups configured as VPLS instances. When CRB is
enabled, the router can route a protocol among a group of interfaces in one bridge
group and concurrently bridge the same protocol among a separate group of interfaces
in a different bridge group on the router. The no version disables CRB on all bridge
groups and restores the default bridging capability.
The command takes effect for all bridge groups on the router not configured as VPLS
instances; you cannot enable CRB for some bridge groups but not for others.
Mode
Global Configuration
bridge crb
■
317
JUNOSe 11.0.x Command Reference Guide A to M
bridge-group
Syntax
bridge-group { bridgeGroupName | vplsName }
[ subscriber-trunk | snmp-trap link-status | learn addressCount ]
no bridge-group { bridgeGroupName | vplsName } [ subscriber-trunk | snmp-trap
link-status | learn ]
Release Information
Description
Options
Mode
Related Topics
318
■
bridge-group
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Assigns a network interface to a bridge group or VPLS instance. You can also use
this command to configure the type of interface, enable SNMP link-status processing
for the interface, and set the maximum number of dynamic MAC addresses that the
interface can learn. The no version removes the network interface from the bridge
group or VPLS instance and restores the default values for the interface type
(subscriber client interface), SNMP link-status processing (disabled), or number of
maximum learned MAC addresses (0 addresses).
■
bridgeGroupName—Name of the bridge group to which the interface belongs, as
specified with the bridge command
■
vplsName—Name of the VPLS instance to which the interface belongs, as specified
with the bridge vpls transport-virtual-router command
■
subscriber-trunk—Creates a trunk (server) interface in the bridge group or VPLS
instance; if you omit this keyword, the router creates a subscriber (client) interface
by default
■
snmp-trap link-status—Enables SNMP link-status processing only for the specified
interface in the bridge group or VPLS instance
■
addressCount—Maximum number of MAC addresses that the interface in the
bridge group or VPLS instance can learn, up to the maximum number that the
router supports, in the range 0–64000
Interface Configuration, Subinterface Configuration
■
Configuring VPLS Network Interfaces in the JUNOSe BGP and MPLS Configuration
Guide
Chapter 3: B Commands
bridge learn
Syntax
bridge { bridgeGroupName | vplsName } learn addressCount
no bridge { bridgeGroupName | vplsName } learn
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Sets the maximum number of dynamic MAC addresses that a bridge group or VPLS
instance can learn. The no version restores the default value, 0 (zero) learned
addresses. The default value implies that there is no maximum number of learned
entries for an individual bridge group or VPLS instance; that is, a bridge group or
VPLS instance can learn an unlimited number of MAC addresses, up to the maximum
number that the router supports.
To enable or disable the ability of a bridge group or VPLS instance to learn dynamic
MAC addresses, use the bridge acquire command.
NOTE: For information about the maximum number of learned MAC address entries
combined for all bridge groups and VPLS instances supported per chassis, see JUNOSe
Release Notes, Appendix A, System Maximums.
Options
Mode
Related Topics
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
addressCount—Maximum number of MAC addresses that the bridge group can
learn, in the range 0–64000
Global Configuration
■
Configuring Optional Attributes for VPLS Instances in the JUNOSe BGP and MPLS
Configuration Guide
bridge learn
■
319
JUNOSe 11.0.x Command Reference Guide A to M
bridge route
Syntax
Release Information
Description
[ no ] bridge bridgeGroupName route { ip | mpls | pppoe }
Command introduced before JUNOSe Release 7.1.0.
Enables routing of IP, MPLS, or PPPoE packets in a specified bridge group when
concurrent routing and bridging (CRB) is enabled for all bridge groups on the router.
The command uses the routing table entries to determine the path on which to send
the packet toward its final destination. The no version disables routing of the specified
protocol in the specified bridge group.
If you issue this command for a protocol that is not currently configured in the
interface stack for that bridge group, the bridge group discards (drops) those packets.
NOTE: The bridge route command is available for a bridge group only after you
issue the bridge crb command to enable CRB for all bridge groups on the router.
The bridge route command is not valid for bridge groups configured as VPLS
instances. If you attempt to issue the bridge route command for a VPLS instance,
the router displays an error message and rejects the command.
Options
Mode
320
■
bridge route
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
ip—Specifies that the bridge group routes IP packets
■
mpls—Specifies that the bridge group routes MPLS packets
■
pppoe—Specifies that the bridge group routes PPPoE packets
Global Configuration
Chapter 3: B Commands
bridge snmp-trap link-status
Syntax
Release Information
Description
Options
Mode
Related Topics
[ no ] bridge { bridgeGroupName | vplsName } snmp-trap link-status
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Enables SNMP link-status processing for all network interfaces associated with a
bridge group or VPLS instance. The no version disables SNMP link-status processing
for all interfaces in the bridge group or VPLS instance.
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
Global Configuration
■
Configuring Optional Attributes for VPLS Instances in the JUNOSe BGP and MPLS
Configuration Guide
bridge snmp-trap link-status
■
321
JUNOSe 11.0.x Command Reference Guide A to M
bridge subscriber-policy
Syntax
bridge { bridgeGroupName | vplsName } subscriber-policy subscriberPolicyName
no bridge { bridgeGroupName | vplsName } subscriber-policy
[ subscriberPolicyName ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Associates the subscriber (client) interfaces that belong to a bridge group or to a VPLS
instance with a nondefault subscriber policy. The no version removes the association
with the subscriber policy.
You cannot associate a nondefault subscriber policy with trunk (server) interfaces
that belong to a bridge group or to a VPLS instance. You also cannot associate a
nondefault subscriber policy with the VPLS virtual core interface, which acts as a
trunk interface. The VPLS virtual core interface represents all of the MPLS tunnels
from the router to the remote VPLS edge (VE) devices.
Options
Mode
322
■
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
subscriberPolicyName—Name of the subscriber policy specified with the
subscriber-policy command
Global Configuration
bridge subscriber-policy
Chapter 3: B Commands
bridge vpls rd
Syntax
bridge vplsName vpls rd routeDistinguisher
no bridge vplsName vpls rd
Release Information
Description
Command introduced in JUNOSe Release 7.1.0.
Specifies the unique two-part route distinguisher for a VPLS instance that uses BGP
as the signaling protocol. Because you cannot change or remove the route
distinguisher for a VPLS instance after you set it, issuing the no version fails, and
causes the router to display an error message.
The following rules apply when you configure the route distinguisher for a VPLS
instance:
■
After you set the route distinguisher for a VPLS instance, you cannot change it
for that VPLS instance. To change the route distinguisher, you must either remove
the transport virtual router configuration from the VPLS instance or delete the
VPLS instance from the router. You can then reconfigure the VPLS instance with
a new route distinguisher.
■
Multiple VPLS instances that use the same transport virtual router cannot have
the same route distinguisher. Conversely, multiple VPLS instances that use
different transport virtual routers can have the same route distinguisher.
The bridge vpls rd command is not valid for a VPLS instance that uses LDP as the
signaling protocol. To configure a VPLS instance with LDP signaling, use the mpls
ldp vpls vpls-id command and the mpls ldp vpls neighbor command.
NOTE: The bridge vpls rd command is available for a VPLS instance only after you
issue the bridge vpls transport-virtual-router command, which creates the VPLS
instance and configures the transport virtual router.
Options
Mode
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
routeDistinguisher—Unique two-part identifier in the format number1:number2,
where:
■
number1—Autonomous system (AS) number or an IP address
■
number2—Unique integer; 32 bits if number1 is an AS number; 16 bits if
number1 is an IP address
Global Configuration
bridge vpls rd
■
323
JUNOSe 11.0.x Command Reference Guide A to M
Related Topics
324
■
bridge vpls rd
■
Configuring VPLS Instances with BGP Signaling in the JUNOSe BGP and MPLS
Configuration Guide
Chapter 3: B Commands
bridge vpls route-target
Syntax
Release Information
Description
[ no ] bridge vplsName vpls route-target { import | export | both } extendedCommunity
Command introduced in JUNOSe Release 7.1.0.
Creates or adds to a list of VPN extended communities that the router uses to
determine which routes are imported by a VPLS instance that uses BGP as the
signaling protocol. The no version removes a route target from the specified list.
A route is imported into the BGP address family for a specified VPLS instance when
both of the following conditions are met:
■
An update message with a route-target export list advertises a route.
■
That list contains at least one route target that matches a route target in the
route-target import list associated with a VPLS instance.
The bridge vpls route-target command is not valid for a VPLS instance that uses
LDP as the signaling protocol. To configure a VPLS instance with LDP signaling, use
the mpls ldp vpls vpls-id command and the mpls ldp vpls neighbor command.
NOTE: The bridge vpls route-target command is available for a VPLS instance only
after you issue the bridge vpls transport-virtual-router command, which creates the
VPLS instance and configures the transport virtual router.
Options
Mode
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
import—Adds the route target to the specified VPLS instance's import list; the
VPLS instance accepts only routes that have at least one route target that matches
a route target in the import list
■
export—Adds the route target to the specified VPLS instance's export list; all
routes advertised from this VPLS instance are associated with the export list
■
both—Adds the route target to both the import list and export list of the specified
VPLS instance. This is the recommended setting for a VPLS instance
■
extendedCommunity—Two-part number in the format number1:number2 that
identifies an extended community of VPNs, where:
■
number1—Autonomous system (AS) number or an IP address
■
number2—Unique integer; 32 bits if number1 is an AS number; 16 bits if
number1 is an IP address
Global Configuration
bridge vpls route-target
■
325
JUNOSe 11.0.x Command Reference Guide A to M
Related Topics
326
■
■
Configuring VPLS Instances with BGP Signaling in the JUNOSe BGP and MPLS
Configuration Guide
bridge vpls route-target
Chapter 3: B Commands
bridge vpls site-name site-id
Syntax
[ no ] bridge vplsName vpls site-name siteName site-id siteId
[ multi-homed priority priority ]
Release Information
Command introduced in JUNOSe Release 7.1.0.
multi-homed priority keywords and priority variable added in JUNOSe Release 9.3.0.
Description
Configures a customer site name and a unique site identifier that belongs to the
specified VPLS instance that uses BGP as the signaling protocol. Optionally configures
the site to be multihomed. In a VPLS configuration, each customer site is represented
by a customer edge (CE) device located at the edge of the customer’s network. The
router (VPLS edge device, also known as VE router) communicates with the customer
site by means of a bridge network interface connection to the CE device. The no
version removes the site name and site identifier from the VPLS instance, or removes
the multihomed configuration for the customer site and returns it to a single-homed
state.
The bridge vpls site-name site-id command is not valid for a VPLS instance that
uses LDP as the signaling protocol. To configure a VPLS instance with LDP signaling,
use the mpls ldp vpls vpls-id command and the mpls ldp vpls neighbor command.
NOTE: The bridge vpls site-name site-id command is available for a VPLS instance
only after you issue the bridge vpls transport-virtual-router command, which creates
the VPLS instance and configures the transport virtual router.
Options
Mode
Related Topics
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
siteName—Name of the site; string of up to 128 alphanumeric characters
■
siteId—Numerical identifier for the site; must be an unsigned 16-bit integer
greater than zero that is unique across the VPLS domain associated with the
VPLS instance
■
priority—Number that sets the priority of this VPLS instance for a multi-homed
site, in the range 1–65535; priority is sent in BGP advertisements as the
Local-Preference attribute and determines whether the router hosting the VPLS
instance becomes the designated VE router for this multihomed site
Global Configuration
■
Configuring VPLS Instances with BGP Signaling in the JUNOSe BGP and MPLS
Configuration Guide
bridge vpls site-name site-id
■
327
JUNOSe 11.0.x Command Reference Guide A to M
bridge vpls site-range
Syntax
bridge vplsName vpls site-range siteRange
no bridge vplsName vpls site-range
Release Information
Description
Command introduced in JUNOSe Release 7.1.0.
Configures the maximum number of customer sites that can participate in the
specified VPLS domain that uses BGP as the signaling protocol. In a VPLS
configuration, each customer site is represented by a customer edge (CE) device
located at the edge of the customer's network. The router (VPLS edge device)
communicates with the customer site by means of a bridge network interface
connection to the CE device. The no version restores the default site range, 1.
The bridge vpls site-range command is not valid for a VPLS instance that uses LDP
as the signaling protocol. To configure a VPLS instance with LDP signaling, use the
mpls ldp vpls vpls-id command and the mpls ldp vpls neighbor command.
NOTE: The bridge vpls site-range command is available for a VPLS instance only
after you issue the bridge vpls transport-virtual-router command, which creates the
VPLS instance and configures the transport virtual router.
Options
Mode
Related Topics
328
■
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
siteRange—Maximum number of sites that can participate in the VPLS domain,
in the range 1–65534; default value is 1
Global Configuration
■
bridge vpls site-range
Configuring VPLS Instances with BGP Signaling in the JUNOSe BGP and MPLS
Configuration Guide
Chapter 3: B Commands
bridge vpls transport-virtual-router
Syntax
bridge vplsName vpls transport-virtual-router virtualRouterName
no bridge vplsName vpls transport-virtual-router
Release Information
Description
Command introduced in JUNOSe Release 7.1.0.
Configures the transport virtual router for a VPLS instance that uses either BGP or
LDP as the signaling protocol. Issuing this command creates a new VPLS instance
on the router or causes an existing bridge group to become a VPLS instance. The no
version removes the VPLS instance from the router and clears any attributes
configured for the deleted VPLS instance.
A VPLS instance is a single instance of the virtual private LAN service (VPLS). VPLS
employs a layer 2 virtual private network (VPN) to connect multiple individual LANs
across a service provider's MPLS network. The multiple LANs function as a single
virtual LAN.
The transport virtual router specifies the name of the virtual router on which the BGP
or LDP instance that signals reachability for this VPLS instance is configured.
To create a new VPLS instance or configure an existing bridge group as a VPLS
instance, you must issue the bridge vpls transport-virtual-router command before
you issue any other commands to configure VPLS attributes; otherwise, the VPLS
configuration fails.
Options
Mode
Related Topics
■
vplsName—Name of the new VPLS instance, or name of an existing bridge group
specified with the bridge command that you want to configure as a VPLS instance;
string of up to 32 alphanumeric characters
■
virtualRouterName—Name of the virtual router on which the BGP or LDP instance
that signals reachability for this VPLS instance is configured
Global Configuration
■
Configuring VPLS Instances with BGP Signaling and Configuring VPLS Instances
with LDP Signaling in the JUNOSe BGP and MPLS Configuration Guide
bridge vpls transport-virtual-router
■
329
JUNOSe 11.0.x Command Reference Guide A to M
broadcast
Syntax
broadcast { permit | deny }
no broadcast
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Modifies the subscriber policy for the broadcast protocol to define whether the
subscriber (client) interfaces that belongs to a bridge group or to a VPLS instance
forward (permit) or filter (deny) broadcast packets. The no version restores the default
value, deny broadcast packets.
You cannot change the default subscriber policy values for trunk (server) interfaces
that belongs to a bridge group or to a VPLS interface. You also cannot change the
default subscriber policy values for a VPLS virtual core interface, which acts as a
trunk interface. The VPLS virtual core interface represents all of the MPLS tunnels
from the router to the remote VPLS edge (VE) device.
Options
Mode
330
■
broadcast
■
permit—Specifies that the subscriber interface associated with the bridge group
or VPLS instance forwards broadcast packets
■
deny—Specifies that the subscriber interface associated with the bridge group
or VPLS instance filters broadcast packets
Subscriber Policy Configuration
Chapter 3: B Commands
buffer-weight
Syntax
buffer-weight bufferWeight
no buffer-weight
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Sets the buffer weight of the queue. The no version returns the queue to its default
buffer weight.
■
bufferWeight—Range 1–63; default value is 8
Queue Profile Configuration
■
Configuring Queue Profiles to Manage Buffers and Thresholds
buffer-weight
■
331
JUNOSe 11.0.x Command Reference Guide A to M
bulkstats
Syntax
Description
Mode
332
■
bulkstats
no bulkstats
This command has only a no version. See the no bulkstats command for a complete
description.
Router Configuration
Chapter 3: B Commands
bulkstats collector
Syntax
bulkstats collector collectorIndex
[ collect-mode { auto-xfer | on-file-full | manual-xfer } | description descrip |
interval intrvl | max-size maxSize | primary-receiver primRecvIndex |
secondary-receiver secRecvIndex | single-interval ]
no bulkstats collector collectorIndex [ collect-mode | description | interval | max-size
|primary-receiver | secondary-receiver | single-interval ]*
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Creates and configures a collector of bulk statistical data to collect MIB-2 ifTable MIB
objects. You can configure up to six collectors. The no version restores the default
value for specified options; if no options are specified, the no version deletes the
collector.
■
collectorIndex—Number in the range 1–65535 that identifies the particular data
collector
■
collect-mode—Specifies one of the following collection modes:
■
auto-xfer—Agent automatically transfers file when interval expires
■
on-file-full—Agent automatically transfers file when it is full
■
manual-xfer—Router or user-initiated transfers; default collection mode
■
descrip—Descriptive information to insert into the bulkstats file
■
intrvl—Time period in the range 300– 86400 seconds for which the collector
transfers data from the router to the receivers; default interval is 360 seconds
■
maxSize—Maximum size of the file in the range 10240–20971520 bytes; default
file size is 2,621,440 bytes
■
primRecvIndex—Number in the range 1–65535 that identifies the primary receiver
to which the router transfers the data; by default the primary receiver is cleared
■
secRecvIndex—Number in the range 1–65535 that identifies the secondary
(backup) receiver to which the router transfers the data; by default the secondary
receiver is cleared
■
single-interval—Specifies that the collector retrieves the bulk statistics data only
once; by default, the collector receives the data periodically
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
bulkstats collector
■
333
JUNOSe 11.0.x Command Reference Guide A to M
bulkstats file-format endOfLine-LF
Syntax
Release Information
Description
Mode
334
■
[ no ] bulkstats file-format endOfLine-LF
Command introduced before JUNOSe Release 7.1.0.
Removes the carriage return (CR) and leaves only a line feed (LF) at the end of each
line in the bulkstats file. The no version returns the end of line format to the default,
CR and LF.
Global Configuration
bulkstats file-format endOfLine-LF
Chapter 3: B Commands
bulkstats interfaces description-format common
Syntax
Release Information
Description
Mode
[ no ] bulkstats interfaces description-format common
Command introduced before JUNOSe Release 7.1.0.
Enables the conventional industry method of encoding the SNMP ifDescr object that
the bulkstats application reports. The no version returns the encoding method to a
proprietary encoding scheme.
Global Configuration
bulkstats interfaces description-format common
■
335
JUNOSe 11.0.x Command Reference Guide A to M
bulkstats interfaces rfc1213
Syntax
Release Information
Description
Mode
336
■
[ no ] bulkstats interfaces rfc1213
Command introduced before JUNOSe Release 7.1.0.
Enables RFC 1213 interface numbering mode on bulkstats. The no version disables
RFC 1213 interface numbering mode on bulkstats.
Global Configuration
bulkstats interfaces rfc1213
Chapter 3: B Commands
bulkstats interface-type
Syntax
[ no ] bulkstats interface-type interfaceType [ interfaceSpecifier ]*
[ collector collectorIndex ]
Release Information
Command introduced before JUNOSe Release 7.1.0.
mplsL2shim, mplsMajor, and mplsMinor keywords added in JUNOSe Release 8.2.0.
Description
Configures the interface type on which you want to collect statistics. The no version
deletes the interface type from bulkstats collection.
Options
Mode
■
interfaceType—One of the following interface types for which you can collect
statistics: ATM, ATM 1483, Ethernet, Frame Relay, Frame Relay subinterface,
Cisco HDLC, IP, MPLS minor, MPLS major, MPLS shim, PPP, VLAN subinterface
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
■
collectorIndex—Number in the range 1–65535 that identifies the particular data
collector. Always specify this option if you defined more than one collector.
Global Configuration
bulkstats interface-type
■
337
JUNOSe 11.0.x Command Reference Guide A to M
bulkstats receiver remote-name
Syntax
bulkstats receiver receiverIndex remote-name remoteName.sts
[ receiverAttrib [ receiverAttrib ]* ]
no bulkstats receiver receiverIndex [ remote-name remoteName ]
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Configures the bulk statistics receiver parameters. The no version deletes the receiver.
■
receiverIndex—Number in the range 1–65535 that identifies the receiver of the
data
■
remoteName—Composed of the remote host, path, filename, and formatters;
include a .sts filename extension
■
receiverAttrib—One of the following dynamic attributes
■
Mode
338
■
■
sysName—Inserts the router name into the stored remote filename
■
sysUpTime—Inserts the router up time into the stored remote filename
■
collectorSequence—Inserts a sequence number into the stored remote
filename
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
bulkstats receiver remote-name
Chapter 3: B Commands
bulkstats schema
Syntax
bulkstats schema schemaIndex [ collector collectorIndex ]
no bulkstats schema schemaIndex
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures the schema for collecting bulk statistics. The no version removes the
schema.
■
schemaIndex—Identifier for the schema in the range 1–65535
■
collectorIndex—Identifier for the collector in the range 1–65535
Global Configuration
bulkstats schema
■
339
JUNOSe 11.0.x Command Reference Guide A to M
bulkstats schema subtree
Syntax
bulkstats schema schemaIndex subtree
{ if-stack | if-stats { subtreelist [ ifstatsList [ ifstatsList ]* ] |
if-create-delete-time-stats interfaceType interfaceType } | igmp | system }
bulkstats schema schemaIndex subtree
{ if-stack | if-stats | igmp [ subtreelist igmpList [ igmpList ]* ] | system }
no bulkstats schema schemaIndex
Release Information
Command introduced before JUNOSe Release 7.1.0.
mplsL2shim, mplsMajor, and mplsMinor keywords added in JUNOSe Release 8.2.0.
Description
Configures the schema for collecting if-stack, if-stats, or router data. The no version
removes the schema.
Options
Mode
340
■
■
schemaIndex—Identifier for the schema in the range 1–65535
■
if-stack—Retrieves ifStackTable
■
if-stats—Retrieves ifTable/ifXTable counters
■
ifstatsList—Type of statistics and time-offset keyword, which includes the offset
from the master interval at which the record was collected in each bulkstats
interface record
■
if-create-delete-time-stats—Retrieves interface final statistics (interface statistics
that may be lost during higher create or delete frequency)
■
interfaceType—One of the following interface types for which you can collect
statistics: ATM 1483, IP, MPLS minor, MPLS major, MPLS shim, PPP
■
igmp—Retrieves IGMP statistics
■
igmpList—Type of statistics and time-offset keyword, which includes the offset
from the master interval at which the record was collected in each bulkstats
interface record
■
system—Retrieves sysUpTime and nvsUtilPct global statistics; retrieves slotDescr,
the cpuUtilPct, and memUtilPct per-slot statistics
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
bulkstats schema subtree
Chapter 3: B Commands
bulkstats schema subtree policy
Syntax
bulkstats schema schemaIndex subtree policy [ policy-name policyName ]
[ policy-type policyType ] [ policy-subtreelist policyList [ policyList ]* ]
no bulkstats schema schemaIndex
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures the schema to collect statistics on a specific policy, a type of policy, or
based on color-coded tags applied by a policy. The no version removes the schema.
■
schemaIndex—Identifier for the schema in the range 1–65535
■
policyName—Name of policy for which you want to collect statistics
■
policyType—Select one of the following types:
■
input—Collect data on input policies
■
localInput—Collect data on local input policies
■
output—Collect data on output policies
■
policyList —Retrieves statistics based on color-coded tags applied by a policy
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
bulkstats schema subtree policy
■
341
JUNOSe 11.0.x Command Reference Guide A to M
bulkstats traps
Syntax
bulkstats traps { nearly-full [ threshold ] | full }
no bulkstats traps { nearly-full | full }
Release Information
Description
Options
Mode
342
■
bulkstats traps
Command introduced before JUNOSe Release 7.1.0.
Configures the bulkstats traps. The no version disables the trap.
■
nearly-full—Specifies a percentage less than 100 percent
■
threshold—Percentage less than 100 percent; if not specified, defaults to
99 percent
■
full—100 percent
Global Configuration
Chapter 3: B Commands
bulkstats virtual-router-group
Syntax
Release Information
Description
Options
Mode
[ no ] bulkstats virtual-router-group collector collectorindex VRnames
Command introduced in JUNOSe Release 7.1.0.
Configures the bulkstats for virtual router groups. The no version prevents bulkstats
from being reported for virtual router groups.
■
virtual-router-group—Specifies the name or unique index number that contains
from 1 to the maximum number of routers supported in the system
■
collectorIndex—Number that identifies the particular data collector, in the range
1–65535
■
VRnames—List of virtual router names
Global Configuration
bulkstats virtual-router-group
■
343
JUNOSe 11.0.x Command Reference Guide A to M
bundled-group-id
Syntax
Release Information
Description
[ no ] bundled-group-id bundledGroupID
Command introduced before JUNOSe Release 7.1.0.
Assigns a bundled group identifier when no endpoint discriminator is available for
bundled sessions using an L2TP destination host profile. When multiple tunnel-service
modules are installed in a router that is deployed as an LNS and the tunnel sessions
carry MLPPP, the router can use the bundled group identifier when selecting a
tunnel-service module for bundled sessions. The no version restores the default value,
no assigned bundled group identifier.
NOTE: We recommend that you assign a bundled group identifier for bundled sessions
only when you are certain that endpoint discriminators are unavailable to identify
bundle membership.
Options
Mode
344
■
bundled-group-id
■
bundledGroupID—Identifier for a bundled group in the range 0–4294967295
L2TP Destination Profile Host Configuration
Chapter 3: B Commands
bundled-group-id-overrides-mlppp-ed
Syntax
Release Information
Description
[ no ] bundled-group-id-overrides-mlppp-ed
Command introduced before JUNOSe Release 7.1.0.
Specifies that the router uses the bundled group identifier you assigned using the
bundled-group-id command when selecting a tunnel-service module instead of any
endpoint discriminator. The no version removes the override.
NOTE: We strongly recommend that you use this command only with the support
of JTAC.
Mode
L2TP Destination Profile Host Configuration
bundled-group-id-overrides-mlppp-ed
■
345
JUNOSe 11.0.x Command Reference Guide A to M
346
■
bundled-group-id-overrides-mlppp-ed
Chapter 4
C Commands
■
347
JUNOSe 11.0.x Command Reference Guide A to M
cache entries
Syntax
cache entries entryNumber
no cache entries
Release Information
Description
Options
Mode
348
■
cache entries
Command introduced in JUNOSe Release 8.1.0.
Sets the number of entries in the aggregation cache. The no version sets the number
of entries to the default value.
■
entryNumber—Number of entries in the aggregation cache in the range
1024—524288; default value is 4096
Flow Cache Configuration
Chapter 4: C Commands
cache timeout
Syntax
cache timeout { active activeTimer | inactive inactiveTimer }
no cache timeout
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.1.0.
Sets the active and inactive aging timers. The no version resets the default values.
■
activeTimer—Active aging timer in the range 1—60
■
inactiveTimer—Inactive aging timer in the range 10—600
Flow Cache Configuration
cache timeout
■
349
JUNOSe 11.0.x Command Reference Guide A to M
cablelength
Syntax
cablelength length
no cablelength
Release Information
Description
Options
Mode
350
■
cablelength
Command introduced before JUNOSe Release 7.1.0.
Specifies the length of the cable, which determines power requirements. The no
version uses the default value, 0 feet.
■
length —Cable length in the range 0–450 feet
Controller Configuration
Chapter 4: C Commands
cbr
Syntax
cbr pcr
no cbr
Release Information
Description
Command introduced in JUNOSe Release 7.1.0.
ATM VC Class Configuration mode added in JUNOSe Release 7.3.0.
In ATM VC Configuration mode, configures the constant bit rate (CBR) service category
on an ATM PVC. You must specify the peak cell rate (PCR) value. The cbr command
is valid only for data PVCs; you cannot use this command for control (ILMI or
signaling) PVCs. The no version restores the default service category, unspecified bit
rate (UBR) without a PCR.
In ATM VC Class Configuration mode, configures the CBR service category as part
of a VC class definition that you assign to an ATM data PVC. The no version restores
the default service category, UBR without a PCR, in the VC class.
Options
Mode
■
pcr—Peak cell rate, in Kbps, in the range 1–149760 (for OC3 ATM modules) or
1–599040 (for OC12 ATM modules)
ATM VC Configuration, ATM VC Class Configuration
cbr
■
351
JUNOSe 11.0.x Command Reference Guide A to M
channelized
Syntax
Release Information
Description
Mode
352
■
channelized
[ no ] channelized
Command introduced before JUNOSe Release 7.1.0.
Configures a port on the CT3/T3-F0 line module and associated I/O module to support
channelized T3 operation. The no version configures the port for unchannelized
operation.
Controller Configuration
Chapter 4: C Commands
check-disk
Syntax
Release Information
Description
Options
Mode
check-disk [ repair ] [ disk0 | disk1 ]
Command introduced before JUNOSe Release 7.1.0.
disk0 and disk1 keywords added in JUNOSe Release 7.2.0.
Privileged Exec mode added in JUNOSe Release 8.0.0.
Finds and repairs structural inconsistencies and damage in the DOS file system in
unmounted flash cards on the primary SRP module. There is no no version.
■
disk0—Specifies flash card in slot 0 of the SRP module; default value is disk0;
available only in Boot mode, because disk0 cannot be in an unmounted state in
a router outside of Boot mode
■
disk1—Specifies flash card in slot 1 of the SRP module; supported only on the
E120 router and the E320 router
Boot, Privileged Exec
check-disk
■
353
JUNOSe 11.0.x Command Reference Guide A to M
check-vpn-next-hops
Syntax
Release Information
Description
Mode
354
■
[ no ] check-vpn-next-hops
Command introduced before JUNOSe Release 7.1.0.
Enables a BGP speaker to take the reachability of the next hop on received VPNv4
or VPNv6 routes into account when it determines the best route to a prefix. Checking
the reachability is disabled by default. The no version explicitly disables reachability
checking.
Address Family Configuration
check-vpn-next-hops
Chapter 4: C Commands
classifier-group
Syntax
classifier-group { * | classifierName } [ precedence precValue ] [ parent-group
parentGroupName ] [ external parent-group externalParentGroupName
parameter parameterName ]
no classifier-group { * | classifierName ]
Release Information
Command introduced before JUNOSe Release 7.1.0.
parent-group keyword and parentGroupName variable added in JUNOSe Release 7.2.0.
external parent-group keyword and externalParentGroupName variable added in
JUNOSe Release 8.0.0.
Description
Creates a classifier group for a policy list and assigns precedence to the specific
CLACL in the group. This command accesses Classifier Group Configuration mode,
in which you create policy rule configurations related to the specified CLACL. If a
parent group was not created by the parent-group command, the parent-group
keyword creates a parent group in a rate-limit hierarchy for IP, IPv6, L2TP, and MPLS.
All packets matching the classifier are sent to the parent group for further processing,
except for packets dropped by the classifier using the filter rule. More than one
classifier group can have the same parent group, which enables you to create
hierarchies. The no version removes the classifier group and its rules from the policy
list.
Options
■
*—Specifies that the router selects all packets from the interface associated with
the policy list for this classifier group
■
classifierName—Name of a specific CLACL used to classify packets in this policy
list
■
precValue—Precedence value for the CLACL, in the range 0–65535; a value of
100 is assigned if no value is specified
■
parentGroupName—Name of the parent group; if the parent group does not exist,
naming the parent group creates an empty parent group
NOTE: Secure policy lists, which are used for packet mirroring operations, do not
support named classifier groups. You must use classifier-group *. Also, secure policy
lists do not support the precedence keyword.
Mode
Related Topics
■
externalParentGroupName—External parent group name
■
parameterName—Parameter name
Policy List Configuration
■
Creating a Classifier Group for a Policy List
classifier-group
■
355
JUNOSe 11.0.x Command Reference Guide A to M
■
356
■
classifier-group
Configuring CLI-Based Mirroring
Chapter 4: C Commands
class-int
Syntax
class-int vcClassName
no class-int [ vcClassName ]
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.3.0.
When issued from Interface Configuration mode, assigns a previously configured VC
class to an ATM major interface. When issued from Subinterface Configuration mode,
assigns a previously configured VC class to a static ATM 1483 subinterface. Issuing
this command applies the set of attributes in the specified VC class to the ATM data
PVCs statically or dynamically created on the ATM major interface or ATM 1483
subinterface. The no version removes the VC class association with the interface or
subinterface, and causes the router to set the PVC attributes to their systemwide
default values, or to the values set in the associated VC class with the next highest
order of precedence.
■
vcClassName—Name of the VC class configured with the vc-class atm command
Interface Configuration, Subinterface Configuration
class-int
■
357
JUNOSe 11.0.x Command Reference Guide A to M
class-vc
Syntax
class-vc vcClassName
no class-vc [ vcClassName ]
Release Information
Description
Options
Mode
358
■
class-vc
Command introduced in JUNOSe Release 7.3.0.
Assigns a previously configured VC class to an individual ATM data PVC. The class-vc
command is valid only for data PVCs created with the pvc command; it has no effect
for data PVCs created with the atm pvc command, or for control (ILMI or signaling)
PVCs. Issuing this command applies the set of attributes in the specified VC class to
the ATM data PVC. The no version removes the VC class association with the ATM
PVC.
■
vcClassName—Name of the VC class configured with the vc-class atm command
ATM VC Configuration
Chapter 4: C Commands
cleanup-timeout-factor
Syntax
cleanup-timeout-factor lostRefreshes
no cleanup-timeout-factor
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the number of refresh messages that can be lost before the PATH or RESV
state is ended. The no version restores the default value, 3.
■
lostRefreshes—Number of lost refresh messages
RSVP Profile Configuration
cleanup-timeout-factor
■
359
JUNOSe 11.0.x Command Reference Guide A to M
clear access-list
Syntax
Release Information
Description
Options
Mode
360
■
clear access-list
clear access-list [ accessListName ]
Command introduced before JUNOSe Release 7.1.0.
Clears counters for entries in IP access lists. There is no no version.
■
accessListName—Name of the access list; string of 1–32 alphanumeric characters
Privileged Exec
Chapter 4: C Commands
clear arp
Syntax
Release Information
Description
Options
Mode
clear [ ip ] arp [ vrf vrfName ] { ipAddress interfaceType interfaceSpecifier | * }
Command introduced before JUNOSe Release 7.1.0.
Clears entries from the ARP cache. There is no no version.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
ipAddress—IP address in 32-bit dotted-decimal format of the entry to be cleared
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
*—Clears all dynamic ARP entries
Privileged Exec
clear arp
■
361
JUNOSe 11.0.x Command Reference Guide A to M
clear bfd adapted-intervals
Syntax
Release Information
Description
Mode
362
■
clear bfd adapted-intervals
Command introduced in JUNOSe Release 7.3.0.
Resets adapted timer intervals for all BFD sessions on the router. There is no no
version.
Global Configuration
clear bfd adapted-intervals
Chapter 4: C Commands
clear bfd session
Syntax
Release Information
Description
Options
Mode
clear bfd session [ address ipAddress | discriminator discriminatorID ]
Command introduced before JUNOSe Release 7.1.0.
Restarts all BFD sessions or a specified BFD session. There is no no version.
■
ipAddress—IP address of the destination to which the session has been established
■
discriminatorID—Unique system-wide identifier for the BFD session; integer in
the range 1–4294967295
Privileged Exec, User Exec
clear bfd session
■
363
JUNOSe 11.0.x Command Reference Guide A to M
clear bgp ipv6
Syntax
Release Information
Description
Options
Mode
364
■
clear bgp ipv6
clear bgp ipv6 [ unicast | multicast | vpnv6 | route-target signaling ]
[ ipAddress | ipv6Address | peer-group peerGroupName | * ] [ vrf vrfName ]
[ soft [ in | out ] ]
Command introduced before JUNOSe Release 7.1.0.
ipv6Address variable added in JUNOSe Release 8.0.0.
route-target signaling keywords added in JUNOSe Release 8.2.0.
Resets the IPv6 BGP session. If the soft option is not used, brings down the underlying
TCP connection and then brings it back up again, causing both peers to resend their
complete BGP routing table. If the soft out option is used, the BGP speaker reapplies
outbound policy and resends all routes to the specified peer(s). If the soft in option
is used, the BGP speaker reapplies inbound policy to the routes received from the
specified peers. This is possible only if soft reconfiguration inbound has been enabled
for the peer or the peer supports the route-refresh capability. There is no no version.
■
unicast—Clears the unicast routing table; the default option
■
multicast—Clears the multicast routing table
■
vpnv6—Clears the VPNv6 unicast routing and forwarding table
■
route-target signaling—Clears the route-target membership information
■
ipAddress—IP address of identified BGP neighbor to clear
■
ipv6Address—IPv6 address of identified BGP neighbor to clear
■
peerGroupName—Name of a BGP peer group to clear
■
*—Clears all connections
■
vrfName—Name of a virtual routing and forwarding instance to clear
■
soft—Specifies soft reconfiguration
■
in—Triggers inbound soft reconfiguration
■
out—Triggers outbound soft reconfiguration
Privileged Exec
Chapter 4: C Commands
clear bgp ipv6 dampening
Syntax
To clear IPv6-specific information for only the route-target address family:
clear bgp ipv6 route-target signaling
{ dampening | flap-statistics } [ rtfPrefix | rtfAddress ]
To clear IPv6-specific information for any case other than for the route-target address
family:
clear bgp ipv6 [ vrf vrfName ] [ unicast | multicast | vpnv6 ]
{ dampening | flap-statistics } [ ipv6Prefix ]
Release Information
Command introduced before JUNOSe Release 7.1.0.
route-target signaling keywords and rtMemNlri variable added in JUNOSe Release
8.2.0.
rtMemNlri variable replaced by two variables, rtfAddress and rtfPrefix, in JUNOSe
Release 9.1.0.
Description
Clears IPv6-specific BGP route flap dampening information and reinstates the
suppressed routes. If the ipv6Prefix option is not used, clears the entire IPv6 BGP
routing table. The dampening keyword and the flap-statistics keyword both have
the same effect. There is no no version.
Options
■
route-target signaling—Clears the route-target membership information
■
rtfPrefix—Prefix representing the route-target membership NLRI (RT-MEM-NLRI),
in the format asNumber : extendedCommunity / prefixLength (for example,
320:320:524/36) where:
■
asNumber—AS number for origin of route target information, in the range
1–4294967295
■
extendedCommunity—Two-part number in the format number1:number2 that
identifies an extended community of VPNs, in the format number1 : number2,
where:
■
number1—Autonomous system (AS) number, in the range 1–4294967295,
or an IP address
■
number2—Unique integer, in the range 1–4294967295; 32 bits if number1
is a 16-bit AS number; 16 bits if number1 is an IP address or a 32-bit AS
number
■
prefixLength—Number that specifies the length of the route prefix, in the
range 32–96
■
rtfAddress—rtfPrefix with a prefix length of 96; representing the route-target
membership NLRI (RT-MEM-NLRI), in the format asNumber: extendedCommunity
(for example, 320:320:524 or 320:50.2.3.4:524)
■
vrfName—Name of a virtual routing and forwarding instance to clear
clear bgp ipv6 dampening
■
365
JUNOSe 11.0.x Command Reference Guide A to M
Mode
366
■
■
unicast—Clears the unicast routing table; the default option
■
multicast—Clears the multicast routing table
■
vpnv6—Clears the VPNv6 unicast routing and forwarding table
■
ipv6Prefix—IPv6 network for which to clear dampening information
Privileged Exec
clear bgp ipv6 dampening
Chapter 4: C Commands
clear bgp ipv6 dynamic-peers
Syntax
Release Information
Description
Options
Mode
clear bgp ipv6 [ ipAddress | ipv6Address | peer-group peerGroupName | * ]
[ vrf vrfName ] dynamic-peers
Command introduced before JUNOSe Release 7.1.0.
ipv6Address variable added in JUNOSe Release 8.0.0.
Removes all IPv6-specific dynamic peers in the specified scope. There is no no
version.
■
ipAddress—IP address of identified BGP neighbor to clear
■
ipv6Address—IPv6 address of identified BGP neighbor to clear
■
peerGroupName—Name of a BGP peer group to clear
■
*—Clears all connections
■
vrfName—Name of a virtual routing and forwarding instance to clear
Privileged Exec
clear bgp ipv6 dynamic-peers
■
367
JUNOSe 11.0.x Command Reference Guide A to M
clear bgp ipv6 redistribution
Syntax
Release Information
Description
Options
Mode
368
■
clear bgp ipv6 [ unicast | multicast ] redistribution
Command introduced before JUNOSe Release 7.1.0.
Clears all IPv6 routes that have been redistributed into BGP. There is no no version.
■
unicast—Clears the unicast routing table; the default option
■
multicast—Clears the multicast routing table
Privileged Exec
clear bgp ipv6 redistribution
Chapter 4: C Commands
clear bgp ipv6 wait-end-of-rib
Syntax
Release Information
Description
Options
Mode
clear bgp ipv6 [ unicast | multicast | vpnv6 | route-target signaling ] [ vrf vrfName ]
[ ipAddress | ipv6Address | peer-group peerGroupName | * ] wait-end-of-rib
Command introduced before JUNOSe Release 7.1.0.
ipv6Address variable added in JUNOSe Release 8.0.0.
route-target signaling keywords added in JUNOSe Release 8.2.0.
Resets the IPv6 BGP session and brings down the underlying TCP connection and
then brings it back up again, causing both peers to resend their complete BGP routing
table. Clears the specified peer from the set of peers for which BGP is waiting to
receive an End-of-RIB marker after a peer restart. Hard clearing a peer has the same
effect for that peer. There is no no version.
■
unicast—Clears the unicast routing table; the default option
■
multicast—Clears the multicast routing table
■
vpnv6 —Clears the VPNv6 unicast routing and forwarding table
■
route-target signaling—Clears the route-target membership information
■
vrfName—Name of a virtual routing and forwarding instance to clear
■
ipAddress—IP address of identified BGP neighbor to clear
■
ipv6Address—IPv6 address of identified BGP neighbor to clear
■
peerGroupName—Name of a BGP peer group to clear
■
*—Clears all connections
Privileged Exec
clear bgp ipv6 wait-end-of-rib
■
369
JUNOSe 11.0.x Command Reference Guide A to M
clear bridge
Syntax
Release Information
Description
Options
Mode
Related Topics
370
■
clear bridge
clear bridge { bridgeGroupName | vplsName }
Command introduced before JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Removes all dynamic (learned) MAC address entries from the forwarding table for
the specified bridge group or VPLS instance . There is no no version.
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
Privileged Exec
■
Clearing Dynamic MAC Addresses from the VPLS Forwarding Table in the JUNOSe
BGP and MPLS Configuration Guide
Chapter 4: C Commands
clear bridge address
Syntax
Release Information
Description
Options
Mode
Related Topics
clear bridge { bridgeGroupName | vplsName } address macAddress
Command introduced in JUNOSe Release 7.1.0.
vplsName variable added in JUNOSe Release 7.1.0.
Removes a specific dynamic (learned) MAC address entry from the forwarding table
for the specified bridge group or VPLS instance. There is no no version.
■
bridgeGroupName—Name of a bridge group specified with the bridge command
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
■
macAddress—Unique 48-bit (6-byte) number that is programmed into each LAN
network interface card (NIC) at the time of manufacture; also known as a
hardware address or physical address. The MAC address format is a dotted triple
of four-digit hexadecimal numbers; for example, 0090.1a40.4c7c
Privileged Exec
■
Clearing Dynamic MAC Addresses from the VPLS Forwarding Table in the JUNOSe
BGP and MPLS Configuration Guide
clear bridge address
■
371
JUNOSe 11.0.x Command Reference Guide A to M
clear bridge interface
Syntax
clear bridge interface interfaceType interfaceSpecifier
Release Information
Command introduced before JUNOSe Release 7.1.0.
Description
Removes from the forwarding table all dynamic (learned) MAC address entries for
a specified network interface that belongs to a bridge group or to a VPLS instance .
There is no no version.
NOTE: Using the clear bridge interface command for a VPLS instance affects the
specified network interface associated with the VPLS instance, but has no effect on
the VPLS virtual core interface, which represents all of the MPLS tunnels from the
router to the remote VPLS edge (VE) devices. To remove all MAC addresses from the
forwarding table for the VPLS virtual core interface, use the clear bridge interface
vpls command.
Options
■
■
Mode
Related Topics
372
■
interfaceType—One of the following interface types listed in “Interface Types
and Specifiers” on page 5
■
atm
■
fastEthernet
■
gigabitEthernet
■
tenGigabitEthernet
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
■
clear bridge interface
Clearing Dynamic MAC Addresses from the VPLS Forwarding Table in the JUNOSe
BGP and MPLS Configuration Guide
Chapter 4: C Commands
clear bridge interface vpls
Syntax
Release Information
Description
clear bridge interface vpls vplsName
Command introduced in JUNOSe Release 7.1.0.
Removes from the forwarding table for a VPLS instance all dynamic (learned) MAC
address entries on the VPLS virtual core interface, which represents all of the MPLS
tunnels from the router to the remote VPLS edge (VE) devices. There is no no version.
NOTE: Using the clear bridge interface vpls command affects the VPLS virtual core
interface, but has no effect on the network interfaces associated with the VPLS
instance. To remove all MAC addresses from the forwarding table for a VPLS network
interface, use the clear bridge interface command.
Options
Mode
Related Topics
■
vplsName—Name of a VPLS instance created with the bridge vpls
transport-virtual-router command
Privileged Exec
■
Clearing Dynamic MAC Addresses from the VPLS Forwarding Table in the JUNOSe
BGP and MPLS Configuration Guide
clear bridge interface vpls
■
373
JUNOSe 11.0.x Command Reference Guide A to M
clear egress-queue
Syntax
Release Information
Description
Options
Mode
374
■
clear egress-queue interfaceType interfaceSpecifier [ explicit ]
[ traffic-class trafficClassName ]
Command introduced before JUNOSe Release 7.1.0.
Clears egress queue statistics for the all queues bound to the specified interface for
queues stacked at and above the interface, or only for the specified traffic class.
There is no no version.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
explicit—Clears queues only on the specified interface and not queues stacked
above the interface
■
trafficClassName—Name of a traffic class for which egress queue statistics are
cleared
Privileged Exec
clear egress-queue
Chapter 4: C Commands
clear fabric-queue
Syntax
Release Information
Description
Options
Mode
clear fabric-queue [ traffic-class trafficClassName ] [ egress-slot egressSlot ]
Command introduced before JUNOSe Release 7.1.0.
Clears statistics for all fabric queues or for the specified traffic-class, egress-slot, or
both. There is no no version.
■
trafficClassName—Name of a traffic class for which fabric-queue statistics will
be cleared
■
egressSlot—Number of an egress slot for which fabric-queue statistics will be
cleared
Privileged Exec
clear fabric-queue
■
375
JUNOSe 11.0.x Command Reference Guide A to M
clear ip bgp
Syntax
clear ip bgp [ ipAddress | ipv6Address | peer-group peerGroupName
| * ] [ vrf vrfName ]
[ ipv4 unicast | ipv4 multicast | vpnv4 unicast | l2vpn all | l2vpn vpls vplsName |
l2vpn vpws vpwsName | route-target signaling ] soft [ in [ prefix-filter ] | out ] ]
Release Information
Command introduced before JUNOSe Release 7.1.0.
l2vpn keyword added in JUNOSe Release 7.1.0.
ipv6Address variable added in JUNOSe Release 8.0.0.
route-target signaling keywords added in JUNOSe Release 8.2.0.
all, vpls, and vpws keywords and vplsName and vpwsName variables added in JUNOSe
Release 9.3.0.
Description
If the soft option is not used, brings down the underlying TCP connection and then
brings it back up again, causing both peers to resend their complete BGP routing
table. If the soft out option is used, the BGP speaker reapplies outbound policy and
resends all routes to the specified peers. If the soft in option is used, the BGP speaker
reapplies inbound policy to the routes received from the specified peers. This is
possible only if soft reconfiguration inbound has been enabled for the peer or the
peer supports the route-refresh capability. There is no no version.
Options
376
■
clear ip bgp
■
ipAddress—IP address of identified BGP neighbor to clear
■
ipv6Address—IPv6 address of identified BGP neighbor to clear
■
peerGroupName—Name of a BGP peer group to clear
■
*—Clears all connections
■
vrfName—Name of a virtual routing and forwarding instance to clear
■
ipv4 unicast—Clears the IPv4 unicast routing table; the default option
■
ipv4 multicast—Clears the IPv4 multicast routing table
■
vpnv4 unicast—Clears the VPNv4 unicast routing and forwarding table
■
l2vpn all—Clears the L2VPN reachability information for all VPLS and VPWS
instances in the L2VPN address family
■
l2vpn vpls vplsName—Clears the L2VPN reachability information for the VPLS
instance with the name vplsName
■
l2vpn vpws vpwsName—Clears the L2VPN reachability information for the VPWS
instance with the name vpwsName
■
route-target signaling—Clears the route-target membership information
■
soft—Specifies soft reconfiguration
■
in—Triggers inbound soft reconfiguration
■
prefix-filter—Pushes out prefix list and Cisco-proprietary prefix list outbound
route filters and triggers inbound soft reconfiguration
■
out—Triggers outbound soft reconfiguration
Chapter 4: C Commands
Mode
Related Topics
Privileged Exec
■
Clearing BGP Attributes for L2VPNs Clearing BGP Attributes for VPLS in the JUNOSe
BGP and MPLS Configuration Guide
clear ip bgp
■
377
JUNOSe 11.0.x Command Reference Guide A to M
clear ip bgp dampening
Syntax
To clear IP-specific information for only the route-target address family:
clear ip bgp route-target signaling { dampening | flap-statistics } [ rtfPrefix
| rtfAddress ]
To clear IP-specific information for any case other than for the route-target address
family:
clear ip bgp
[ vrf vrfName ] [ ipv4 unicast | ipv4 multicast | vpnv4 unicast |
l2vpn all | l2vpn vpls vplsName | l2vpn vpws vpwsName]
{ dampening | flap-statistics } [ ipAddress [ addressMask ] ]
Release Information
Description
Options
378
■
Command introduced before JUNOSe Release 7.1.0.
l2vpn keyword added in JUNOSe Release 7.1.0.
vpls keyword and vplsName variable added in JUNOSe Release 7.1.0.
all, vpws, and route-target signaling keywords and rtMemNlri and vpwsName
variables added in JUNOSe Release 8.2.0.
rtMemNlri variable replaced by two variables, rtfAddress and rtfPrefix, in JUNOSe
Release 9.1.0.
Clears IP route flap dampening information and reinstates the suppressed routes.
The dampening keyword and the flap-statistics keyword both have the same effect.
There is no no version.
■
route-target signaling—Clears the route-target membership information
■
rtfPrefix—Prefix representing the route-target membership NLRI (RT-MEM-NLRI),
in the format asNumber : extendedCommunity / prefixLength (for example,
320:320:524/36) where:
■
asNumber—AS number for origin of route target information, in the range
1–4294967295
■
extendedCommunity—Two-part number in the format number1:number2 that
identifies an extended community of VPNs, in the format number1 : number2,
where:
■
number1—Autonomous system (AS) number, in the range 1–4294967295,
or an IP address
■
number2—Unique integer, in the range 1–4294967295; 32 bits if number1
is a 16-bit AS number; 16 bits if number1 is an IP address or a 32-bit AS
number
■
prefixLength—Number that specifies the length of the route prefix, in the
range 32–96
clear ip bgp dampening
Chapter 4: C Commands
Mode
Related Topics
■
rtfAddress—rtfPrefix with a prefix length of 96; representing the route-target
membership NLRI (RT-MEM-NLRI), in the format asNumber: extendedCommunity
(for example, 320:320:524 or 320:50.2.3.4:524)
■
vrfName—Name of a virtual routing and forwarding instance to clear
■
ipv4 unicast—Clears the IPv4 unicast routing table; the default option
■
ipv4 multicast—Clears the IPv4 multicast routing table
■
vpnv4 unicast—Clears the VPNv4 unicast routing and forwarding table
■
l2vpn all—Clears the L2VPN reachability information for all VPLS and VPWS
instances in the L2VPN address family
■
l2vpn vpls vplsName—Clears the L2VPN reachability information for the VPLS
instance with the name vplsName
■
l2vpn vpws vpwsName—Clears the L2VPN reachability information for the VPWS
instance with the name vpwsName
■
ipAddress—IP address of the BGP neighbor to clear
■
addressMask—Address mask to be applied to the network IP address
Privileged Exec
■
Clearing BGP Attributes for L2VPNs and Clearing BGP Attributes for VPLS in the
JUNOSe BGP and MPLS Configuration Guide
clear ip bgp dampening
■
379
JUNOSe 11.0.x Command Reference Guide A to M
clear ip bgp dynamic-peers
Syntax
Release Information
Description
Options
Mode
380
■
clear ip bgp [ ipAddress | ipv6Address | peer-group peerGroupName
| * ] [ vrf vrfName ]
dynamic-peers
Command introduced before JUNOSe Release 7.1.0.
ipv6Address variable added in JUNOSe Release 8.0.0.
Removes all dynamic peers in the specified scope. There is no no version.
■
ipAddress—IP address of identified BGP neighbor to clear
■
ipv6Address—IPv6 address of identified BGP neighbor to clear
■
peerGroupName—Name of a BGP peer group to clear
■
*—Clears all connections
■
vrfName—Name of a virtual routing and forwarding instance to clear
Privileged Exec
clear ip bgp dynamic-peers
Chapter 4: C Commands
clear ip bgp redistribution
Syntax
Release Information
Description
Options
Mode
clear ip bgp [ ipv4 { unicast | multicast } ] redistribution
Command introduced before JUNOSe Release 7.1.0.
Reapplies policy to routes that have been redistributed into BGP. There is no no
version.
■
ipv4 unicast—Reapplies policy to redistributed IPv4 unicast routes
■
ipv4 multicast—Reapplies policy to redistributed IPv4 multicast routes
Privileged Exec, User Exec
clear ip bgp redistribution
■
381
JUNOSe 11.0.x Command Reference Guide A to M
clear ip bgp wait-end-of-rib
Syntax
clear ip bgp [ ipAddress | ipv6Address | peer-group peerGroupName
| * ] [ vrf vrfName ]
[ ipv4 unicast | ipv4 multicast | vpnv4 unicast | l2vpn all | l2vpn vpls vplsName |
l2vpn vpws vpwsName | route-target signaling ] wait-end-of-rib
Release Information
Command introduced before JUNOSe Release 7.1.0.
l2vpn keyword added in JUNOSe Release 7.1.0.
ipv6Address variable added in JUNOSe Release 8.0.0.
route-target signaling keywords added in JUNOSe Release 8.2.0.
all, vpls, and vpws keywords and vplsName and vpwsName variables added in JUNOSe
Release 9.3.0.
Description
Brings down the underlying TCP connection and then brings it back up again, causing
both peers to resend their complete BGP routing table, but clears the specified peer
from the set of peers for which BGP is waiting to receive an End-of-RIB marker after
a peer restart. Hard clearing a peer has the same effect for that peer. There is no no
version.
Options
Mode
Related Topics
382
■
■
ipAddress—IP address of identified BGP neighbor to clear
■
ipv6Address—IPv6 address of identified BGP neighbor to clear
■
peerGroupName—Name of a BGP peer group to clear
■
*—Clears all connections
■
vrfName—Name of a virtual routing and forwarding instance to clear
■
ipv4 unicast—Clears the IPv4 unicast routing table; the default option
■
ipv4 multicast—Clears the IPv4 multicast routing table
■
vpnv4 unicast—Clears the VPNv4 unicast routing and forwarding table
■
l2vpn all—Clears the L2VPN reachability information for all VPLS and VPWS
instances in the L2VPN address family
■
l2vpn vpls vplsName—Clears the L2VPN reachability information for the VPLS
instance with the name vplsName
■
l2vpn vpws vpwsName—Clears the L2VPN reachability information for the VPWS
instance with the name vpwsName
■
route-target signaling—Clears the route-target membership information
Privileged Exec
■
Clearing BGP Attributes for L2VPNs and Clearing BGP Attributes for VPLS in the
JUNOSe BGP and MPLS Configuration Guide
clear ip bgp wait-end-of-rib
Chapter 4: C Commands
clear ip demux
Syntax
Release Information
Description
Mode
clear ip demux
Command introduced before JUNOSe Release 7.1.0.
Clears all dynamically created demultiplexer table entries associated with route-map
processing of the set ip source-prefix command. There is no no version.
Interface Configuration
clear ip demux
■
383
JUNOSe 11.0.x Command Reference Guide A to M
clear ip dhcp-local binding
Syntax
Release Information
Description
clear ip dhcp-local binding ipAddress
Command introduced before JUNOSe Release 7.1.0.
Clears the specified IP DHCP address binding. There is no no version.
NOTE: This command is deprecated and might be removed completely in a future
release. The function provided by this command has been replaced by the dhcp
delete-binding command.
Options
Mode
384
■
■
ipAddress—DHCP IP address binding to clear
Privileged Exec
clear ip dhcp-local binding
Chapter 4: C Commands
clear ip dvmrp routes
Syntax
Release Information
Description
Options
Mode
clear ip dvmrp routes [ ipAddress [ addressMask ] ]
Command introduced before JUNOSe Release 7.1.0.
Clears DVMRP routes from the routing table. There is no no version.
■
ipAddress—IP address for which longest match is cleared
■
addressMask—Address mask to be applied to the IP address
Privileged Exec
clear ip dvmrp routes
■
385
JUNOSe 11.0.x Command Reference Guide A to M
clear ip flow stats
Syntax
Release Information
Description
clear ip flow stats
Command introduced before JUNOSe Release 7.1.0.
Clears all entries from all flow caches on the router. There is no no version.
CAUTION: Using this command may temporarily disrupt flow data collection.
Mode
386
■
Privileged Exec
clear ip flow stats
Chapter 4: C Commands
clear ip interface
Syntax
Release Information
Description
Options
Mode
clear ip interface [ vrf vrfName ] interfaceType interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Clears the counters on the specified IP interface. The default is all interface types
and all interfaces. There is no no version.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
clear ip interface
■
387
JUNOSe 11.0.x Command Reference Guide A to M
clear ip isis redistribution
Syntax
Release Information
Description
Mode
388
■
clear ip isis redistribution
Command introduced before JUNOSe Release 7.1.0.
Clears all the routes that have previously been redistributed into IS-IS and redistributes
them using the current policy configuration. There is no no version.
Privileged Exec
clear ip isis redistribution
Chapter 4: C Commands
clear ip mobile binding
Syntax
Release Information
Description
Options
Mode
clear ip mobile binding { nai { user@realm | @realm | @ } | ipAddress | all }
Command introduced in JUNOSe Release 9.0.0.
Clears the binding table in a virtual router or a specified binding determined by the
mobile node home address or network access identifier (NAI). There is no no version.
■
user@realm—Name of the user for the mobile node specification when the nai
keyword is specified, in the format user@realm, where realm is the domain name
■
@realm—Name of the user for the mobile node specification when the nai
keyword is specified, in the format @realm, where realm is the domain name
■
@—Name of the user for the mobile node specification when the nai keyword
is specified, in the format @
■
ipAddress—IP address of the home agent
■
all—Clears all the bindings in the binding table
Privileged Exec
clear ip mobile binding
■
389
JUNOSe 11.0.x Command Reference Guide A to M
clear ip mroute
Syntax
Release Information
Description
Options
Mode
390
■
clear ip mroute
clear ip mroute { * | grpAddress [ sourceAddress ] }
Command introduced before JUNOSe Release 7.1.0.
Clears all or the specified multicast forwarding entries. There is no no version.
■
*—Clears all IP multicast forwarding entries
■
grpAddress—Address of the multicast group for which forwarding entries should
be cleared
■
sourceAddress—Address of the multicast source for which forwarding entries
should be cleared
Privileged Exec, User Exec
Chapter 4: C Commands
clear ip nat translation
Syntax
clear ip nat translation *
clear ip nat translation inside insideGlobalIpAddress insideLocalIpAddress
clear ip nat translation outside outsideLocalIpAddress outsideGlobalIpAddress
clear ip nat translation { icmp | tcp | udp }
inside insideGlobalIpAddress insideGlobalPort insideLocalIpAddress insideLocalPort
clear ip nat translation { gre | icmp | tcp | udp }
inside insideGlobalIpAddress * insideLocalIpAddress *
clear ip nat translation { icmp | tcp | udp }
inside insideGlobalIpAddress insideGlobalPort insideLocalIpAddress insideLocalPort
outside outsideLocalIpAddress outsideLocalPort outsideGlobalIpAddress outsideGlobalPort
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
gre keyword added in JUNOSe Release 7.3.0.
Clears all or the specified NAT table entries. There is no no version.
■
*—Clears all translations when used in the clear ip nat translation version of
this command
■
*—Matches any global or local port to remove inside source extended GRE,
ICMP, TCP, or UDP translations for the specified global IP address and local IP
address when used in the clear ip nat translation { gre | icmp | tcp | udp }
inside insideGlobalIpAddress * insideLocalIpAddress * version of this command
■
inside—Specifies an inside address
■
insideGlobalIpAddress—Inside global IP address
■
insideLocalIpAddress—Inside local IP address
■
outside—Specifies an outside address
■
outsideLocalIpAddress—Outside local IP address
■
outsideGlobalIpAddress—Outside global IP address
■
tcp—Specifies a TCP port translation
■
udp—Specifies a UDP port translation
■
icmp—Specifies an ICMP port translation
■
gre—Specifies a GRE translation
■
insideGlobalPort—Inside global port number
■
insideLocalPort—Inside local port number
clear ip nat translation
■
391
JUNOSe 11.0.x Command Reference Guide A to M
Mode
392
■
■
outsideGlobalPort—Outside global port number
■
outsideLocalPort—Outside local port number
Privileged Exec
clear ip nat translation
Chapter 4: C Commands
clear ip ospf database
Syntax
Release Information
Description
Mode
clear ip ospf database
Command introduced in JUNOSe Release 7.1.0.
Deletes all entries from the OSPF link-state database and resets all adjacencies. There
is no no version.
Privileged Exec
clear ip ospf database
■
393
JUNOSe 11.0.x Command Reference Guide A to M
clear ip ospf neighbor
Syntax
Release Information
Description
clear ip ospf neighbor [ neighborAddress ]
Command introduced in JUNOSe Release 7.1.0.
Clears or resets adjacency with a specified neighbor session. There is no no version.
NOTE: When OSPF is configured and running over an NBMA network, do not issue
the clear ip ospf neighbor command simultaneously on both ends of the OSPF link.
Doing so brings the OSPF link down completely. In this event, you must do one of
the following on both sides of the link to bring the link back up:
Options
Mode
394
■
■
Reconfigure the OSPF neighbors on the NBMA interface with the neighbor
command.
■
Issue the clear ip ospf database command to clear and reset the OSPF
adjacencies.
■
Issue the shutdown command followed by the no shutdown command on the
interface.
■
neighborAddress—IP address of identified neighbor to clear or reset
Privileged Exec
clear ip ospf neighbor
Chapter 4: C Commands
clear ip ospf redistribution
Syntax
Release Information
Description
Mode
clear ip ospf redistribution
Command introduced before JUNOSe Release 7.1.0.
Clears and readvertises all of the routes that have been previously redistributed into
OSPF. Exercise caution when using this command as it purges all external LSAs and
reoriginates. There is no no version.
Privileged Exec
clear ip ospf redistribution
■
395
JUNOSe 11.0.x Command Reference Guide A to M
clear ip pim auto-rp
Syntax
Release Information
Description
Options
Mode
396
■
clear ip pim auto-rp [ ipAddress ]
Command introduced before JUNOSe Release 7.1.0.
Clears the group-to-RP router mappings the router learned via autoRP. There is no
no version.
■
ipAddress—IP address of the router designated as an RP router
Privileged Exec, User Exec
clear ip pim auto-rp
Chapter 4: C Commands
clear ip pim interface count
Syntax
Release Information
Description
Options
Mode
clear ip pim interface [ interfaceType interfaceSpecifier ] count
Command introduced before JUNOSe Release 7.1.0.
Clears the counters for multicast packet statistics on all interfaces or the specified
interface. There is no no version.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec, User Exec
clear ip pim interface count
■
397
JUNOSe 11.0.x Command Reference Guide A to M
clear ip pim remote-neighbor count
Syntax
Release Information
Description
clear ip pim remote-neighbor [ ipAddress ] count
Command introduced before JUNOSe Release 7.1.0.
Clears the counters for remote neighbor statistics on all interfaces or the specified
interface. There is no no version.
NOTE: This command is typically used when you configure PIM remote neighbors
to run multicast services over BGP/MPLS VPNs. That functionality is no longer
supported.
Options
Mode
398
■
■
ipAddress—IP address of the interface
Privileged Exec, User Exec
clear ip pim remote-neighbor count
Chapter 4: C Commands
clear ip prefix-list
Syntax
Release Information
Description
Options
Mode
clear ip prefix-list [ listName [ network/length] ]
Command introduced before JUNOSe Release 7.1.0.
Clears all hit counts in the prefix lists, the specified prefix list, or the specified entry
from the specified prefix list. There is no no version.
■
listName—Name of the prefix list; string of up to 32 characters
■
network—Base address of the network route to be filtered; for example,
192.168.32.0 or 10.10.0.0
■
length—Length of the network prefix; number of bits masking base address to
produce address to be matched
Privileged Exec, User Exec
clear ip prefix-list
■
399
JUNOSe 11.0.x Command Reference Guide A to M
clear ip prefix-tree
Syntax
Release Information
Description
Options
Mode
400
■
clear ip prefix-tree [ treeName [ network/length ] ]
Command introduced before JUNOSe Release 7.1.0.
Clears all prefix trees, the specified prefix tree, or the specified entry from the
specified prefix tree. There is no no version.
■
treeName—Name of the prefix list; string of up to 32 characters
■
network—Base address of the network route to be filtered; for example,
192.168.32.0 or 10.10.0.0
■
length—Length of the network prefix; number of bits masking base address to
produce address to be matched
Privileged Exec, User Exec
clear ip prefix-tree
Chapter 4: C Commands
clear ip rip dynamic-interfaces
Syntax
Release Information
Description
Mode
clear ip rip dynamic-interfaces
Command introduced before JUNOSe Release 7.1.0.
Clears all existing dynamic, unnumbered interfaces that were created since issuing
the ip rip copy-to-dynamic command. There is no no version.
Privileged Exec, User Exec
clear ip rip dynamic-interfaces
■
401
JUNOSe 11.0.x Command Reference Guide A to M
clear ip rip redistribution
Syntax
Release Information
Description
Mode
402
■
clear ip rip redistribution
Command introduced before JUNOSe Release 7.1.0.
Clears all the routes that have previously been redistributed into RIP. There is no no
version.
Privileged Exec, User Exec
clear ip rip redistribution
Chapter 4: C Commands
clear ip routes
Syntax
Release Information
Description
Options
Mode
clear ip routes [ vrf vrfName ] { * | ipAddress ipMask }
Command introduced before JUNOSe Release 7.1.0.
Clears a specified route or all dynamic routes from the routing table of a specified
VRF or all VRFs. There is no no version.
■
vrfName—Name of the VRF context from which routes are to be cleared
■
*—Clears all dynamic routes
■
ipAddress—IP address prefix for routes that are cleared; in 32-bit dotted-decimal
format
■
ipMask—Mask of the IP address prefix for routes that are cleared; in 32-bit
dotted-decimal format
Privileged Exec
clear ip routes
■
403
JUNOSe 11.0.x Command Reference Guide A to M
clear ip routes download
Syntax
For a specific VRF
clear ip routes download [ vrf vrfName ] { ipAddress ipMask | * }
For all virtual routers
clear ip routes download { all | reload }
Release Information
Description
Options
Mode
404
■
Command introduced in JUNOSe Release 8.1.0.
Synchronizes downloaded access routes and the routes installed in the routing table.
This command has no effect if a download operation is in progress. There is no no
version.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters; the current
virtual router is used by default
■
ipAddress—IP address prefix to clear
■
ipMask—Network mask of the IP address prefix to clear
■
*—Clears all dynamic routes that are installed in the routing table of the current
virtual router or specified VRF
■
all—Clears all downloaded routes that are installed in the routing tables of all
virtual routers and VRFs.
■
reload—Performs a route download operation, then clears all downloaded routes
from the routing tables in all virtual routers and VRFs.
Privileged Exec
clear ip routes download
Chapter 4: C Commands
clear ip tunnel-routes
Syntax
Release Information
Description
Options
Mode
clear ip tunnel-routes [ vrf vrfName ] { * | ipAddress ipMask }
Command introduced in JUNOSe Release 7.1.0.
Clears and then refreshes a specified route or all dynamic routes from the tunnel
routing table of the virtual router or a specified VRF. There is no no version.
■
vrfName—Name of the VRF context from which routes are to be cleared
■
*—Clears all dynamic routes
■
ipAddress—IP address prefix for routes that are cleared; in 32-bit dotted-decimal
format
■
ipMask—Mask of the IP address prefix for routes that are cleared; in 32-bit
dotted-decimal or /N format
Privileged Exec
clear ip tunnel-routes
■
405
JUNOSe 11.0.x Command Reference Guide A to M
clear ipv6 access-list
Syntax
Release Information
Description
Options
Mode
406
■
clear ipv6 access-list [ accessListName ]
Command introduced before JUNOSe Release 7.1.0.
Clears counters for entries in IP access lists. There is no no version.
■
accessListName—Name of the access list; a string of up to 32 characters
Privileged Exec
clear ipv6 access-list
Chapter 4: C Commands
clear ipv6 bfd session
Syntax
Release Information
Description
Options
Mode
clear ipv6 bfd session [ address ipv6Address ]
Command introduced in JUNOSe Release 7.1.0.
Restarts all IPv6 BFD sessions or a specified BFD session. There is no no version.
■
ipAddress—IP address of the destination to which the session has been established
Privileged Exec, User Exec
clear ipv6 bfd session
■
407
JUNOSe 11.0.x Command Reference Guide A to M
clear ipv6 interface
Syntax
Release Information
Description
Options
Mode
408
■
clear ipv6 interface interfaceType interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Clears the counters on the specified IPv6 interface. The default is all interface types
and all interfaces. There is no no version.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
clear ipv6 interface
Chapter 4: C Commands
clear ipv6 mroute
Syntax
Release Information
Description
Options
Mode
clear ipv6 mroute { * | grpAddress [ sourceAddress ] }
Command introduced before JUNOSe Release 7.1.0.
Clears all or the specified IPv6 multicast forwarding entries. There is no no version.
■
*—Clears all IPv6 multicast forwarding entries
■
grpAddress—Address of the multicast group for which forwarding entries should
be cleared
■
sourceAddress—Address of the multicast source for which forwarding entries
should be cleared
Privileged Exec, User Exec
clear ipv6 mroute
■
409
JUNOSe 11.0.x Command Reference Guide A to M
clear ipv6 neighbors
Syntax
Release Information
Description
Options
Mode
410
■
clear ipv6 neighbors [ include-statics | statics-only ]
Command introduced before JUNOSe Release 7.1.0.
Clears all IPv6 dynamic neighbors. The include-statics keyword clears both dynamic
neighbors and static neighbors. The statics-only keyword clears only IPv6 static
neighbors. There is no no version.
■
include-statics—Clears both dynamic and static neighbors
■
statics-only—Clears only static neighbors
Privileged Exec
clear ipv6 neighbors
Chapter 4: C Commands
clear ipv6 ospf counters
Syntax
Release Information
Description
Options
Mode
clear ipv6 ospf [ processId ] counters
Command introduced before JUNOSe Release 7.1.0.
Clears all OSPF IPv6 statistical counters for the virtual router. There is no no version.
■
processId—Number in the range 1–65535 that identifies the OSPF process
Privileged Exec
clear ipv6 ospf counters
■
411
JUNOSe 11.0.x Command Reference Guide A to M
clear ipv6 ospf process
Syntax
Release Information
Description
Options
Mode
412
■
clear ipv6 ospf [ processId ] process
Command introduced before JUNOSe Release 7.1.0.
Clears the OSPF IPv6 process on the virtual router. There is no no version.
■
processId—Number in the range 1–65535 that identifies the OSPF process
Privileged Exec
clear ipv6 ospf process
Chapter 4: C Commands
clear ipv6 ospf redistribution
Syntax
Release Information
Description
Mode
clear ipv6 ospf redistribution
Command introduced before JUNOSe Release 7.1.0.
Clears and readvertise all of the routes that have been previously redistributed into
OSPF. Exercise caution when using this command as it purges all external LSAs and
reoriginates. There is no no version.
Privileged Exec
clear ipv6 ospf redistribution
■
413
JUNOSe 11.0.x Command Reference Guide A to M
clear ipv6 pim interface
Syntax
Release Information
Description
Options
Mode
414
■
clear ipv6 pim interface [ interfaceType interfaceSpecifier ] count
Command introduced before JUNOSe Release 7.1.0.
Clears the counters for multicast packet statistics on all IPv6 interfaces or the specified
IPv6 interface. There is no no version.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec, User Exec
clear ipv6 pim interface
Chapter 4: C Commands
clear ipv6 pim remote-neighbor
Syntax
Release Information
Description
Options
Mode
clear ipv6 pim remote-neighbor [ ipv6Address ] count
Command introduced before JUNOSe Release 7.1.0.
Clears the counters for remote neighbor statistics on all IPv6 interfaces or the specified
IPv6 interface. There is no no version.
■
ipv6Address—IPv6 address of the interface
Privileged Exec, User Exec
clear ipv6 pim remote-neighbor
■
415
JUNOSe 11.0.x Command Reference Guide A to M
clear ipv6 prefix-list
Syntax
Release Information
Description
Options
Mode
416
■
clear ipv6 prefix-list [ listName [ network/length] ]
Command introduced before JUNOSe Release 7.1.0.
Clears all hit counts in all IPv6 prefix lists, the specified prefix list, or the specified
entry from the specified prefix list. There is no no version.
■
listName—Name of the IPv6 prefix list; string of up to 32 characters
■
network—Base address of the network route to be filtered; for example,
::ffff:a:b:c:d
■
length—Length of the network prefix; number of bits masking base address to
produce address to be matched
Privileged Exec, User Exec
clear ipv6 prefix-list
Chapter 4: C Commands
clear ipv6 routes
Syntax
Release Information
Description
Options
Mode
clear ipv6 routes [ ipv6Prefix | * ]
Command introduced before JUNOSe Release 7.1.0.
Clears IPv6 routes. To clear the routes for a specific IPv6 network, specify the IPv6
prefix. To clear all dynamic IPv6 routes, use the * (asterisk) option. There is no no
version.
■
ipv6Prefix—IPv6 network for which to clear route information
■
*—Clears all dynamic IPv6 routes
Privileged Exec
clear ipv6 routes
■
417
JUNOSe 11.0.x Command Reference Guide A to M
clear ipv6 tunnel-routes
Syntax
Release Information
Description
Options
Mode
418
■
clear ipv6 tunnel-routes [ ipv6Prefix | * ]
Command introduced in JUNOSe Release 7.1.0.
Clears and then refreshes IPv6 routes from the tunnel routing table. To clear the
routes for a specific IPv6 network, specify the IPv6 prefix. To clear all dynamic IPv6
routes, use the * (asterisk) option. There is no no version.
■
ipv6Prefix—IPv6 network for which to clear route information
■
*—Clears all dynamic IPv6 routes
Privileged Exec
clear ipv6 tunnel-routes
Chapter 4: C Commands
clear isis adjacency
Syntax
Release Information
Description
Options
Mode
clear isis adjacency [ systemId | hostname ]
Command introduced before JUNOSe Release 7.1.0.
Clears all entries from the adjacency database, or clears only adjacencies with a
specified neighbor. There is no no version.
■
systemID—System ID of an IS-IS neighbor
■
hostname—Hostname of an IS-IS neighbor
Privileged Exec
clear isis adjacency
■
419
JUNOSe 11.0.x Command Reference Guide A to M
clear isis database
Syntax
Release Information
Description
Options
Mode
420
■
clear isis database [ systemId | hostname ]
Command introduced before JUNOSe Release 7.1.0.
Clears all entries from the IS-IS link-state database, or clears only entries associated
with a specified neighbor. There is no no version.
■
systemId—System ID of an IS-IS neighbor
■
hostname—Hostname of an IS-IS neighbor
Privileged Exec
clear isis database
Chapter 4: C Commands
clear isis ipv6 redistribution
Syntax
Release Information
Description
Mode
clear isis ipv6 redistribution
Command introduced in JUNOSe Release 8.2.0.
Clears all the IPv6 routes that have previously been redistributed into IS-IS and
redistributes them using the current policy configuration. There is no no version.
Privileged Exec
clear isis ipv6 redistribution
■
421
JUNOSe 11.0.x Command Reference Guide A to M
clear l2c discovery-table
Syntax
Release Information
Description
Options
Mode
422
■
clear l2c discovery-table { neighbor neighborName | end-user-id userId |
neighbor neighborName end-user-id userId }
Command introduced in JUNOSe Release 7.2.0.
Clears all entries or a specified entry from the topology discovery table. There is no
no version.
■
neighborName—Name of the neighbor you want to reset
■
userId—User ID you want to reset
Privileged Exec
clear l2c discovery-table
Chapter 4: C Commands
clear l2c neighbor
Syntax
Release Information
Description
Options
Mode
clear l2c neighbor neighborName
Command introduced before JUNOSe Release 7.1.0.
Resets the specified GSMP neighbor session. There is no no version.
■
neighborName—Name of the neighbor you want to reset
Privileged Exec
clear l2c neighbor
■
423
JUNOSe 11.0.x Command Reference Guide A to M
clear line
Syntax
Release Information
Description
Options
clear line { absoluteLine | cliType relativeLine }
Command introduced before JUNOSe Release 7.1.0.
Removes all services on any line on the system and closes any files opened as a
result of services on that line. There is no no version.
■
absoluteLine—Absolute number of the line to which the user is connected; see
the line number field in the show users command output
■
cliType—One of the following types of lines:
■
Mode
424
■
clear line
■
console
■
vty
relativeLine—Relative number for a line; see the line name field in the show
users command output
User Exec
Chapter 4: C Commands
clear mirror log
Syntax
Release Information
Description
Mode
Related Topics
clear mirror log
Command introduced before JUNOSe Release 7.1.0.
Clears all log entries for packet mirroring operations. By default, you must have CLI
user access level 13 or above to use this command; an administrator can modify the
user access level requirement. There is no no version.
Privileged Exec, User Exec
■
Monitoring Packet Mirroring Overview
■
Logging Packet Mirroring Information
clear mirror log
■
425
JUNOSe 11.0.x Command Reference Guide A to M
clear mpls dynamic-interfaces on-major-interfaces
Syntax
Release Information
Description
Options
Mode
426
■
clear mpls dynamic-interfaces [ ip | ipv6 ] on-major-interfaces
[ interfaceType interfaceSpecifier ]
Command introduced in JUNOSe Release 7.2.0.
Removes and re-creates both dynamic IPv4 interfaces and dynamic IPv6 interfaces
that are on top of all MPLS major interfaces or on top of the specified MPLS major
interface. There is no no version.
■
ip—Specifies that only IPv4 dynamic interfaces are removed and re-created
■
ipv6—Specifies that only IPv6 dynamic interfaces are removed and re-created
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Privileged Exec
clear mpls dynamic-interfaces on-major-interfaces
Chapter 4: C Commands
clear mpls ldp
Syntax
Release Information
Description
Options
Mode
clear mpls ldp [ prefix destAddr [ maskLen | mask ] | neighbor [ neighborAddress ] ]
Command introduced before JUNOSe Release 7.1.0.
Removes and reestablishes existing LDP LSPs, thereby forcing the reapplication of
policies on the reestablished topology-driven LDP LSPs. You can clear all LDP LSPs
or limit the clearance to only LSPs to a specified prefix or neighbor. Affects the data
traffic on LSPs that are in use when the command is issued. There is no no version.
■
destAddr—IP address of the prefix to be cleared
■
maskLen—Length of the prefix to be cleared; number in the range 0–32
■
mask—Mask for the prefix to be cleared
■
neighborAddress—IP address of a neighbor 32-bit dotted-decimal format of the
entry to be cleared
Privileged Exec
clear mpls ldp
■
427
JUNOSe 11.0.x Command Reference Guide A to M
clear redundancy history
Syntax
Release Information
Description
Mode
428
■
clear redundancy history
Command introduced before JUNOSe Release 7.1.0.
Clears the high availability switchover history for the router. There is no no version.
Privileged Exec
clear redundancy history
Chapter 4: C Commands
clear rsvp authentication
Syntax
Release Information
Description
Options
Mode
clear { ip | mpls } rsvp authentication [ ipAddress ]
Command introduced before JUNOSe Release 7.1.0.
Clears the security association and resets the sequence number on the receiving peer
for the specified sending peer. There is no no version.
■
ip—Specifies keyword for compatibility with non–E Series implementations
■
mpls—Indicates JUNOSe MPLS implementation
■
ipAddress—IP address of sending peer
Privileged Exec
clear rsvp authentication
■
429
JUNOSe 11.0.x Command Reference Guide A to M
clear suspicious-control-flow-detection
Syntax
Release Information
Description
Options
Mode
430
■
clear suspicious-control-flow-detection
[ interface interfaceSpecifier protocol protocolValue address ethernetAddress slot
slotNumber ]
Command introduced in JUNOSe Release 7.3.0.
Clears one or more suspicious flows. If you do not specify a slot, interface, or IP
address, clears all suspicious flows. If you specify a slot, clears all specified suspicious
flows on that slot. If you specify an interface and protocol, clears flows that are
identified down to the Ethernet mac address level. There is no no version.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
protocolValue—Name of the protocol to be cleared
■
ethernetAddress—Ethernet address to be cleared
■
slotNumber—Number of the slot to be cleared
Privileged Exec, User Exec
clear suspicious-control-flow-detection
Chapter 4: C Commands
client-name
Syntax
client-name clientname
no client-name
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
From Domain Map Tunnel Configuration or Tunnel Group Tunnel Configuration
mode, sets a hostname for a tunnel that the LAC uses when communicating with the
LNS about the tunnel. The no version removes the hostname from the tunnel.
NOTE: In Domain Map Tunnel Configuration mode, this command is replacing the
hostname command. The hostname command may be removed completely from
Domain Map Tunnel Configuration mode in a future release.
Options
Mode
■
clientname—String of up to 64 characters (no spaces)
Domain Map Tunnel Configuration, Tunnel Group Tunnel Configuration
client-name
■
431
JUNOSe 11.0.x Command Reference Guide A to M
clns configuration-time
Syntax
clns configuration-time configTime
no clns configuration-time
Release Information
Description
Options
Mode
432
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the rate at which ES hellos and IS hellos are sent. The no version restores
the default value, 10 seconds.
■
configTime—Number in the range 1–65535; rate in seconds at which ES and IS
hello packets are sent; default value is 10 seconds
Global Configuration
clns configuration-time
Chapter 4: C Commands
clns holding-time
Syntax
clns holding-time holdTime
no clns holding-time
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Allows the sender of an ES hello or IS hello to specify the length of time you consider
the information in the hello packets to be valid. The no version restores the default
value, 30 seconds.
■
holdTime—Number in the range 1–65535; length of time in seconds during which
the information in the hello packets is considered valid
Global Configuration
clns holding-time
■
433
JUNOSe 11.0.x Command Reference Guide A to M
clns host
Syntax
clns host name nsap
no clns host name
Release Information
Description
Options
Mode
434
■
clns host
Command introduced before JUNOSe Release 7.1.0.
Defines a name-to-NSAP mapping that can then be used with commands requiring
NSAPs. Enables dynamic resolution of hostnames to system IDs (within the NSAP
address). The hostname mapping is sent in the LSPs within the dynamic hostname
TLV tuple. Display the TLV by issuing the show isis database detail command. Use
the show hosts command to display the mapping. The no version restores the default
of no mapping defined.
■
name—Name for the NSAP; first character can be either a letter or a number. If
a number is used, the operations you can perform are limited.
■
nsap—NSAP to which that name maps
Global Configuration
Chapter 4: C Commands
clock set
Syntax
Release Information
Description
Options
Mode
clock set time { month day | day month } year
Command introduced before JUNOSe Release 7.1.0.
Allows you to manually set the system clock. There is no no version.
■
time—Current time (in 24-hour format – HH:MM:SS)
■
month—Name of the month (January, February, …)
■
day—Day of the month (1–31)
■
year—Year (2000, 2001, …)
Privileged Exec
clock set
■
435
JUNOSe 11.0.x Command Reference Guide A to M
clock source
Syntax
clock source { line | internal { module | chassis } }
no clock source
Release Information
Description
Options
Mode
436
■
clock source
Command introduced before JUNOSe Release 7.1.0.
Determines how an interfaces obtains clocking signals. The no version restores the
default value, line.
■
line—Interface clocks data from a clock recovered from the line's receive data
stream; the default.
■
internal—Internal clock source transmits data from its internal clock. You must
specify one of the following for internal clocking:
■
module—Internal clock is from the line module itself
■
chassis—Internal clock is from the configured system clock
Controller Configuration, Interface Configuration (POS only)
Chapter 4: C Commands
clock summer-time date
Syntax
clock summer-time name date { startDay startMonth | startMonth startDay }
startYear startTime { stopDay stopMonth | stopMonth stopDay }
stopYear stopTime [ dstOffset ]
no clock summer-time
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the router to automatically switch to summer time (Daylight Saving Time—DST).
It should start on the first specific date listed in the command and end on the second
specific date in the command. The no version configures the software so that it does
not automatically switch to summer time.
■
name—Name of the time zone (for example, PDT) to be displayed when daylight
saving (summer) time is in effect
■
date—Indicates that summer time should start on the first specific date listed in
the command and end on the second specific date in the command
■
startDay—DST start day (1–31)
■
startMonth—DST start month (January, February, …)
■
startYear—DST start year (2000, 2001, …)
■
startTime—DST start time (24-hour format) in hours and minutes (hh:mm)
■
stopDay—DST stop day
■
stopMonth—DST stop month
■
stopYear—DST stop year
■
stopTime—DST stop time (24-hour format)
■
dstOffset—Number of minutes to add during summer time in the range 1–1440;
default = 60
Global Configuration
clock summer-time date
■
437
JUNOSe 11.0.x Command Reference Guide A to M
clock summer-time recurring
Syntax
clock summer-time name recurring [ { startWeekNumber | startWeekEnum }
startDay startMonth startTime { stopWeekNumber | stopWeekEnum }
stopDay stopMonth stopTime [ dstOffset ] ]
no clock summer-time
Release Information
Description
Options
Mode
438
■
Command introduced before JUNOSe Release 7.1.0.
Sets the router to automatically switch to summer time (Daylight Saving Time) on
the specified dates every year. The no version configures the software not to
automatically switch to summer time.
■
name—Name of the time zone (for example, EDT for Eastern Daylight Savings
Time) to be displayed when daylight saving (summer) time is in effect
■
recurring—Indicates that summer time should start and end on the specified
days every year
■
startWeekNumber—DST start week of the month (1–5)
■
startWeekEnum—First week in month (first); or last week in month (last)
■
startDay—DST start day of the week (Sunday, Monday, …)
■
startMonth—DST start month (January, February, …)
■
startTime—DST start time (24-hour format) in hours and minutes (hh:mm)
■
stopWeekNumber—DST stop week of the month (1–5)
■
stopWeekEnum—First week in month (first); or last week in month (last)
■
stopDay—DST stop day of the week
■
stopMonth—DST stop month
■
stopTime—DST stop time in hours and minutes (hh:mm)
■
dstOffset—Number of minutes to add during summer time in the range 1–1440;
default = 60
Global Configuration
clock summer-time recurring
Chapter 4: C Commands
clock timezone
Syntax
clock timezone name hours [ minutes ]
no clock timezone
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the time zone for display. The no version sets the time zone to UTC.
■
name—Name of the time zone to be displayed when Standard time is in effect,
such as EST or PST.
■
hours—Hours offset from UTC (-23, -22 … 23)
■
minutes—Minutes offset from UTC (0–59)
Global Configuration
clock timezone
■
439
JUNOSe 11.0.x Command Reference Guide A to M
color
Syntax
Release Information
Description
[ no ] [ suspend ] color { green | yellow | red }
Command introduced before JUNOSe Release 7.1.0.
Defines a policy rule that assigns a color to packets defined in the current classifier
control list. The no version removes the rule from the policy list; the suspend version
temporarily suspends the policy rule; the no suspend version resumes application
of a suspended rule.
NOTE: This command replaces the Policy List Configuration mode version of the
color command, which may be removed completely in a future release.
Options
Mode
Related Topics
440
■
color
■
green—Assigns green color to packets; highest precedence
■
yellow—Assigns yellow color to packets; intermediate precedence
■
red—Assigns red color to packets; lowest precedence
Classifier Group Configuration
■
Hierarchical Rate Limits Overview
■
Policy Rule Precedence
Chapter 4: C Commands
color-aware
Syntax
Release Information
Description
Mode
Related Topics
[ no ] color-aware
Command introduced in JUNOSe Release 7.2.0.
Configures rate-limit profile to operate in color-aware mode. (Supported only on
hierarchical rate limits.) Color-aware rate limits can change the algorithm used
depending on the color of the incoming packet, which might have been set in the
previous rate limit, in a policy action, or in an earlier policy. The no version restores
the default value, which is not color-aware.
Rate Limit Profile Configuration
■
Creating a Two-Rate Rate-Limit Profile
color-aware
■
441
JUNOSe 11.0.x Command Reference Guide A to M
color-mark-profile
Syntax
Release Information
Description
Options
Mode
Related Topics
442
■
color-mark-profile
[ no ] [ ip | ipv6 | mpls ] color-mark-profile profileName
Command introduced in JUNOSe Release 7.2.0.
Translates the packet color (independent of its type) to a type-dependent mark (for
ToS or EXP), which is applied to a packet after it has exited a rate-limit hierarchy. If
translation is not configured for a color, then packets of that color are not changed.
The no version deletes the color-mark profile.
■
profileName—Name of the rate-limit profile to be used in a policy (up to 40
alphanumeric characters)
Color Mark Profile Configuration, Global Configuration
■
Hierarchical Rate Limits Overview
■
Policy Rule Precedence
Chapter 4: C Commands
committed-action
Syntax
For IP and IPv6 rate-limit profiles:
[ no ] committed-action { drop | transmit | mark markVal }
For L2TP rate-limit profiles:
[ no ] committed-action { drop | transmit }
For MPLS rate-limit profiles:
[ no ] committed-action { drop | transmit | mark-exp expValue }
For hierarchical rate-limit profiles:
[ no ] committed-action { drop | transmit [ conditional | unconditional | final ] }
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
conditional, unconditional, and final keywords added in JUNOSe Release 7.2.0.
Sets the action for packets conforming to the committed rate and committed burst
size and conforming to the exceed rate and exceed burst size for a rate-limit profile.
The no version restores the value to the default value, drop.
■
drop—Drops the packet
■
transmit—Transmits the packet; for hierarchical rate limits:
■
conditional—Packets must pass the next rate limit
■
unconditional—Packets take resources, but are not affected by the rest of
the hierarchy
■
final—Packets exit the hierarchy at rate limit
■
markVal—Value in the range 0–255
■
expValue—EXP bit value in the range 0–7
Rate Limit Profile Configuration
■
Creating a Two-Rate Rate-Limit Profile
committed-action
■
443
JUNOSe 11.0.x Command Reference Guide A to M
committed-burst
Syntax
committed-burst { size | millisecond milliseconds }
no committed-burst
Release Information
Description
Options
Mode
Related Topics
444
■
committed-burst
Command introduced before JUNOSe Release 7.1.0.
milliseconds variable added in JUNOSe Release 8.1.0.
Sets the committed burst for a rate limit profile. The no version restores the default
value, 100 ms; if 100ms is less than 8K, then 8K (8192).
■
size—Size in bytes in the range 1–4294967295
■
milliseconds—Milliseconds in the range 1–10000
Rate Limit Profile Configuration
■
Creating a Two-Rate Rate-Limit Profile
Chapter 4: C Commands
committed-drop-threshold
Syntax
committed-drop-threshold committedDropThreshold
no committed-drop-threshold
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Configures the threshold above which committed-drop-events are logged. The no
version removes the threshold.
■
committedDropThreshold—Bits per second in the range 0–1073741824
Statistics Profile Configuration
■
Configuring Event Statistics
committed-drop-threshold
■
445
JUNOSe 11.0.x Command Reference Guide A to M
committed-length
Syntax
committed-length minimumCommittedLength [ maximumCommittedLength ]
no committed-length
Release Information
Description
Options
Mode
Related Topics
446
■
committed-length
Command introduced before JUNOSe Release 7.1.0.
Sets minimum and maximum constraints for the queue's committed lengths. The
no version removes constraints on the queue's committed length.
■
minimumCommittedLength—Range 0–1073741824
■
maximumCommittedLength—Range 0–1073741824
Queue Profile Configuration
■
Configuring Queue Profiles to Manage Buffers and Thresholds
Chapter 4: C Commands
committed-rate
Syntax
committed-rate { rate | parameterName percentage percentValue }
no committed-rate
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
parameterName and percentValue variables added in JUNOSe Release 8.1.0.
Sets the committed rate for a rate-limit profile as a specified value or as a percentage
of a reference rate defined in the specified policy parameter. The no version restores
the default value, 0.
■
rate—Rate in bits per second in the range 0–4294967295
■
parameterName—Name of policy parameter up to 40 characters
■
percentValue—Percentage in the range 0–100
Rate Limit Profile Configuration
■
Creating a Two-Rate Rate-Limit Profile
■
Setting the Committed Rate for a Rate-Limit Profile
committed-rate
■
447
JUNOSe 11.0.x Command Reference Guide A to M
committed-threshold
Syntax
committed-threshold { percent MinThresholdPercent MaxThresholdPercent |
MinThresholdBytes MaxThresholdBytes } MaxDropProbability
no committed-threshold
Release Information
Description
Options
Mode
Related Topics
448
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the committed queue thresholds and maximum drop probability. The no
version removes committed threshold.
■
percent—Specifies committed queue thresholds as percentages
■
MinThresholdPercent—Minimum queue threshold as a percentage of queue length
■
MaxThresholdPercent—Maximum queue threshold as a percentage of queue
length
■
MinThresholdBytes—Minimum queue threshold in bytes
■
MaxThresholdBytes—Maximum queue threshold in bytes
■
MaxDropProbability—Maximum drop probability
Drop Profile Configuration
■
Configuring RED
■
Configuring WRED
committed-threshold
Chapter 4: C Commands
common-name
Syntax
Release Information
Description
Options
Mode
[ no ] common-name commonName
Command introduced before JUNOSe Release 7.1.0.
Specifies a common name used to generate certificate requests. The no version
removes the common name.
■
commonName—Name of up to 60 characters
IPSec Identity Configuration
common-name
■
449
JUNOSe 11.0.x Command Reference Guide A to M
configure
Syntax
Release Information
Description
configure [ terminal | file [ fileName ] [ verbose | show-progress [ dotPeriod ] ] ]
Command introduced before JUNOSe Release 7.1.0.
Enters Global Configuration mode. There is no no version.
NOTE: This command is not allowed for a short time after a warm restart (warm
switchover) occurs. This behavior allows some applications time to complete their
warm-restart initialization. However, if the warm-restart does not complete in 5
minutes, the warm-start is cancelled and configuration access is restored.
Options
Mode
450
■
configure
■
terminal—Enables manual configuration from a terminal
■
file—Configures the router from a script file
■
fileName—Script file to execute
■
verbose—Echoes each command as the script is executed
■
show-progress—Displays a ‘.’ during script execution
■
dotPeriod—Number of commands executed before a ‘.’ is displayed; default value
is 100
Privileged Exec
Chapter 4: C Commands
confirmations explicit
Syntax
Release Information
Description
Mode
[ no ] confirmations explicit
Command introduced before JUNOSe Release 7.1.0.
Requires the user to enter y, ye, or yes to confirm a prompt, and to enter n or no to
deny a prompt. The no version restores the default state, which permits pressing
<Enter> or <y> to confirm a prompt and entering any other characters to deny
a prompt.
Global Configuration
confirmations explicit
■
451
JUNOSe 11.0.x Command Reference Guide A to M
conformed-action
Syntax
For IP and IPv6 rate-limit profiles:
[ no ] conformed-action { drop | transmit | mark markVal }
For L2TP rate-limit profiles:
[ no ] conformed-action { drop | transmit }
For MPLS rate-limit profiles:
[ no ] conformed-action { drop | transmit | mark-exp expValue }
For hierarchical rate-limit profiles:
[ no ] conformed-action { drop | transmit [ conditional | unconditional | final ] }
Release Information
Description
Options
Mode
Related Topics
452
■
conformed-action
Command introduced before JUNOSe Release 7.1.0.
Sets the action for packets not conforming to the committed rate and committed
burst size, but conforming to the peak rate and peak burst size for a rate-limit profile.
The no version restores the value to the default value, drop.
■
drop—Drops the packet
■
transmit—Transmits the packet; for hierarchical rate limits:
■
conditional—Packets must pass the next rate limit
■
unconditional—Packets take resources, but are not affected by the rest of
the hierarchy
■
final—Packets exit the hierarchy at rate limit
■
markVal—Value in the range 0–255
■
expValue—EXP bit value in the range 0–7
Rate Limit Profile Configuration
■
Creating a Two-Rate Rate-Limit Profile
Chapter 4: C Commands
conformed-drop-threshold
Syntax
conformed-drop-threshold conformedDropThreshold
no conformed-drop-threshold
Release Information
Command introduced before JUNOSe Release 7.1.0.
conditional, unconditional, and final keywords added in JUNOSe Release 7.2.0.
Description
Configures the threshold above which conformed-drop-events are logged. The no
version removes the threshold.
Options
Mode
Related Topics
■
conformedDropThreshold—Bits per second in the range 0–1073741824
Statistics Profile Configuration
■
Configuring Event Statistics
conformed-drop-threshold
■
453
JUNOSe 11.0.x Command Reference Guide A to M
conformed-fraction
Syntax
conformed-fraction conformedFraction
no conformed-fraction
Release Information
Description
Options
Mode
Related Topics
454
■
Command introduced before JUNOSe Release 7.1.0.
Sets the percentage of the total queue that can be occupied before dropping
conformed packets. The no version returns the conformed fraction to its default
setting.
■
conformedFraction—Percentage in the range 0–100; default value is 50
Queue Profile Configuration
■
conformed-fraction
Configuring Queue Profiles to Manage Buffers and Thresholds
Chapter 4: C Commands
conformed-length
Syntax
conformed-length minimumConformedLength [ maximumConformedLength ]
no conformed-length
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Sets minimum and maximum constraints for the queue's conformed lengths. The
no version removes constraints on the queue's conformed length.
■
minimumConformedLength—Number in the range 0–1073741824
■
maximumConformedLength—Number in the range 0–1073741824
Queue Profile Configuration
■
Configuring Queue Profiles to Manage Buffers and Thresholds
conformed-length
■
455
JUNOSe 11.0.x Command Reference Guide A to M
conformed-threshold
Syntax
conformed-threshold { percent MinThresholdPercent MaxThresholdPercent |
MinThresholdBytes MaxThresholdBytes } MaxDropProbability
no conformed-threshold
Release Information
Description
Options
Mode
Related Topics
456
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the conformed queue thresholds and maximum drop probability. The no
version removes conformed threshold.
■
percent—Specifies conformed queue thresholds as percentages
■
MinThresholdPercent—Minimum queue threshold as a percentage of queue length
■
MaxThresholdPercent—Maximum queue threshold as a percentage of queue
length
■
MinThresholdBytes—Minimum queue threshold in bytes
■
MaxThresholdBytes—Maximum queue threshold in bytes
■
MaxDropProbability—Maximum drop probability
Drop Profile Configuration
■
Configuring RED
■
Configuring WRED
conformed-threshold
Chapter 4: C Commands
control-plane
Syntax
Release Information
Description
Mode
Related Topics
control-plane
Command introduced in JUNOSe Release 8.0.0.
Enters Control Plane Configuration mode. There is no no version.
Global Configuration
■
Rate-Limiting Traffic Flows
control-plane
■
457
JUNOSe 11.0.x Command Reference Guide A to M
controlled-interface-type
Syntax
controlled-interface-type { controlledInterfaceType | set | superset }
no controlled-interface-type { controlledInterfaceType | all }
Release Information
Description
Options
Mode
Related Topics
458
■
Command introduced in JUNOSe Release 7.1.0.
set and superset keywords added in JUNOSe Release 9.2.0.
Assigns controlled-interface types to a QoS parameter definition. Controlled-interface
types specify the types of logical interfaces whose queues and nodes can be controlled
by instances of the parameter definition. You can specify up to four
controlled-interface types for each parameter definition. The no version removes
the controlled-interface type from the parameter definition.
■
controlledInterfaceType—One of the following controlled-interface types: atm,
atm-vc, atm-vp, bridge, ethernet, fr-vc, ip, ip-tunnel, ipv6, l2tp-session, l2tp-tunnel,
lsp, serial, svlan, server-port, vlan
■
set—Specifies an interface set as a controlled-interface type
■
superset—Specifies an interface superset as a controlled-interface type
■
all—Removes all controlled-interface types
QoS Parameter Definition
■
Configuring a Basic Parameter Definition for QoS Administrators
■
Creating a QoS Parameter on an Interface Superset or Interface Set
controlled-interface-type
Chapter 4: C Commands
controller e3
Syntax
Release Information
Description
Options
Mode
controller e3 interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Accesses Controller Configuration mode so that you can configure an E3 controller.
There is no no version.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
controller e3
■
459
JUNOSe 11.0.x Command Reference Guide A to M
controller sonet
Syntax
Release Information
Description
Options
Mode
460
■
controller sonet
controller sonet interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Selects an interface on which you want to configure SONET or SDH. There is no no
version.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
Chapter 4: C Commands
controller t3
Syntax
Release Information
Description
Options
Mode
controller t3 interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Accesses Controller Configuration mode so that you can configure a T3 controller.
There is no no version.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
controller t3
■
461
JUNOSe 11.0.x Command Reference Guide A to M
convergence-factor
Syntax
convergence-factor convergenceFactor
no convergence-factor
Release Information
Description
Options
Mode
Related Topics
462
■
Command introduced in JUNOSe Release 8.0.0.
Specifies the convergence factor for all simple shared shapers on the router. The
convergence factor determines how quickly the dynamic shaping rate converges
with the calculated dynamic shaping rate, and is expressed as a percentage of the
available bandwidth. The no version removes the specified convergence factor from
all simple shared shapers on the router.
■
convergenceFactor—Percentage value in the range 0–99; default value is 50
QoS Shared Shaper Control Configuration
■
convergence-factor
Configuring Simple Shared Shaper Algorithm Variables
Chapter 4: C Commands
copy
Syntax
Release Information
Description
copy [ sourcePath ]sourceFilename [ destinationPath ]destinationFilename [ force ]
Command introduced before JUNOSe Release 7.1.0.
hostName and deviceName variables added in JUNOSe Release 7.2.0.
Copies a local or network file. There is no no version.
NOTE: You cannot change the extension of a file, for example, from .mac to .scr.
You can copy software release (.rel) files only to the router (download); you cannot
copy them from the router (upload). See Copying and Redirecting Files in the JUNOSe
System Basics Configuration Guide, for detailed information on file type usage with
the copy command.
Options
■
sourcePath—Path to the source in the format:
hostName: | deviceName: | /incoming/subdirectory/ | /outgoing/subdirectory/
■
hostName:—Name of the network host
■
deviceName:—Name of the device specifying a flash card slot
■
disk0—Specifies flash card slot 0 on the primary SRP module; if no device
is specified for the primary SRP module, then disk0 is used
■
disk1—Specifies flash card slot 1 on the primary SRP module; source and
destination file types must be .dmp; supported only on the E120 and E320
routers
■
standby—Specifies flash card slot 0 on the standby SRP module for backward
compatibility
■
standby-disk0—Specifies flash card slot 0 on the standby SRP module
■
standby-disk1—Specifies flash card slot 1 on the standby SRP module; source
and destination file types must be .dmp; supported only on the E120 and
E320 routers
■
incoming—Specifies the router's incoming FTP directory
■
subdirectory—Name of a subdirectory on the router's FTP server. If the
subdirectory does not exist, the router creates it.
■
outgoing—Specifies the router's outgoing FTP directory
■
sourceFilename—Name of the the source file
■
destinationPath—Path to the destination in the format:
networkPath | /incoming/subdirectory | /outgoing/subdirectory
copy
■
463
JUNOSe 11.0.x Command Reference Guide A to M
Mode
464
■
copy
■
networkPath—Path to the network host
■
incoming—Specifies the incoming router's FTP directory
■
subdirectory—Name of a subdirectory on the ERX router's FTP server. If the
subdirectory does not exist, the router creates it.
■
outgoing—Specifies the router's outgoing FTP directory
■
destinationFilename—Name of the destination file
■
force—Forces a copy, even when the destination file already exists; if a file is
marked by the file system as in use because it is required for the current operation
or configuration, the force keyword cannot force a copy of that file
Privileged Exec
Chapter 4: C Commands
copy running-configuration
Syntax
Release Information
Description
Options
copy running-configuration destination [ force ] [ include-text-config ]
Command introduced before JUNOSe Release 7.1.0.
include-text-config keyword added in JUNOSe Release 9.1.0.
Saves the configuration currently running on the router to a local or remote (network)
router configuration file (.cnf) in compressed format. Available only if the router is
in Automatic Commit mode. There is no no version.
■
destination—Destination filename (*.cnf)
■
force—Creates a copy even when the destination file already exists
■
include-text-config—Generates the .cnf file, including the text configuration, in
compressed format
NOTE: A Perl script is provided in the Tools folder on the JUNOSe Software CD shipped
with your router that enables you to view the text configuration in a configuration
file that contains both binary and text configuration. The Perl script supports multiple
platforms. The “Usage and Troubleshooting document for desktop tool” file in PDF
format provides an explanation of how to extract the system configuration file, using
the extractScrFromCnf.pl script.
Mode
Privileged Exec
copy running-configuration
■
465
JUNOSe 11.0.x Command Reference Guide A to M
copy running-configuration startup-configuration
Syntax
Release Information
Description
Mode
466
■
copy running-configuration startup-configuration
Command introduced before JUNOSe Release 7.1.0.
Saves all outstanding (unsaved) configuration changes to nonvolatile storage; an
exact alias of the write memory command. Available if the router is in either
Automatic Commit mode or Manual Commit mode. If you issue this command from
Automatic Commit mode, the CLI notifies you that the command is not necessary,
but allows you to proceed. This command is prevented during the high availability
initialization state. If the command is issued during this state, the CLI notifies you of
the state and requests that you try again later. There is no no version.
Privileged Exec
copy running-configuration startup-configuration
Chapter 4: C Commands
copy startup-configuration
Syntax
Release Information
Description
Options
Mode
copy startup-configuration destination [ force ]
Command introduced before JUNOSe Release 7.1.0.
Copies the previously saved startup configuration to a local or remote (network)
router configuration (*.cnf) file. Available only if the router is in Manual Commit
mode. If you have made but not saved any configuration changes, those changes
are not in the startup configuration. There is no no version.
■
destination—Destination filename (*.cnf)
■
force—Creates a copy even if the destination file already exists
Privileged Exec
copy startup-configuration
■
467
JUNOSe 11.0.x Command Reference Guide A to M
cost
Syntax
cost intfCost
no cost
Release Information
Description
Options
Mode
468
■
cost
Command introduced before JUNOSe Release 7.1.0.
Specifies a cost metric for an OSPF remote-neighbor interface. Used in the calculation
of the SPF routing table. The no version restores the default value.
■
intfCost—Link-state metric cost; a number in the range 1–65535; default value
is 10 if there is no route to the remote neighbor; otherwise, the default is
calculated based on the bandwidth of the physical interface used to reach the
remote neighbor and the OSPF auto-cost reference bandwidth
Remote Neighbor Configuration
Chapter 4: C Commands
country
Syntax
Release Information
Description
Options
Mode
[ no ] country countryCode
Command introduced before JUNOSe Release 7.1.0.
Specifies a country name used to generate certificate requests. The no version
removes the country name.
■
countryCode—Two-character country name
IPSec Identity Configuration
country
■
469
JUNOSe 11.0.x Command Reference Guide A to M
crc
Syntax
crc { 16 | 32 | none }
no crc
Release Information
Description
Options
Mode
470
■
crc
Command introduced before JUNOSe Release 7.1.0.
Sets the size of the cyclic redundancy check. CRC is an error-checking technique that
uses a calculated numeric value to detect errors in transmitted data. 16 and 32
indicate the number of check digits per frame that are used to calculate the FCS.
Both the sender and receiver must use the same setting. The default value is 16. The
no version restores the value to the default.
■
16—Specifies CRC-16, which transmits streams of 8-bit characters and generates
16-bit check bits per frame
■
32—Specifies CRC-32, which transmits longer streams at faster rates and
therefore provides better ongoing error detection
■
none—Disables CRC checking
Interface Configuration
Chapter 4: C Commands
crl
Syntax
crl { ignored | optional | required }
no crl
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Controls how the router checks certificate revocation lists (CRLs) when determining
whether to accept a peer's certificates. The no version restores the default setting.
■
ignored—Specifies that the router will not try to find or use CRLs
■
optional—Specifies that the router will try to find a CRL. If a CRL is found, the
peer certificate must not appear in the CRL. If no CRL is found, the peer can still
authenticate; this is the default.
■
required—Specifies that the router must find a valid CRL; the CRL must be current,
and the peer certificate must not appear in the CRL
IPSec CA Identity Configuration
crl
■
471
JUNOSe 11.0.x Command Reference Guide A to M
crypto key dss
Syntax
Release Information
Description
Options
Mode
472
■
crypto key dss
crypto key { generate | zeroize } dss
Command introduced before JUNOSe Release 7.1.0.
Controls SSH server daemon and creation/deletion of SSH server host key. This
command is not displayed by the show config command. There is no no version.
■
generate—Creates the SSH server host key and enables the daemon
■
zeroize—Deletes the SSH server host key and stops the SSH daemon if it is
running. Issuing this command terminates any active client sessions. The next
time the router boots after this command is issued, the SSH server daemon is
not started.
Global Configuration
Chapter 5
D Commands
■
473
JUNOSe 11.0.x Command Reference Guide A to M
data-character-bits
Syntax
Release Information
Description
Options
Mode
474
■
data-character bits { 7 | 8 }
Command introduced before JUNOSe Release 7.1.0.
Sets the number of data bits available for characters for all sessions on the specified
vty lines. There is no no version.
■
7—Specifies 7 data bits per character; this setting supports only characters in
the standard ASCII set
■
8—Specifies 8 data bits per character; default setting, supports the full set of
8-bit international characters
Line Configuration
data-character-bits
Chapter 5: D Commands
dead-interval
Syntax
dead-interval deadInterval
no dead-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the time period that the OSPF router waits without seeing hello packets from a
remote neighbor before declaring the neighbor to be down. The no version restores
the default value.
■
deadInterval—Number in the range 1–65535 seconds; default value is 40 seconds
Remote Neighbor Configuration
dead-interval
■
475
JUNOSe 11.0.x Command Reference Guide A to M
deadtime
Syntax
deadtime recovery
no deadtime
Release Information
Description
Options
Mode
476
■
deadtime
Command introduced before JUNOSe Release 7.1.0.
Configures the amount of time, in minutes, that a server is marked as unavailable if
a request times out for the configured retry count. If a server fails to answer a request,
it is marked “ unavailable” by the router. The router does not send requests to the
server for the configured time. The no version restores the default value, 0, turning
off the deadtime mechanism.
■
recovery—Number of minutes that a server is marked as unavailable, in the range
0–1440; default value is 0
RADIUS Configuration
Chapter 5: D Commands
debounce
Syntax
debounce [ seconds ]
no debounce
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 9.3.0.
Enables the debounce timer and sets the time interval that the interface waits before
reporting a state change to the upper-layer protocols. The no version restores the
default behavior, disabling debounce on the interface.
■
seconds—Interval for which an interface must maintain a given state before the
interface reports the state change to the upper-layer protocols. Number in the
range 1–5 seconds; default value is 1 second.
Interface Configuration
debounce
■
477
JUNOSe 11.0.x Command Reference Guide A to M
debounce-interval
Syntax
debounce-interval seconds
no debounce-interval
Release Information
Description
Command introduced in JUNOSe Release 9.3.0.
Modifies the minimum time an Ethernet interface must maintain a given state—for
example, up or down—before the interface notifies the upper-layer protocols of the
state change. The no version restores the default value, 1 second.
NOTE: You can configure this command only if you have enabled the debounce timer
feature using the debounce command.
Options
Mode
478
■
■
seconds—Interval for which an interface must maintain a given state before the
interface reports the state change to the upper-layer protocols. Number in the
range 1–5 seconds; default value is 1 second.
Interface Configuration
debounce-interval
Chapter 5: D Commands
debounce-time
Syntax
debounce-time interval
no debounce-time
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the interval to wait before bringing up a RIP interface that was brought down.
The no version restores the default value, 10.
■
interval—Seconds in the range 0–60
Address Family Configuration, Router Configuration
debounce-time
■
479
JUNOSe 11.0.x Command Reference Guide A to M
debug ip bgp
Syntax
debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ]
[ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ]
[ route-map mapName ] [ severity { severityValue | severityNumber } ]
[ verbosity verbosityLevel ] [ secondary ]
no debug ip bgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ]
[ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ]
[ route-map mapName ]
Release Information
Description
Options
480
■
debug ip bgp
Command introduced before JUNOSe Release 7.1.0.
Shows information about the selected variable. The no version disables the display.
■
in—Displays information for inbound events
■
out—Displays information for outbound events
■
peerAddress—IP address of BGP peer for which information is displayed
■
peerAddressMask—Network mask of BGP peer for which information is displayed
■
bgpLog—BGP log of interest; one of the following options:
■
dampening—BGP dampening event; route is suppressed or no longer
suppressed by route-flap dampening
■
events—BGP finite state machine events and transitions
■
keepalives—BGP keepalive message events
■
next-hops—BGP next hop events
■
updates—BGP routing table update events
■
routerName—Name of the virtual router that owns the BGP router for which
information is being displayed
■
filteringRouterName—Name of the virtual router that owns the access class and
route map parameters
■
accessClassName—Name of an access list to filter output
■
mapName—Name of a route map to filter output
■
severity—Specifies the minimum severity of the log messages displayed for the
selected category; described either by a descriptive term—severityValue—or by
a corresponding number—severityNumber—in the range 0–7; the lower the
number, the higher the priority:
■
emergency or 0—System unusable
■
alert or 1—Immediate action needed
■
critical or 2—Critical condition exists
Chapter 5: D Commands
■
■
Mode
■
error or 3—Error condition
■
warning or 4—Warning condition
■
notice or 5—Normal but significant condition
■
info or 6—Informational message
■
debug or 7—Debug message
verbosityLevel—Verbosity of the log category's messages; can be any of the
following:
■
low—Terse
■
medium—Moderate detail
■
high—Verbose
secondary—Indicates that the specified filter conditions for the log are imposed
in addition to any that were previously specified; if omitted, the specified filter
conditions replace any that were previously specified
Privileged Exec
debug ip bgp
■
481
JUNOSe 11.0.x Command Reference Guide A to M
debug ip mbgp
Syntax
debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ]
[ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ]
[ route-map mapName ] [ severity { severityValue | severityNumber } ]
[ verbosity verbosityLevel ] [ secondary ]
no debug ip mbgp [ in | out ] [ peerAddress [ peerAddressMask ] ] [ bgpLog ]
[ router routerName ] [ filtering-router filteringRouterName ] [ accessClassName ]
[ route-map mapName ]
Release Information
Description
Options
482
■
debug ip mbgp
Command introduced before JUNOSe Release 7.1.0.
Shows information about the selected variable. The no version disables the display.
■
in—Displays information for inbound events
■
out—Displays information for outbound events
■
peerAddress—IP address of BGP peer for which information is displayed
■
peerAddressMask—Network mask of BGP peer for which information is displayed
■
bgpLog—BGP log of interest; one of the following options:
■
dampening—BGP dampening event; route is suppressed or no longer
suppressed by route-flap dampening
■
events—BGP finite state machine events and transitions
■
keepalives—BGP keepalive message events
■
next-hops—BGP next hop events
■
updates—BGP routing table update events
■
routerName—Name of the virtual router that owns the BGP router for which
information is being displayed
■
filteringRouterName—Name of the virtual router that owns the access class and
route map parameters
■
accessClassName—Name of an access list to filter output
■
mapName —Name of a route map to filter output
■
severity—Specifies the minimum severity of the log messages displayed for the
selected category; described either by a descriptive term—severityValue—or by
a corresponding number—severityNumber—in the range 0–7; the lower the
number, the higher the priority:
■
emergency or 0—System unusable
■
alert or 1—Immediate action needed
■
critical or 2—Critical condition exists
Chapter 5: D Commands
■
■
Mode
■
error or 3—Error condition
■
warning or 4—Warning condition
■
notice or 5—Normal but significant condition
■
info or 6—Informational message
■
debug or 7—Debug message
verbosityLevel—Verbosity of the log category's messages; can be any of the
following:
■
low—Terse
■
medium—Moderate detail
■
high—Verbose
secondary—Indicates that the specified filter conditions for the log are imposed
in addition to any that were previously specified; if omitted, the specified filter
conditions replace any that were previously specified
Privileged Exec
debug ip mbgp
■
483
JUNOSe 11.0.x Command Reference Guide A to M
debug ip ospf
Syntax
debug ip ospf ospfLog [ severity { severityValue | severityNumber } ]
[ verbosity verbosityLevel ]
no debug ip ospf ospfLog
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Shows information about the selected variable. The no version disables the display.
■
■
484
■
debug ip ospf
ospfLog—OSPF log of interest; one of the following options:
■
adj—OSPF adjacency events
■
elect-dr—OSPF designated router election
■
events—OSPF general events
■
lsa—OSPF link-state advertisements events
■
neighbor—OSPF neighbor state machine
■
packets-rcvd—OSPF packets received
■
packets-sent—OSPF packets sent
■
route—OSPF route events
■
spf—All OSPF shortest path first calculation events
■
spf-ext—OSPF shortest path first external route calculation events
■
spf-inter—OSPF shortest path first interarea route calculation events
■
spf-intra—OSPF shortest path first intra-area route calculation events
severity—Specifies the minimum severity of the log messages displayed for the
selected category; described either by a descriptive term—severityValue—or by
a corresponding number—severityNumber—in the range 0–7; the lower the
number, the higher the priority:
■
emergency or 0—System unusable
■
alert or 1—Immediate action needed
■
critical or 2—Critical condition exists
■
error or 3—Error condition
■
warning or 4—Warning condition
■
notice or 5—Normal but significant condition
Chapter 5: D Commands
■
Mode
■
info or 6—Informational message
■
debug or 7—Debug message
verbosityLevel—Verbosity of the log category's messages; can be any of the
following:
■
low—Terse
■
medium—Moderate detail
■
high—Verbose
Privileged Exec
debug ip ospf
■
485
JUNOSe 11.0.x Command Reference Guide A to M
debug ip pim
Syntax
The syntax differs for PIM Dense Mode and PIM Sparse Mode.
PIM Dense Mode:
debug ip pim { pimLog [ severity { severityValue | severityNumber } ]
[ verbosity verbosityLevel ] | switchState groupAddress sourceAddress |
dense-mode { on | off } }
PIM Sparse Mode:
debug ip pim { pimLog [ severity { severityValue | severityNumber } ]
[ verbosity verbosityLevel ] | switchState groupAddress sourceAddress |
sparse-mode { on | off | sg-state [ group groupAddress
[ source sourceAddress ] | rp rpAddress ] [ count ] } }
no debug ip pim pimLog
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Shows information about the selected variable. The no version disables the display.
■
■
486
■
debug ip pim
pimLog—PIM log of interest; one of the following options:
■
autoRp-rcvd—Auto-RP packets received
■
autoRP-sent—Auto-RP packets sent
■
engineering—PIM engineering
■
hellos-rcvd—PIM hello messages received
■
hellos-sent—PIM hello messages sent
■
packets—PIM packets received and sent
■
packets-rcvd—PIM packets received
■
packets-sent—PIM packets sent
severity—Specifies the minimum severity of the log messages displayed for the
selected category; described either by a descriptive term—severityValue—or by
a corresponding number—severityNumber—in the range 0–7; the lower the
number, the higher the priority:
■
emergency or 0—System unusable
■
alert or 1—Immediate action needed
■
critical or 2—Critical condition exists
■
error or 3—Error condition
Chapter 5: D Commands
■
■
Mode
■
warning or 4—Warning condition
■
notice or 5—Normal but significant condition
■
info or 6—Informational message
■
debug or 7—Debug message
verbosityLevel—Verbosity of the log category's messages; can be any of the
following:
■
low—Terse
■
medium—Moderate detail
■
high—Verbose
switchState—Switches from one type of tree to another
■
rpt-switch—Switch from a shortest-path tree to a shared path tree
■
spt-switch—Switch from a shared-path tree to a shortest path tree
■
groupAddress—IP address of the multicast group
■
sourceAddress—IP address of the multicast source
■
on—Turns on the specified PIM mode on all virtual routers
■
off—Turns off the specified PIM mode on all virtual routers
■
sg-state—Displays information about the relationship between a source, multicast
group, and RP router
■
rp—Displays information about the relationships between sources, groups, and
the specified RP router
■
rpAddress—Address of the RP router
■
count—Displays one of the following
■
(with no optional keywords) number of relationships between a source,
multicast group, and RP router
■
(with the group keyword) number of sources associated with the multicast
group for PIM sparse mode
■
(with the source and group keywords) number of source-group pairs for PIM
sparse mode
■
(with the rp keyword) number of source-group pairs associated with the RP
router for PIM sparse mode
Privileged Exec
debug ip pim
■
487
JUNOSe 11.0.x Command Reference Guide A to M
debug ip rip
Syntax
debug ip rip ripLog [ severity { severityValue | severityNumber } ]
[ verbosity verbosityLevel ]
no debug ip rip ripLog
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Shows information about the selected variable. The no version disables the display.
■
■
■
Mode
488
■
debug ip rip
ripLog—RIP log of interest; one of the following options:
■
events—General RIP events, such as removing RIP from an interface or
creating the RIP process
■
route—Events associated with two RIP routers exchanging routes
severity—Specifies the minimum severity of the log messages displayed for the
selected category; described either by a descriptive term—severityValue—or by
a corresponding number—severityNumber—in the range 0–7; the lower the
number, the higher the priority:
■
emergency or 0—System unusable
■
alert or 1—Immediate action needed
■
critical or 2—Critical condition exists
■
error or 3—Error condition
■
warning or 4—Warning condition
■
notice or 5—Normal but significant condition
■
info or 6—Informational message
■
debug or 7—Debug message
verbosityLevel—Verbosity of the log category's messages; can be any of the
following:
■
low—Terse
■
medium—Moderate detail
■
high—Verbose
Privileged Exec
Chapter 5: D Commands
debug ipv6 ospf
Syntax
debug ipv6 ospf ospfLog [ severity { severityValue | severityNumber } ]
[ verbosity verbosityLevel ]
no debug ipv6 ospf ospfLog
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Shows information about the selected variable. The no version disables the display.
■
■
ospfLog—OSPF log of interest; one of the following options:
■
adj—OSPF adjacency events
■
elect-dr—OSPF designated router election
■
events—OSPF general events
■
lsa—OSPF link-state advertisements events
■
neighbor—OSPF neighbor state machine
■
packets-rcvd—OSPF packets received
■
packets-sent—OSPF packets sent
■
route—OSPF route events
■
spf—All OSPF shortest path first calculation events
■
spf-ext—OSPF shortest path first external route calculation events
■
spf-inter—OSPF shortest path first interarea route calculation events
■
spf-intra—OSPF shortest path first intra-area route calculation events
severity—Specifies the minimum severity of the log messages displayed for the
selected category; described either by a descriptive term—severityValue—or by
a corresponding number—severityNumber—in the range 0–7; the lower the
number, the higher the priority:
■
emergency or 0—System unusable
■
alert or 1—Immediate action needed
■
critical or 2—Critical condition exists
■
error or 3—Error condition
■
warning or 4—Warning condition
■
notice or 5—Normal but significant condition
debug ipv6 ospf
■
489
JUNOSe 11.0.x Command Reference Guide A to M
■
Mode
490
■
debug ipv6 ospf
■
info or 6—Informational message
■
debug or 7—Debug message
verbosityLevel—Verbosity of the log category's messages; can be any of the
following:
■
low—Terse
■
medium—Moderate detail
■
high—Verbose
Privileged Exec
Chapter 5: D Commands
debug ipv6 pim
Syntax
debug ipv6 pim
{ pimLog [ severity { severityValue | severityNumber } ] [ verbosity verbosityLevel ] |
switchState groupAddress sourceAddress |
dense-mode { on | off } |
sparse-mode { on | off | sg-state [ group groupAddress
[ source sourceAddress ] | rp rpAddress ] [ count ] } }
no debug ipv6 pim pimLog
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Shows information about the selected variable. The no version disables the display.
■
■
pimLog—PIM log of interest; one of the following options:
■
autoRp-rcvd—Auto-RP packets received
■
autoRP-sent—Auto-RP packets sent
■
engineering—PIM engineering
■
hellos-rcvd—PIM hello messages received
■
hellos-sent—PIM hello messages sent
■
packets—PIM packets received and sent
■
packets-rcvd—PIM packets received
■
packets-sent—PIM packets sent
severity—Specifies the minimum severity of the log messages displayed for the
selected category; described either by a descriptive term—severityValue—or by
a corresponding number—severityNumber—in the range 0–7; the lower the
number, the higher the priority:
■
emergency or 0—System unusable
■
alert or 1—Immediate action needed
■
critical or 2—Critical condition exists
■
error or 3—Error condition
■
warning or 4—Warning condition
■
notice or 5—Normal but significant condition
■
info or 6—Informational message
■
debug or 7—Debug message
debug ipv6 pim
■
491
JUNOSe 11.0.x Command Reference Guide A to M
■
■
Mode
492
■
debug ipv6 pim
verbosityLevel—Verbosity of the log category's messages; can be any of the
following:
■
low—Terse
■
medium—Moderate detail
■
high—Verbose
switchState—Switches from one type of tree to another
■
rpt-switch—Switch from a shortest-path tree to a shared path tree
■
spt-switch—Switch from a shared-path tree to a shortest path tree
■
groupAddress—IPv6 address of the multicast group
■
sourceAddress—IPv6 address of the multicast source
■
on—Turns on the specified PIM mode on all virtual routers
■
off—Turns off the specified PIM mode on all virtual routers
■
sg-state—Displays information about the relationship between a source, multicast
group, and RP router
■
rp—Displays information about the relationships between sources, groups, and
the specified RP router
■
rpAddress—Address of the RP router
■
count—Displays one of the following
■
(with no optional keywords) number of relationships between a source,
multicast group, and RP router
■
(with the group keyword) number of sources associated with the multicast
group for PIM sparse mode
■
(with the source and group keywords) number of source-group pairs for PIM
sparse mode
■
(with the rp keyword) number of source-group pairs associated with the RP
router for PIM sparse mode
Privileged Exec
Chapter 5: D Commands
debug isis
Syntax
debug isis isisLog [ severity { severityValue | severityNumber } ]
[ verbosity verbosityLevel ]
no debug isis isisLog
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Displays debug-related information about selected IS-IS log parameters. This command
manipulates the same log as the Global Configuration log commands. The no version
disables debugging display.
■
■
isisLog—IS-IS log of interest; one of the following options:
■
adj-packets—IS-IS adjacency-related packets, such as hello packets sent and
IS-IS received adjacencies going up and down
■
mpls traffic-eng advertisements—MPLS traffic-engineering agent
advertisements
■
mpls traffic-eng agents—MPLS traffic-engineering agents
■
snp-packets—IS-IS CSNPs/PSNPs
■
spf-events—Shortest path first events
■
spf-statistics—SPF timing and statistic data
■
spf-triggers—SPF triggering events
■
update-packets—Update-related packets
severity—Specifies the minimum severity of the log messages displayed for the
selected category; described either by a descriptive term—severityValue—or by
a corresponding number—severityNumber—in the range 0–7; the lower the
number, the higher the priority:
■
emergency or 0—System unusable
■
alert or 1—Immediate action needed
■
critical or 2—Critical condition exists
■
error or 3—Error condition
■
warning or 4—Warning condition
■
notice or 5—Normal but significant condition
■
info or 6—Informational message
■
debug or 7—Debug message
debug isis
■
493
JUNOSe 11.0.x Command Reference Guide A to M
■
Mode
494
■
debug isis
verbosityLevel—Verbosity of the log category's messages; can be any of the
following:
■
low—Terse
■
medium—Moderate detail
■
high—Verbose
Privileged Exec
Chapter 5: D Commands
default-fields peer
Syntax
Release Information
Description
Options
[ no ] default-fields peer fieldOptions
Command introduced before JUNOSe Release 7.1.0.
Specifies the fields that will appear by default in the output of subsequently issued
show ip bgp summary and show bgp ipv6 summary commands. The no version
removes the fields from the output.
■
fieldOptions—Field(s) to be displayed, in the format
all | [ dynamic | intro | last-reset-reason | messages-received | messages-sent |
more-in-queue | peer-type | prefixes-received | remote-as | rib-version |
send-queue-length| state | times-up | up-down-time | updates-received |
updates-sent ]*
■
all—All available information; not recommended, because this information
for each network does not fit on a single line and is difficult to read
■
dynamic—Nature of peer, dynamic or not
■
intro—Introductory information about the state of various BGP attributes;
this information is displayed only if you specify this keyword
■
last-reset-reason —Reason for most recent reset
■
messages-received—Total number of messages received from the peer
■
messages-sent—Total number of messages sent to the peer
■
more-in-queue—Status indicating whether any messages are waiting to be
sent to this peer
■
peer-type—Type of BGP peer: internal, external, or confederation
■
prefixes-received—Number of unique prefixes received from the peer
■
remote-as—Remote AS number of the peer
■
rib-version—Last RIB version queued to be sent to this peer
■
send-queue-length—Number of messages queued to be sent to this peer
■
state—State of the BGP session
■
times-up—Number of times the session has been established
■
up-down-time—How long the session has been up or down
■
updates-received—Number of update messages received from the peer
default-fields peer
■
495
JUNOSe 11.0.x Command Reference Guide A to M
Mode
496
■
■
updates-sent—Number of update messages sent to the peer
■
*—Indicates that one or more parameters can be repeated multiple times
in a list in the command line
Router Configuration
default-fields peer
Chapter 5: D Commands
default-fields route
Syntax
Release Information
Description
Options
[ no ] default-fields route fieldOptions
Command introduced before JUNOSe Release 7.1.0.
Specifies the fields that will appear by default in the output of any subsequently
issued show ip bgp or show bgp ipv6 command that displays routes (except for the
show ip bgp summary or show bgp ipv6 summary commands). The no version
removes the fields from the output.
■
fieldOptions—Field(s) to be displayed, in the format
all | [ afi | aggregator | as-path | atomic-aggregate | best | clusters | communities
| extended-communities | imported | intro | in-label | loc-pref | med | next-hop
| next-hop-cost | origin | originator-id | out-label | peer | peer-type | rd | safi |
stale | unknown-types | weight ]*
■
all—All available information; not recommended, because this information
for each network does not fit on a single line and is difficult to read
■
afi—Address family identifier
■
aggregator—AS number and IP address of aggregator
■
as-path—AS path through which this route bas been advertised
■
atomic-aggregate—Whether the atomic aggregate attribute is present
■
best—Whether this is the best route for the prefix
■
clusters—List of cluster IDs through which the route has been advertised
■
communities—Community number associated with the route
■
extended-communities—Extended community
■
imported—Whether the route was imported
■
intro—Introductory information about the state of various BGP attributes;
this information is displayed only if you specify this keyword
■
in-label—MPLS label for the route; the label received with incoming MPLS
frames
■
loc-pref—Local preference for the route
■
med—Multiexit discriminator for the route
■
next-hop—IP address of the next router that is used when forwarding a
packet to the destination network
■
next-hop-cost—Whether the indirect next hop of the route is unreachable,
if not, displays IGP cost to the indirect next hop
default-fields route
■
497
JUNOSe 11.0.x Command Reference Guide A to M
Mode
498
■
■
out-label—MPLS label for the route; the label with outgoing MPLS frames
■
peer—IP address of BGP peer from which route was learned
■
peer-type—Type of BGP peer: internal, external, or confederation
■
origin—Origin of the route
■
originator-id—Router ID of the router in the local AS that originated the route
■
rd—Route distinguisher
■
safi—Subsequent address family identifier
■
stale—Route that has gone stale due to peer restart
■
unknown-types—Attribute codes for unknown path attributes
■
weight—Weight of the route
■
*—Indicates that one or more parameters can be repeated multiple times
in a list in the command line
Router Configuration
default-fields route
Chapter 5: D Commands
default-information originate
Syntax
For BGP:
default-information originate [ route-map mapTag ]
no default-information originate [ route-map [ mapTag ] ]
For IS-IS:
[ no ] default-information originate [ route-map mapTag ]
For RIP:
[ no ] default-information originate [ route-map mapTag ]
default-information originate always
For OSPF:
[ no ] default-information originate [ always | metric metricValue | metric-type 1 |
metric-type 2 | route-map mapTag ]*
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Enables BGP to advertise a default route (0.0.0.0/0) if the default route exists in the
IP routing table. If the default route does not exist, you must configure it using the
ip route command.
When you issue this command in the route-target address family, BGP advertises
the Default-RT-MEM-NLRI route (0:0:0/0)
For IS-IS, OSPF, and RIP, configures a default route for the distribution of default
information into the respective routing domain. IS-IS creates the default route
(0.0.0.0/0) if it does not exist in the IP routing table. OSPF and RIP do not create the
default route unless you use the always option.
For all protocols, the no version disables advertisement of the default route. The
syntax varies with the protocol.
Options
■
mapTag—Name of route map used to import the default route; string of up to
32 characters
■
always—Creates the default route, so that it is always advertised
■
metricValue—Sets the metric for the default route; in the range 0–4294967295
■
metric-type 1—Sets the default route's metric type to OSPF external type 1
default-information originate
■
499
JUNOSe 11.0.x Command Reference Guide A to M
Mode
500
■
■
metric-type 2—Sets the default route's metric type to OSPF external type 2
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Address Family Configuration, Router Configuration
default-information originate
Chapter 5: D Commands
default-metric
Syntax
Release Information
Description
Options
Mode
[ no ] default-metric metricValue [ interfaceType interfaceSpecifier ]
Command introduced before JUNOSe Release 7.1.0.
Configures RIP to use this metric on redistributed routes on all subsequently created
interfaces. The no version restores the default value, 0.
■
metricValue—Metric to apply to routes; in the range 1–16
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Address Family Configuration, Router Configuration
default-metric
■
501
JUNOSe 11.0.x Command Reference Guide A to M
default-router
Syntax
default-router ipAddressPrimary [ ipAddressSecondary ]
no default-router
Release Information
Description
Options
Mode
502
■
default-router
Command introduced before JUNOSe Release 7.1.0.
Specifies the IP address of the router that the subscriber's computer will use for traffic
destined for locations beyond the local subnet. The default router must be on the
same subnet as the local server pool addresses configured with the network
command. The no version removes the association between the address pool and
the router.
■
ipAddressPrimary—IP address of preferred router
■
ipAddressSecondary—IP address of secondary router
DHCP Local Pool Configuration
Chapter 5: D Commands
default-upper-type mlppp
Syntax
default-upper-type mlppp
no default-upper-type
Release Information
Description
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies that L2TP creates an MLPPP interface for the current LNS session when full
LCP proxy data is not available. The no version deletes the MLPPP specification.
L2TP Destination Profile Host Configuration
default-upper-type mlppp
■
503
JUNOSe 11.0.x Command Reference Guide A to M
delete
Syntax
Release Information
Description
delete { filename | directory directoryName[:fileName ] } [ force ]
Command introduced before JUNOSe Release 7.1.0.
fileName variable added for directory keyword in JUNOSe Release 9.1.0.
Deletes a directory or file in nonvolatile storage. There is no no version.
NOTE: For detailed information on file type usage with the delete command, see
Deleting Files in the JUNOSe System Basics Configuration Guide.
Options
■
fileName—Name of the local file you are deleting (for example, system1.cnf); in
User Exec and Privileged Exec mode only, an asterisk (*) in any position in the
filename substitutes for zero or more characters; using an asterisk causes the
CLI to prompt you for confirmation before the file or directory is deleted. You
cannot delete reboot.hty or system.log files when you use an asterisk.
■
directoryName—Path of a directory. To delete a file in user space, specify the
incoming or outgoing directory on the FTP server; you can specify the name of
a subdirectory in the incoming or outgoing directory. You cannot use an asterisk
in a directory name.
■
force—Forces deletion of directory or file even when it is not empty; however,
if a file in the specified directory, or a specified file, is marked by the file system
as in use because it is required for the current operation or configuration, the
force keyword cannot force a deletion of the directory.
The force keyword is ignored when you attempt to delete any .dmp or .tsa file
(unless the deletion is issued from a .mac or .scr file); this means that the CLI
always prompts for confirmation for these file types.
Mode
504
■
delete
Boot, Privileged Exec, User Exec
Chapter 5: D Commands
delta-sampling
Syntax
delta-sampling [ discontinuity-id mibId
| discontinuity-id-type { timeStamp | timeTicks } ]
no delta-sampling [ discontinuity-id ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies delta sampling for the trigger you are configuring. The no version returns
the trigger to the default sampling method—absolute-value sampling.
■
discontinuity-id—Specifies a discontinuity MIB ID for the sample. The
discontinuity MIB ID monitors the sample for any discontinuity errors during
the sample frequency. If a discontinuity error occurs, the router removes the
sampling for that interval.
■
mibId—Object ID of the discontinuity MIB attribute that you want to use for this
trigger
■
discontinuity-id-type—Specifies a discontinuity ID type (either timeStamp or
timeTicks). The discontinuity ID type indicates the time value that you expect
for a specific sample.
SNMP Trigger Configuration
delta-sampling
■
505
JUNOSe 11.0.x Command Reference Guide A to M
deny
Syntax
Release Information
Description
Options
Mode
506
■
deny
[ no ] deny domainName
Command introduced before JUNOSe Release 7.1.0.
Specifies the domain name(s) that are to be denied access to AAA authentication.
The no version negates the command.
■
domainName—Name of the domain; maximum of 64 characters
AAA Profile Configuration
Chapter 5: D Commands
description
Syntax
description name
no description
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
In Controller Configuration mode, assigns a text description or an alias to a CT3, E3,
T3, or SONET/SDH interface. Use the show controllers e3, show controllers sonet,
show controllers t1, or mpls rsvp disable command to display the description. The
no version removes the description or alias.
In VRF Configuration mode, assigns a text description or an alias to the VRF. The no
version removes the description or alias.
NOTE: In Interface Configuration mode, this command has been replaced by the ip
description command for assigning a description to a static IP interface. This
command may be removed completely from Interface Configuration mode in a future
release.
Options
Mode
■
name—Text string or alias of up to 256 characters (in Interface Configuration
mode) or up to 80 characters (in Controller Configuration mode and VRF
Configuration mode)
Controller Configuration, Interface Configuration, VRF Configuration
description
■
507
JUNOSe 11.0.x Command Reference Guide A to M
dhcp delete-binding
Syntax
To delete the DHCP client with the specified binding ID:
dhcp delete-binding bindingId
To delete all DHCP client bindings or all DHCP client bindings of a particular type on
the specified subnet:
dhcp delete-binding { all | all-local | all-external | all-relay-proxy } [ subnetAddress ]
To delete DHCP client bindings of a particular type on the specified subnet:
dhcp delete-binding { local | external | relay-proxy } [ subnetAddress ]
To delete DHCP client bindings for the specified IP prefix:
dhcp delete-binding [ local | external | relay-proxy ] [ subnetAddress ] ip-prefix ipPrefix
To delete DHCP client bindings for the specified interface string:
dhcp delete-binding [ local | external | relay-proxy ] [ subnetAddress ] interface string
To delete DHCP client bindings without a lower-layer interface:
dhcp delete-binding [ local | external | relay-proxy ] [ subnetAddress ] no-interface
To delete DHCP client bindings for the specified agent-circuit-id suboption (suboption
1) string of the DHCP relay agent information option (option 82):
dhcp delete-binding [ local | external | relay-proxy ] [ subnetAddress ] circuit-id string
To delete DHCP client bindings for the specified agent-remote-id suboption (suboption
2) string of the DHCP relay agent information option (option 82):
dhcp delete-binding [ local | external | relay-proxy ] [ subnetAddress ] remote-id string
Release Information
Description
Command introduced in JUNOSe Release 8.1.0.
local, external, relay-proxy, interface, no-interface, ip-prefix, circuit-id, and
remote-id keywords and subnetAddress, ipAddress, and string variables added in
JUNOSe Release 9.3.0.
Deletes the specified DHCP client bindings. There is no no version.
NOTE: This command replaces the deprecated clear ip dhcp-local binding and
dhcp-external delete-binding commands, which may be removed completely in a
future release.
508
■
dhcp delete-binding
Chapter 5: D Commands
Options
■
bindingId—DHCP binding ID for a specific client
■
all—Specifies all DHCP local server, DHCP external server, and DHCP relay proxy
client bindings
■
all-local—Specifies all DHCP local server client bindings
■
all-external—Specifies all DHCP external server client bindings
■
all-relay-proxy—Specifies all DHCP relay proxy client bindings
■
local—Specifies DHCP local server client bindings that meet the deletion criteria
■
external—Specifies DHCP external server client bindings that meet the deletion
criteria
■
relay-proxy—Specifies DHCP relay proxy client bindings that meet the deletion
criteria
■
subnetAddress—IP address of the subnet on which the DHCP clients reside
■
ipPrefix—IP prefix (address and subnetwork mask) of the DHCP clients; for
example, 10.10.10.0/24
■
no-interface—Specifies DHCP clients without a lower-layer interface; use this
keyword to delete DHCP client bindings configured over dynamic interfaces for
which the lower-layer interface has been shut down
■
string—Regular expression string that represents the interface, circuit ID, or
remote ID to be matched; you must enclose elements containing a space within
double quotes (“one element”)
Each element is either a literal string, a metacharacter, or a combination. You
can remove the special meaning of a metacharacter by preceding it with a
backslash (\). Regular expressions support the following metacharacters:
■
^ Matches the beginning of the input string. Alternatively, when used as the
first character within brackets—[^ ]—matches any number except the ones
specified within the brackets.
■
$ Matches the end of the input string
■
. (period) Matches any single character, including white space
■
* Matches 0 or more sequences of the immediately previous character or
pattern.
■
+ Matches 1 or more sequences of the immediately previous character or
pattern
■
? Matches 0 or 1 sequence of the immediately previous character or pattern
■
( ) Specifies patterns for multiple use when followed by one of the multiplier
metacharacters: asterisk *, plus sign +, or question mark ?
■
[ ] Matches any enclosed character; specifies a range of single characters
■
– (hyphen) Used within brackets to specify a range of AS or community
numbers
■
_ (underscore) Matches a ^, a $, a comma, a space, a {, or a }. Placed on
either side of a string to specify a literal and disallow substring matching.
dhcp delete-binding
■
509
JUNOSe 11.0.x Command Reference Guide A to M
Numerals enclosed by underscores can be preceded or followed by any of
the characters listed above
■
| Matches characters on either side of the metacharacter; logical OR
You must specify the interface string as a regular expression without spaces; for
example, fastEthernet1.1/100 or fastEthernet.*100
The following rules apply for representing nonprintable character sequences in
the circuit ID string or the remote ID string:
■
To represent the binary sequence 0d 0a (hex), use the string '\\r\\n'. This
consists of four ASCII characters: 5c for \\, 72 for r, 5c for \\, and 6e for n.
For example, to match the sequence 74 65 73 74 0d 0a 6f 6e 65 (hex), use
the string 'test\\r\\none'. In this string, 74 is represented by t, 65 is
represented by e, 73 is represented by s, 74 is represented by t, 0d 0a is
represented by \\r\\n, 6f is represented by o, 6e is represented by n, and 65
is represented by e.
■
To represent the binary sequence 0d 00 (hex), use the string '\\r'. This consists
of two ASCII characters: 5c for \\, and 72 for r.
■
To represent the binary sequence 0a 00 (hex), use the string '\\n'. This
consists of two ASCII characters: 5c for \\, and 6e for n.
For example, to match the sequence 74 65 73 74 0a 00 6f 6e 65 (hex), use
the string 'test\\none'. In this string, 74 is represented by t, 65 is represented
by e, 73 is represented by s, 74 is represented by t, 0a 00 is represented by
\\n, 0a is represented by \\n, 6f is represented by o, 6e is represented by n,
and 65 is represented by e.
■
To represent all other cases, use the string '\\xab', where ab is a hex code
of the byte. For example, to represent byte 3A, use '\\x3a'. This consists of
four ASCII characters: 5c for \\, 78 for x, 33 for 3, and 61 for a.
As another example, to match the sequence 74 65 73 74 f3 6f 6e 65 (hex),
use the string 'test\\xf3one'. In this string, 74 is represented by t, 65 is
represented by e, 73 is represented by s, 74 is represented by t, byte F3 is
represented by \\xf3, 6f is represented by o, 6e is represented by n, and 65
is represented by e.
Mode
510
■
Privileged Exec
dhcp delete-binding
Chapter 5: D Commands
dhcp-external delete-binding
Syntax
Release Information
Description
dhcp-external delete-binding [ binding-id bindingId | all ]
Command introduced before JUNOSe Release 7.1.0.
Deletes a specific client binding or all bindings from the virtual router's DHCP binding
table. There is no no version.
NOTE: This command is deprecated and might be removed completely in a future
release. The function provided by this command has been replaced by the dhcp
delete-binding command.
Options
Mode
■
bindingId—DHCP binding ID associated with the user.
■
all—Specifies all bindings
Privileged Exec
dhcp-external delete-binding
■
511
JUNOSe 11.0.x Command Reference Guide A to M
dhcp-external duplicate-mac-address
Syntax
Release Information
Description
Mode
Related Topics
512
■
[ no ] dhcp-external duplicate-mac-address
Command introduced in JUNOSe Release 9.3.0.
Configures the DHCP external server application to use a combination of the MAC
address and the gateway IP address (giaddr) to uniquely identify DHCP clients attached
to the router. This behavior is also referred to as duplicate MAC mode. The no version
restores the default behavior, also known as unique MAC mode, which uses only the
MAC address to uniquely identify DHCP clients.
Global Configuration
■
DHCP External Server Identification of Clients with Duplicate MAC Addresses
Overview
■
Configuring DHCP External Server to Uniquely Identify Clients with Duplicate
MAC Addresses
dhcp-external duplicate-mac-address
Chapter 5: D Commands
dhcpv6 delete-binding
Syntax
dhcpv6 delete-binding { all | ipv6Prefix | string }
Release Information
Command introduced in JUNOSe Release 11.0.0.
Description
Options
Mode
Related Topics
Deletes the specified DHCPv6 client bindings. There is no no version.
■
all—Specifies all DHCPv6 client bindings.
■
ipv6Prefix—IPv6 prefix (address and subnetwork mask) of the DHCPv6 clients;
for example, 2002:2:4:1::/64
■
string—Local address pool name in the range 1–16 characters; for example,
server4pool
Privileged Exec
■
Deleting DHCPv6 Client Bindings
■
Monitoring DHCPv6 Local Server Binding Information
dhcpv6 delete-binding
■
513
JUNOSe 11.0.x Command Reference Guide A to M
diag
Syntax
Release Information
Description
Options
diag slotNumber [ subsystem ] [ force ]
Command introduced in JUNOSe Release 7.3.0.
Reboots the SRP module or line module in the specified slot on all E Series routers
and performs diagnostic tests. There is no no version.
■
slotNumber—Number of the chassis slot that contains the SRP module or line
module
■
subsystem—Type of subsystem on the E120 router or the E320 router; use when
the specified slotNumber is a slot that contains an SRP module
■
Mode
514
■
diag
■
srp—Indicates the system controller (SC) on one or both SRP modules; specify
this keyword to restart only the portion of the SC on the individual SRP
module
■
fabric—Indicates the portion of the switch fabric on the SRP modules; specify
this keyword to restart only an individual fabric slice
force—Specifies that the system manually confirm conflicting conditions when
the slot of the active SRP module is specified
Privileged Exec
Chapter 5: D Commands
diag-level
Syntax
Release Information
Description
Options
diag-level [ normal ] [ bypass ]
Command introduced in JUNOSe Release 9.2.0.
Sets the diagnostics level on the active or standby SRP module to reduce boot time
during a cold and a warm boot. The default diagnostics level is normal. There is no
no version.
■
normal—executes full diagnostics on the boot of the line card
bypass—skips diagnostic tests on the boot of the line card
Mode
Global Configuration
diag-level
■
515
JUNOSe 11.0.x Command Reference Guide A to M
dir
Syntax
Release Information
Description
dir [ word ] [ short ]
Command introduced before JUNOSe Release 7.1.0.
Displays information about the files in nonvolatile storage, including name, size, date
created, and whether they are in use. There is no no version.
NOTE: When high availability is enabled on the router, it is possible that files or file
attributes may appear to be unsynchronized when they are not. When enabled, high
availability mirrors configuration changes instantly from the active SRP module to
the standby SRP module. However, although these changes are reflected immediately
in memory, NVS on the standby SRP module is updated at 5-minute intervals.
Options
Mode
516
■
dir
■
word—Path to a specific directory, or a filename; an asterisk (*) in any position
in a filename substitutes for zero or more characters; you cannot use a wildcard
in a path
■
short—Limits display to file name and creation date
Privileged Exec, User Exec
Chapter 5: D Commands
disable
Syntax
To return to User Exec mode:
disable [ level ]
For DVMRP, RIP:
[ no ] disable
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
When used from Privileged Exec mode, exits Privileged Exec mode and returns to
User Exec mode.
When used from Router Configuration or Interface Configuration mode in the context
of a DVMRP configuration, disables DVMRP on the virtual router or interface. The
no version reenables DVMRP on the virtual router or interface.
When used from Router Configuration mode in the context of a RIP configuration,
disables RIP on the virtual router. The no version enables RIP processing on the
virtual router.
Options
Mode
■
level—One of the following privilege levels; default value is 1
■
0—Allows the user to execute the help, enable, disable, and exit commands
■
1—Allows the user to execute commands in User Exec mode plus commands
at level 0
■
5—Allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0
■
10—Allows the user to execute all commands except support commands,
which may be provided by Juniper Networks Customer Service
■
15—Allows the user to execute support commands
Address Family Configuration (RIP), Interface Configuration (DVMRP only), Privileged
Exec, Router Configuration (DVMRP or RIP)
disable
■
517
JUNOSe 11.0.x Command Reference Guide A to M
disable-autosync
Syntax
Release Information
Description
Mode
518
■
disable-autosync
[ no ] disable-autosync
Command introduced before JUNOSe Release 7.1.0.
Halts automatic synchronization between the primary and standby SRP modules.
When high availability is enabled (that is, the high availability state is initializing,
active, or pending) this command affects only changes to nonconfiguration files.
With high availability enabled, configuration changes are always mirrored to the
standby SRP module. The no version restores the default situation, in which automatic
synchronization runs as a background process every 5 minutes.
Global Configuration
Chapter 5: D Commands
disable-dynamic-redistribute
Syntax
Release Information
Description
Mode
[ no ] disable-dynamic-redistribute
Command introduced before JUNOSe Release 7.1.0.
Halts the dynamic redistribution of routes that are initiated by changes to a route
map. Supported by DVMRP, BGP, IS-IS, OSPF, and RIP. The no version reenables
dynamic redistribution of routes.
Address Family Configuration, Router Configuration
disable-dynamic-redistribute
■
519
JUNOSe 11.0.x Command Reference Guide A to M
disable-incremental-external-spf
Syntax
Release Information
Description
Mode
520
■
[ no ] disable-incremental-external-spf
Command introduced before JUNOSe Release 7.1.0.
Disables incremental external SPF on the router; results in a full SPF when an event
occurs to trigger an external SPF. The no version reenables incremental external
SPF.
Router Configuration
disable-incremental-external-spf
Chapter 5: D Commands
disable proxy lcp
Syntax
Release Information
Description
Mode
[ no ] disable proxy lcp
Command introduced before JUNOSe Release 7.1.0.
Disables the proxy LCP parameter for the remote host. The no version enables the
proxy LCP parameter for the remote host.
L2TP Destination Profile Host Configuration
disable proxy lcp
■
521
JUNOSe 11.0.x Command Reference Guide A to M
disable-switch-on-error
Syntax
Release Information
Description
Mode
522
■
[ no ] disable-switch-on-error
Command introduced before JUNOSe Release 7.1.0.
Prevents the redundant SRP module from taking over if the primary SRP module
experiences a software failure or if you push the reset button on the primary SRP
module. Issue the sync command immediately before you issue this command. The
no version restores the default situation, in which the redundant SRP module takes
over if the primary SRP module experiences a failure.
Global Configuration
disable-switch-on-error
Chapter 5: D Commands
disconnect-cause
Syntax
Release Information
Description
Mode
[ no ] disconnect-cause
Command introduced before JUNOSe Release 7.1.0.
Enables an E Series LNS to generate, for the L2TP session to which the L2TP host
profile applies, a PPP Disconnect Cause Code attribute value pair (AVP) and include
it in all L2TP Call-Disconnect-Notify (CDN) messages that it sends to an LAC. This
action provides a mechanism for the LAC to obtain information about the cause of
a session disconnection. The no version disables generation of the PPP Disconnect
Cause Code AVP, which is the default setting.
L2TP Destination Profile Host Configuration
disconnect-cause
■
523
JUNOSe 11.0.x Command Reference Guide A to M
disconnect ssh
Syntax
Release Information
Description
Options
Mode
524
■
disconnect ssh
disconnect ssh { vty vtyId | sessionId }
Command introduced before JUNOSe Release 7.1.0.
Terminates an active SSH session. Use the show ip ssh command to determine the
session identifier for the session to terminate. There is no no version.
■
vtyId—Virtual terminal identifier for VTY where the SSH session resides; use the
show users command to determine the identifier
■
sessionId—Integer in the range 0–4294967295 that identifies the session to be
terminated
Privileged Exec
Chapter 5: D Commands
discovery-mode
Syntax
Release Information
Description
Mode
[ no ] discovery-mode
Command introduced in JUNOSe Release 7.2.0.
Enables ANCP discovery mode. This mode allows RADIUS software to obtain loop
parameter information from a connected access node. If discovery mode is disabled,
it does not accept topology discovery messages and stops advertising topology
discovery capability. It does not affect any other neighbors. The no version disables
ANCP discovery mode.
L2C Neighbor Configuration
discovery-mode
■
525
JUNOSe 11.0.x Command Reference Guide A to M
distance
Syntax
The options available vary depending on your routing protocol context; that is, on
whether you are configuring OSPF or RIP.
For OSPF:
[ no ] distance { ospfWeight | ospf { external distExt | inter-area disInter | intra-area
disIntra } [ external distExt | inter-area distInter | intra-area distIntra ]* }
For RIP:
[ no ] distance ripWeight
Release Information
Description
Options
Mode
526
■
distance
Command introduced before JUNOSe Release 7.1.0.
Defines an administrative distance for RIP or OSPF routes. A distance of 255 prevents
the route from being installed in the routing table. The no version either negates a
command or restores the command's defaults.
■
distance—Weight applied to OSPF routes
■
ospfWeight—Value assigned to OSPF routes that are added to the IP routing table;
a number in the range 1–255
■
ospf—OSPF routes
■
distExt—Distance for external type 5 and type 7 routes; a number in the range
1–255
■
disInter—Distance for interarea routes; a number in the range 1–255
■
disIntra—Distance for intra-area routes; a number in the range 1–255
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
■
ripWeight—Administrative distance assigned to RIP routes added to the IP routing
table in the range 0–255; default value is 120
Address Family Configuration (RIP), Router Configuration (OSPF or RIP)
Chapter 5: D Commands
distance bgp
Syntax
distance bgp externalDistance internalDistance localDistance
no distance bgp [ externalDistance [ internalDistance [ localDistance ] ] ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the administrative distances for BGP routes. A distance of 255 prevents the route
from being installed in the routing table. The no version restores the default values.
■
externalDistance—Administrative distance for routes external to the AS in the
range 1–255; default value is 20
■
internalDistance—Administrative distance for routes internal to the AS in the
range 1–255; default value is 200
■
localDistance—Administrative distance for local (redistributed) routes in the range
1–255; default value is 200
Address Family Configuration, Router Configuration
distance bgp
■
527
JUNOSe 11.0.x Command Reference Guide A to M
distance ip
Syntax
Release Information
Description
Options
Mode
528
■
distance ip
[ no ] distance weight ip
Command introduced before JUNOSe Release 7.1.0.
Sets the administrative distance for IS-IS routes that are inserted into the IP routing
table. A distance of 255 prevents the route from being installed in the routing table.
The no version restores the default value, 115.
■
weight—Administrative distance assigned to IS-IS routes added to the IP routing
table in the range 1–255
Router Configuration
Chapter 5: D Commands
distribute-domain-wide
Syntax
Release Information
Description
Mode
[ no ] distribute-domain-wide
Command introduced before JUNOSe Release 7.1.0.
Increases the granularity of routing information within an IS-IS domain by allowing
routes to be distributed from level 2 to level 1. This results in more accurate routing
between level 1 areas. The no version disables the command.
Router Configuration
distribute-domain-wide
■
529
JUNOSe 11.0.x Command Reference Guide A to M
distribute-list
Syntax
In Router Configuration mode:
[ no ] distribute-list accessListName { in | out } [ interfaceType interfaceSpecifier ]
In Remote Neighbor Configuration mode:
[ no ] distribute-list accessListName { in | out }
Release Information
Description
Options
Mode
530
■
distribute-list
Command introduced before JUNOSe Release 7.1.0.
Specifies the distribute list, an access list applied to incoming or outgoing RIP route
updates. In Remote Neighbor Configuration mode, applies only to a RIP
remote-neighbor interface. The no version removes the distribute list. An IP access
list acts as a filter; refer to the access-list command for details.
■
accessListName—Name of the access list; string of up to 32 alphanumeric
characters
■
in—Applies the access list to incoming route updates
■
out—Applies the access list to outgoing route updates
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Address Family Configuration, Remote Neighbor Configuration, Router Configuration
Chapter 5: D Commands
dns-domain-search
Syntax
Release Information
Description
[ no ] dns-domain-search domainName
Command introduced in JUNOSe Release 10.1.0.
Specifies a list of domain names in the IPv6 local address pool to be returned to
clients in DHCPv6 responses as part of the Domain Search List option. The no version
removes the configured domain name.
NOTE: You can configure one domain name per line. Enter the command on separate
lines to configure additional domain names.
Options
Mode
■
domainName—Domain name that the DHCPv6 client uses when it resolves
hostnames with the DNS server. You can specify a maximum of four DNS
domains for the search list of an IPv6 local pool; maximum of 32 characters
IPv6 Local Pool Configuration
dns-domain-search
■
531
JUNOSe 11.0.x Command Reference Guide A to M
dns-server
Syntax
dns-server ipAddressPrimary [ ipAddressSecondary ]
no dns-server
Release Information
Description
Options
Mode
532
■
dns-server
Command introduced before JUNOSe Release 7.1.0.
Assigns a DNS server to an address pool. The no version removes the association
between the address pool and the DNS server.
■
ipAddressPrimary—IP address of preferred DNS server
■
ipAddressSecondary—IP address of secondary DNS server
DHCP Local Pool Configuration
Chapter 5: D Commands
dns-server (for IPv6)
Syntax
dns-server ipv6AddressPrimary [ ipv6AddressSecondary ]
no dns-server
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 10.1.0.
Configures the primary and secondary IPv6 DNS server addresses in the IPv6 local
address pool. The DNS server addresses are returned to the client in DHCPv6
responses as part of the DNS Recursive Name Server option. The no version removes
the configured DNS server addresses.
■
ipv6AddressPrimary—IPv6 address of the primary DNS server.
■
ipv6AddressSecondary—IPv6 address of the secondary DNS server.
IPv6 Local Pool Configuration
dns-server (for IPv6)
■
533
JUNOSe 11.0.x Command Reference Guide A to M
do
Syntax
Release Information
Description
Options
Mode
534
■
do
do execCommand
Command introduced before JUNOSe Release 7.1.0.
Allows you to issue an Exec mode command from any configuration command
mode. This command functions the same as the run command. There is no no
version.
■
execCommand—CLI command that you can issue from User Exec or Privileged
Exec mode
All configuration command modes
Chapter 5: D Commands
domain
Syntax
domain domainName
no domain
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the domain to an automatically generated username in an IP service profile.
The no version removes the domain.
■
domainName —Name of the domain; maximum of 32 characters
IP Service Profile Configuration
domain
■
535
JUNOSe 11.0.x Command Reference Guide A to M
domain-authentication
Syntax
Release Information
Description
Options
Mode
536
■
[ no ] domain-authentication { csnp | psnp }
Command introduced before JUNOSe Release 7.1.0.
Enables or disables simple text authentication or HMAC MD5 authentication of IS-IS
level 2 CSNP packets or PSNP packets. The no version restores the default behavior,
in which authentication of IS-IS level 2 CSNPs and PSNPs is disabled.
■
csnp—Enables authentication of IS-IS level 2 complete sequence number PDUs
(CSNPs)
■
psnp—Enables authentication of IS-IS level 2 partial sequence number PDUs
(PSNPs)
Router Configuration
domain-authentication
Chapter 5: D Commands
domain-authentication-key
Syntax
domain-authentication-key [ 0 | 8 ] authKey
no domain-authentication-key
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Assigns a password for authentication of IS-IS level 2 LSPs, CSNPs, and PSNPs. The
no version deletes the password.
NOTE: Issuing this command enables simple authentication of level 2 LSPs only. To
enable authentication of level 2 CSNPs or PSNPs, use the domain-authentication
command.
Options
Mode
■
0—indicates the authKey is entered in unencrypted form (plaintext); this is the
default option
■
8—indicates the authKey is entered in encrypted form (ciphertext)
■
authKey—password; string of up to 8 characters
Router Configuration
domain-authentication-key
■
537
JUNOSe 11.0.x Command Reference Guide A to M
domain-id
Syntax
domain-id domainIdAddress | domainId
no domain-id
Release Information
Description
Options
Mode
538
■
domain-id
Command introduced before JUNOSe Release 7.1.0.
Sets the OSPF domain ID for an OSPF VRF on a PE. The no version restores the
default value.
■
domainIdAddress—OSPF domain ID in IP address format; default value is the IP
address of the OSPF router configured in the VRF
■
domainId—OSPF domain ID as an integer value in the range 0–4294967295;
default value is 0
Router Configuration
Chapter 5: D Commands
domain-message-digest-key
Syntax
domain-message-digest-key keyId hmac-md5 [ 0 | 8 ] key
[ start-accept startAcceptTime [ { startAcceptMonth startAcceptDay | startAcceptDay
startAcceptMonth } startAcceptYear ] ]
[ start-generate startGenTime [ { startGenMonth startGenDay | startGenDay
startGenMonth } startGenYear ] ]
[ stop-accept { never | stopAcceptTime [ { stopAcceptMonth stopAcceptDay |
stopAcceptDay stopAcceptMonth } stopAcceptYear ] } ]
[ stop-generate { never | stopGenTime [ { stopGenMonth stopGenDay | stopGenDay
stopGenMonth } stopGenYear ] } ]
no domain-message-digest-key keyId
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Specifies an HMAC MD5 key that the router uses to create a secure, encrypted
message digest of each IS-IS level 2 packet (LSPs, CSNPs, and PSNPs). The digest is
inserted into the packet from which it is created. Using this algorithm for domain
routers protects against unauthorized routers injecting false routing information into
your network. You can specify when the router will start (default is the current time)
and stop (default is never) accepting packets that include a digest made with this
key. You can specify when the router will start (default is the current time plus 2
minutes) and stop (default is never) generating packets that include a digest made
with this key. The no version deletes the key specified by the keyId.
NOTE: Issuing this command enables MD5 authentication of level 2 LSPs only. To
enable authentication of level 2 CSNPs or PSNPs, use the domain-authentication
command.
Options
■
keyId—Integer from 1 to 255 that is a unique identifier for the secret key, sent
with the message digest in the packet.
■
0—Indicates the key is entered in unencrypted form (plaintext); this is the default
option
■
8—Indicates the key is entered in encrypted form (ciphertext)
■
key—String of up to 20 alphanumeric characters; secret key used by the HMAC
MD5 algorithm to generate the message digest.
■
startAcceptTime, startAcceptMonth, startAcceptDay, startAcceptYear – time, month,
day, year that the router will start accepting packets created with this password.
Use military time format HH : MM[ : SS ].
■
startGenTime, startGenMonth, startGenDay, startGenYear—Time, month, day,
year that the router will start inserting this password into packets. Use military
time format HH : MM[ : SS ].
domain-message-digest-key
■
539
JUNOSe 11.0.x Command Reference Guide A to M
Mode
540
■
■
never—Specifies that the router never stops accepting or generating packets;
overrides previously specified stop times.
■
stopAcceptTime, stopAcceptMonth, stopAcceptDay, stopAcceptYear—Time, month,
day, year that the router will stop accepting packets created with this password.
Use military time format HH : MM[ : SS ].
■
stopGenTime, stopGenMonth, stopGenDay, stopGenYear—Time, month, day, year
that the router will stop inserting this password into packets. Use military time
format HH : MM[ : SS ].
Router Configuration
domain-message-digest-key
Chapter 5: D Commands
domain-name
Syntax
From DHCP Local Pool Configuration mode:
domain-name domainName
no domain-name
From IPSec Identity Configuration mode:
[ no ] domain-name domainName
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
From DHCP Local Pool Configuration mode, specifies a domain name that can be
returned to the subscriber of an address pool if requested. The no version removes
the association between the address pool and the domain name.
From IPSec Identity mode, specifies the domain name that the router uses in IKE
authentication messages and to generate certificate requests. The no version removes
the domain name.
Options
Mode
■
domainName—Name of the domain
■
domainName—Name used in certificate requests and in IKE authentication
messages; up to 60 characters
DHCP Local Pool Configuration, IPSec Identity Configuration
domain-name
■
541
JUNOSe 11.0.x Command Reference Guide A to M
domain-suffix
Syntax
domain-suffix domainSuffix
no domain-suffix
Release Information
Description
Options
Mode
542
■
domain-suffix
Command introduced in JUNOSe Release 7.3.0.
Appends a domain suffix to user-provided usernames on this profile. The no version
restores the default value, no domain suffix, and usernames are passed transparently
to AAA.
■
domainSuffix—Domain suffix that you want to append to user-provided
usernames.
IPSec Tunnel Profile Configuration
Chapter 5: D Commands
domain-tag
Syntax
domain-tag routeTag
no domain-tag
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the VPN route tag for an OSPF VRF on a PE to prevent routing loops back into
the VPN. The no version restores the default value.
■
routeTag—Number identifying the VPN route tag in the range 0–4294967295
Router Configuration
domain-tag
■
543
JUNOSe 11.0.x Command Reference Guide A to M
dont-install-routes
Syntax
Release Information
Description
Mode
544
■
[ no ] dont-install-routes
Command introduced before JUNOSe Release 7.1.0.
Prevents OSPF routes that point directly to the OSPF remote neighbor from being
installed in the IP routing table of the VR or VRF in which OSPF is running. The no
version restores the default behavior, which installs the routes in the IP routing table.
Remote Neighbor Configuration
dont-install-routes
Chapter 5: D Commands
dos-protection-group
Syntax
Release Information
Description
Options
Mode
[ no ] dos-protection-group groupName
Command introduced in JUNOSe Release 8.1.0.
Creates a denial of service (DoS) protection group and enters DoS Protection Group
Configuration mode. The no version removes the DoS protection group.
■
groupName—Name of the DoS protection group; string of up to 31 alphanumeric
characters
Global Configuration
dos-protection-group
■
545
JUNOSe 11.0.x Command Reference Guide A to M
drop-profile
Syntax
Release Information
Description
Options
Mode
Related Topics
546
■
drop-profile
[ no ] drop-profile dropProfileName
Command introduced before JUNOSe Release 7.1.0.
Creates a drop profile. The no version removes the drop profile.
■
dropProfileName—Name for the drop profile
Global Configuration
■
Configuring RED
■
Configuring WRED
Chapter 5: D Commands
ds3-scramble
Syntax
Release Information
Description
Mode
[ no ] ds3-scramble
Command introduced before JUNOSe Release 7.1.0.
Enables scrambling of the ATM cell payload on a T3 interface. DS3 scrambling assists
clock recovery on the receiving end of the interface. The no version disables cell
scrambling.
Controller Configuration
ds3-scramble
■
547
JUNOSe 11.0.x Command Reference Guide A to M
dsr-detect
Syntax
Release Information
Description
Mode
548
■
dsr-detect
[ no ] dsr-detect
Command introduced before JUNOSe Release 7.1.0.
Requires that a DSR signal be detected on the line for a user to log into the console.
DSR is carried on pin 6 of the SRP module's RS-232 (DB-9) connector. The DSR input
must be connected to the DSR output of a modem or the DTR output of another DTE
device, such as a terminal server, that supports this signal. If a session is in progress
and the DSR signal is lost, the user is logged out automatically. The no version restores
the default of no DSR required.
Privileged Exec
Chapter 5: D Commands
dsu bandwidth
Syntax
dsu bandwidth bandwidthValue
no dsu bandwidth
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the speed for the fractional T3 lines. The no version clears the bandwidth. If
you issue this command, be sure to issue the dsu mode and scramblecommands.
Similarly, if you issue the no version, be sure to issue the no versions of the dsu
mode and scramble commands; otherwise, the interface may drop packets
unexpectedly.
■
bandwidthValue—Value of the fractional bandwidth in the range 22–44210 Kbps.
The router offers a set of speeds in increments that depend on the DSU mode
you specify. The actual speed of the fractional T3 lines will be the value closest
to the fractional bandwidth you specify.
Controller Configuration
dsu bandwidth
■
549
JUNOSe 11.0.x Command Reference Guide A to M
dsu mode
Syntax
dsu mode { 0 | 2 }
no dsu mode
Release Information
Description
Options
Mode
550
■
dsu mode
Command introduced before JUNOSe Release 7.1.0.
Sets the DSU mode for the lines. The no version clears the dsu mode. If you issue
this command, be sure to issue the dsu bandwidth and scramble commands. Similarly,
if you issue the no version, be sure to issue the no versions of thedsu bandwidth and
scramble commands; otherwise, the interface may drop packets unexpectedly.
■
0—Sets digital Link mode
■
2—Sets Larscom mode
Controller Configuration
Chapter 5: D Commands
duplex
Syntax
duplex duplexMode
no duplex
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the duplex mode for an Ethernet interface. This command works with the
speed command; if you set or accept the automatically negotiate setting for either
duplex mode or speed, the router negotiates both parameters with the remote device.
The no version specifies the default value, automatically negotiate or full duplex (FE-8
SFP I/O module only). This command is not available for the Ethernet interface on
the SRP module.
■
duplexMode—One of the following duplex options
■
automatically negotiate—Specifies that the router negotiates duplex mode
with the remote device; not valid for the FE-8 SFP I/O module
■
full—Specifies that the router uses full duplex on a Fast Ethernet or Gigabit
Ethernet interface
■
half—Specifies that the router uses half duplex on a Fast Ethernet interface;
this value is not valid for Gigabit Ethernet interfaces
Interface Configuration
duplex
■
551
JUNOSe 11.0.x Command Reference Guide A to M
dvmrp destination profile
Syntax
dvmrp destination profile profileName { [ any-virtual-router ] |
[ virtual-router virtualRouterName ] }
no dvmrp destination profile profileName
Release Information
Description
Options
Mode
552
■
Command introduced in JUNOSe Release 8.2.0.
Configures a destination profile for dynamic DVMRP tunnels and enters IP Tunnel
Destination Profile Configuration mode. There is no no version.
■
profileName—Name of the destination profile
■
any-virtual-router—Specifies a default destination profile for all virtual routers;
only one default destination profile can be defined in the system
■
virtualRouterName—Name of the transport virtual router
Global Configuration
dvmrp destination profile
Chapter 6
E Commands
■
553
JUNOSe 11.0.x Command Reference Guide A to M
e3-scramble
Syntax
Release Information
Description
Mode
554
■
e3-scramble
[ no ] e3-scramble
Command introduced before JUNOSe Release 7.1.0.
Enables scrambling of the ATM cell payload on an E3 interface. E3 scrambling assists
clock recovery on the receiving end of the interface. The no version disables
scrambling.
Controller Configuration
Chapter 6: E Commands
enable
Syntax
To access Privileged Exec mode:
enable [ level ]
To enable event or trigger configuration:
[ no ] enable
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
From User Exec mode, enters Privileged Exec mode at the specified privilege level.
There is no no version for this use.
From SNMP Event Configuration or SNMP Trigger Configuration modes, enables the
configuration for the event or trigger, respectively. The no version disables the event
or trigger.
Options
Mode
■
level—level at which you want to access the Privilege Exec mode; default value
is 10; commands generally fall into one of the following security/privilege levels:
■
0—allows the user to execute the help, enable, disable, and exit commands
■
1—Allows the user to execute commands in User Exec mode plus commands
at level 0
■
5—Allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0
■
10—Allows the user to execute all commands except support commands,
which may be provided by Juniper Networks Customer Service, or the ability
to assign privileges to commands
■
15—Allows the user to execute support commands and assign privileges to
commands
SNMP Event Configuration, SNMP Trigger Configuration, User Exec
enable
■
555
JUNOSe 11.0.x Command Reference Guide A to M
enabled
Syntax
Release Information
Description
Mode
556
■
enabled
[ no ] enabled
Command introduced in JUNOSe Release 8.1.0.
Enables the aggregation cache to start accumulating information from the flow cache.
The no version stops the information flow from the flow cache.
Flow Cache Configuration
Chapter 6: E Commands
enable ipsec-transport
Syntax
Release Information
Description
[ no ] enable ipsec-transport
Command introduced before JUNOSe Release 7.1.0.
IP Tunnel Destination Profile Configuration mode added in JUNOSe Release 8.2.0.
In IP Tunnel Destination Profile Configuration mode, specifies that the router accepts
only dynamic IP tunnels protected by an IPSec transport connection. The no version
disables IPSec transport mode.
In L2TP Destination Profile Host Configuration mode, specifies that the router accepts
only L2TP tunnels protected by an IPSec transport connection. The no version disables
IPSec transport mode.
Mode
IP Tunnel Destination Profile Configuration, L2TP Destination Profile Host
Configuration
enable ipsec-transport
■
557
JUNOSe 11.0.x Command Reference Guide A to M
enable password
Syntax
enable password [ level securityLevel ] [ passwordType ] passwordText
no enable password [ level securityLevel ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Sets a password to control access to certain types of commands. The no version
removes the password requirement.
NOTE: On the E Series router, all passwords are stored as encrypted passwords.
Options
■
■
■
Mode
558
■
enable password
securityLevel—Security level for which you want to set the password; default
value is 5; commands generally fall into one of the following security/privilege
levels:
■
0—Allows the user to execute the help, enable, disable, and exit commands
■
1—Allows the user to execute commands in User Exec mode plus commands
at level 0
■
5—Allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0; this is the default level
■
10—Allows the user to execute all commands except support commands,
which may be provided by Juniper Networks Customer Service
■
15—Allows the user to execute privilege setting and support commands
passwordType:
■
0—Specifies that an unencrypted password follows; this is the default
■
7—Specifies that an encrypted password follows
passwordText—Password, either encrypted or unencrypted, depending on the
password type
Global Configuration
Chapter 6: E Commands
enable proxy authenticate
Syntax
Release Information
Description
Mode
[ no ] enable proxy authenticate
Command introduced before JUNOSe Release 7.1.0.
Configures proxy authenticate for a remote host. The no version removes proxy
authenticate configuration from the remote host.
L2TP Destination Profile Host Configuration
enable proxy authenticate
■
559
JUNOSe 11.0.x Command Reference Guide A to M
enable secret
Syntax
enable secret [ level securityLevel ] [ secretType ] secretText
no enable secret [ securityLevel ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Sets a secret to control access to certain types of commands. The no version removes
the secret requirement.
NOTE: On the E Series router, all secrets are stored as encrypted secrets.
Options
■
■
■
Mode
560
■
enable secret
securityLevel—Security level for which you want to set the secret; default value
is 5
■
0—Allows the user to execute the help, enable, disable, and exit commands
■
1—Allows the user to execute commands in User Exec mode plus commands
at level 0
■
5—Allows the user to execute Privileged Exec show commands plus the
commands at levels 1 and 0; this is the default level
■
10—Allows the user to execute all commands except support commands,
which may be provided by Juniper Networks Customer Service
■
15—Allows the user to execute support commands
secretType—One of the following:
■
0—Indicates that the secret is unencrypted; this is the default
■
7—Indicates that the secret is encrypted
secretText—Secret, either encrypted or unencrypted, depending on the secret
type
Global Configuration
Chapter 6: E Commands
encapsulation
Syntax
encapsulation encapsulationType
no encapsulation
Release Information
Description
Command introduced in JUNOSe Release 7.1.0.
ATM VC Class Configuration mode added in JUNOSe Release 7.3.0.
In ATM VC Configuration mode, configures the encapsulation method on an ATM
PVC. The encapsulation method represents the format of the data units that traverse
the PVC. The encapsulation command is valid only for data PVCs; you cannot use
this command for control (ILMI or signaling) PVCs. The no version restores the default
encapsulation method, aal5snap.
In ATM VC Class Configuration mode, configures the encapsulation method as part
of a VC class definition that you assign to an ATM data PVC. The no version restores
the default encapsulation method, aal5snap, in the VC class.
Options
Mode
■
encapsulationType—One of the following encapsulation methods for data PVCs:
■
aal0—Causes the router to receive raw ATM cells on this PVC and forward
the cells without performing AAL5 packet reassembly
■
aal5all—Configures ATM over MPLS passthrough connections; the router
passes through all ATM AAL5 traffic without interpreting it
■
aal5autoconfig—Enables autodetection of the 1483 encapsulation (LLC/SNAP
or VC multiplexed)
■
aal5mux ip—Configures a VC-based multiplexed circuit used for IP only
■
aal5snap—Configures an LLC encapsulated circuit; an LLC/SNAP header
precedes the protocol datagram
ATM VC Configuration, ATM VC Class Configuration
encapsulation
■
561
JUNOSe 11.0.x Command Reference Guide A to M
encapsulation bridge1483
Syntax
encapsulation bridge1483 [ mac-address macAddress ]
no encapsulation bridge1483
Release Information
Description
Options
Mode
562
■
Command introduced before JUNOSe Release 7.1.0.
Configures bridged Ethernet as the encapsulation method on an interface and
optionally assigns a MAC address to the interface. The no version removes bridged
Ethernet as the encapsulation method on the interface.
■
macAddress—User-configured MAC address for the interface. The MAC address
format is a dotted triple of four-digit hexadecimal numbers; for example,
0090.1a40.4c7c. Multicast MAC address cannot be configured on bridged Ethernet
interfaces.
Subinterface Configuration
encapsulation bridge1483
Chapter 6: E Commands
encapsulation frame-relay ietf
Syntax
encapsulation frame-relay ietf
no encapsulation frame-relay
Release Information
Description
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Enables Frame Relay encapsulation. The no version removes Frame Relay
configuration from an interface.
Interface Configuration
■
Configuring Frame Relay Layer 2 Services in the JUNOSe BGP and MPLS
Configuration Guide
encapsulation frame-relay ietf
■
563
JUNOSe 11.0.x Command Reference Guide A to M
encapsulation hdlc
Syntax
Release Information
Description
Mode
564
■
[ no ] encapsulation hdlc
Command introduced before JUNOSe Release 7.1.0.
Enables Cisco HDLC encapsulation. The no version disables Cisco HDLC on an
interface.
Interface Configuration, Subinterface Configuration
encapsulation hdlc
Chapter 6: E Commands
encapsulation mlframe-relay ietf
Syntax
encapsulation mlframe-relay ietf
no encapsulation mlframe-relay
Release Information
Description
Mode
Command introduced before JUNOSe Release 7.1.0.
Enables Multilink Frame Relay encapsulation. The no version removes Multilink
Frame Relay configuration from an interface.
Interface Configuration
encapsulation mlframe-relay ietf
■
565
JUNOSe 11.0.x Command Reference Guide A to M
encapsulation mlppp
Syntax
Release Information
Description
Mode
566
■
[ no ] encapsulation mlppp
Command introduced before JUNOSe Release 7.1.0.
Configures MLPPP as the encapsulation method on an individual interface. Creates
an MLPPP link interface, which can be configured as a member of an MLPPP bundle.
The no version disables MLPPP on an interface.
Interface Configuration, Subinterface Configuration
encapsulation mlppp
Chapter 6: E Commands
encapsulation ppp
Syntax
Release Information
Description
Mode
[ no ] encapsulation ppp
Command introduced before JUNOSe Release 7.1.0.
Configures PPP as the encapsulation method for the interface. The no version disables
PPP on an interface.
Interface Configuration, Subinterface Configuration
encapsulation ppp
■
567
JUNOSe 11.0.x Command Reference Guide A to M
encapsulation pppoe
Syntax
Release Information
Description
Mode
568
■
[ no ] encapsulation pppoe
Command introduced before JUNOSe Release 7.1.0.
Configures PPPoE as the encapsulation method for the interface. The no version
removes PPPoE encapsulation from the interface.
Interface Configuration, Subinterface Configuration
encapsulation pppoe
Chapter 6: E Commands
encapsulation vlan
Syntax
Release Information
Description
Mode
Related Topics
[ no ] encapsulation vlan
Command introduced before JUNOSe Release 7.1.0.
Configures VLAN as the encapsulation method for the interface. The no version
removes VLAN encapsulation from the interface.
Interface Configuration, Subinterface Configuration
■
Configuring Ethernet/VLAN Layer 2 Services, Configuring Local Cross-Connects
Between Ethernet/VLAN Interfaces, and Configuring S-VLAN Tunnels for Layer 2
Services in the JUNOSe BGP and MPLS Configuration Guide
encapsulation vlan
■
569
JUNOSe 11.0.x Command Reference Guide A to M
encryption
Syntax
encryption { des | 3des }
no encryption
Release Information
Description
Options
Mode
570
■
encryption
Command introduced before JUNOSe Release 7.1.0.
Sets the encryption algorithm to use in the IKE policy. The no version restores the
default, 3DES.
■
des—Specifies 56-bit DES-CBC as the encryption algorithm
■
3des—Specifies 168-bit 3DES-CBC as the encryption algorithm
IKE Policy Configuration
Chapter 6: E Commands
end
Syntax
Release Information
Description
Mode
end
Command introduced before JUNOSe Release 7.1.0.
Exits Global Configuration mode or any of the Configuration submodes and returns
to the User Exec mode. There is no no version.
Global Configuration
end
■
571
JUNOSe 11.0.x Command Reference Guide A to M
enrollment retry-limit
Syntax
enrollment retry-limit minutes
no enrollment retry-limit
Release Information
Description
Options
Mode
572
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the number of minutes during which the router continues to send a
certificate request to the CA. The no version restores the default.
■
minutes—Number of minutes, from 0 (infinite time period) to 480; default value
is 60
IPSec CA Identity Configuration
enrollment retry-limit
Chapter 6: E Commands
enrollment retry-period
Syntax
enrollment retry-period minutes
no enrollment retry-period
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the number of minutes that the router waits after receiving no response
before resending a certificate request to the CA. The no version restores the default.
■
minutes—Number of minutes in the range 0–60 minutes; default value is 1
IPSec CA Identity Configuration
enrollment retry-period
■
573
JUNOSe 11.0.x Command Reference Guide A to M
enrollment url
Syntax
enrollment url url
no enrollment url
Release Information
Description
Options
Mode
574
■
enrollment url
Command introduced before JUNOSe Release 7.1.0.
Specifies the URL of the simple certificate enrollment protocol (SCEP) server to which
the router sends CA certificate requests (using the ipsec ca authenticate command)
and public certificate requests (using the ipsec ca enroll command). The no version
deletes the URL specification.
■
url—URL of SCEP server; in the format http://server_ipaddress; a maximum of
200 characters
IPSec CA Identity Configuration
Chapter 6: E Commands
equipment loopback
Syntax
equipment { customer | network } loopback
no equipment
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Enables or disables the router's ability to be placed in loopback by a remote device
connected on a CT3 or T3 interface. The no version disables the router's ability to
be placed in loopback by the remote device.
■
customer—Enables the router to enter into loopback when it receives an
appropriate signal from the remote interface
■
network—Disables the router's ability to enter into loopback when it receives
an appropriate signal from the remote interface
Controller Configuration
equipment loopback
■
575
JUNOSe 11.0.x Command Reference Guide A to M
erase secrets
Syntax
Release Information
Description
erase secrets seconds
Command introduced before JUNOSe Release 7.1.0.
Removes all CLI passwords or secrets. Execute before pressing the NMI button on
the SRP module. There is no no version.
NOTE: If you enter the service unattended password-recovery command, the
behavior of the erase secrets command changes. The erase secrets command will
not take any parameters and will not be available through a vty session until you
enter no service unattended password-recovery.
Options
Mode
576
■
erase secrets
■
seconds—Number of seconds in the range 1–60 to allow for the operation
User Exec
Chapter 6: E Commands
ethernet description
Syntax
ethernet description name
no ethernet description
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Adds a text description to a non-SRP Fast Ethernet or Gigabit Ethernet interface. The
no version removes the description from the interface.
■
name—String of up to 64 characters
Interface Configuration
ethernet description
■
577
JUNOSe 11.0.x Command Reference Guide A to M
ethernet dos-protection-group
Syntax
ethernet dos-protection-group groupName
no ethernet dos-protection-group
Release Information
Description
Options
Mode
578
■
Command introduced in JUNOSe Release 8.1.0.
Attaches an Ethernet denial of service (DoS) protection group to an interface. The
no version removes the attachment of the DoS protection group from the interface.
■
groupName—Name of the DoS protection group; string of up to 31 alphanumeric
characters
Interface Configuration
ethernet dos-protection-group
Chapter 6: E Commands
event
Syntax
Release Information
Description
Options
Mode
[ no ] event eventOwner eventName
Command introduced before JUNOSe Release 7.1.0.
Creates an event and launches the event configuration mode in the SNMP server
event manager. The no version removes the event.
■
eventOwner—Owner associated with this event; string of up to 32 alphanumeric
characters
■
eventName—Name associated with this event; string of up to 32 alphanumeric
characters
SNMP Event Manager Configuration
event
■
579
JUNOSe 11.0.x Command Reference Guide A to M
exceeded-action
Syntax
For IP and IPv6 rate-limit profiles:
[ no ] exceeded-action { drop | transmit | mark markVal }
For L2TP rate-limit profiles:
[ no ] exceeded-action { drop | transmit }
For MPLS rate-limit profiles:
[ no ] exceeded-action { drop | transmit | mark-exp expValue }
For hierarchical rate-limit profiles:
[ no ] exceeded-action { drop | transmit [ conditional | final ] }
Release Information
Description
Options
Mode
Related Topics
580
■
exceeded-action
Command introduced before JUNOSe Release 7.1.0.
conditional and final keywords added in JUNOSe Release 7.2.0.
Sets the action for packets not conforming to the committed rate and committed
burst size, and not conforming to the peak rate and peak burst size. The no version
restores the default, drop.
■
drop—Drops the packet
■
transmit—Transmits the packet; for hierarchical rate limits:
■
conditional—Packets must pass the next rate limit
■
final—Packets exit the hierarchy at rate limit
■
markVal—Marks value in the range 0–255; mark actions ar not supported on
hierarchical rate limits
■
expValue—EXP bit value in the range 0–7
Rate Limit Profile Configuration
■
Creating a Two-Rate Rate-Limit Profile
Chapter 6: E Commands
exceeded-drop-threshold
Syntax
exceeded-drop-threshold exceededDropThreshold
no exceeded-drop-threshold
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Configures the threshold above which exceeded-drop-events are logged. The no
version removes the threshold.
■
exceededDropThreshold—Bits per second in the range 0–1073741824
Statistics Profile Configuration
■
Configuring Event Statistics
exceeded-drop-threshold
■
581
JUNOSe 11.0.x Command Reference Guide A to M
exceeded-fraction
Syntax
exceeded-fraction exceededFraction
no exceeded-fraction
Release Information
Description
Options
Mode
Related Topics
582
■
Command introduced before JUNOSe Release 7.1.0.
Sets the percentage of the total queue length that can be occupied before dropping
exceeded packets. The no version returns the exceeded fraction to its default setting.
■
exceededFraction—Percentage range 0–100; default value is 25
Queue Profile Configuration
■
exceeded-fraction
Configuring Queue Profiles to Manage Buffers and Thresholds
Chapter 6: E Commands
exceeded-length
Syntax
exceeded-length minimumExceededLength [ maximumExceededLength ]
no exceeded-length
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Sets minimum and maximum constraints for the queue's exceeded lengths. The no
version removes constraints on the queue's exceeded length.
■
minimumExceededLength—Range 0–1073741824
■
maximumExceededLength—Range 0–1073741824
Queue Profile Configuration
■
Configuring Queue Profiles to Manage Buffers and Thresholds
exceeded-length
■
583
JUNOSe 11.0.x Command Reference Guide A to M
exceeded-threshold
Syntax
exceeded-threshold { percent MinThresholdPercent MaxThresholdPercent |
MinThresholdBytes MaxThresholdBytes } MaxDropProbability
no exceeded-threshold
Release Information
Description
Options
Mode
Related Topics
584
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the exceeded queue thresholds and maximum drop probability. The no
version removes exceeded threshold.
■
percent—Specifies exceeded queue thresholds as percentages
■
MinThresholdPercent—Minimum queue threshold as a percentage of queue length
■
MaxThresholdPercent—Maximum queue threshold as a percentage of queue
length
■
MinThresholdBytes—Minimum queue threshold in bytes
■
MaxThresholdBytes—Maximum queue threshold in bytes
■
MaxDropProbability—Maximum drop probability
Drop Profile Configuration
■
Configuring RED
■
Configuring WRED
exceeded-threshold
Chapter 6: E Commands
exception dump
Syntax
exception dump { except-srp | srp-only } { local | ipAddress [ directoryName ] }
no exception dump
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the location from and to which the router should transfer a core dump file.
Core dumps are enabled and stored in local NVS by default. The no version disables
the command.
■
except-srp—Generates core dump for all non-SRP modules
■
srp-only—Generates core dump for only the SRP modules
■
local—Nonvolatile storage memory
■
ipAddress—IP address of the server to which the router will transfer the core
dump file
■
directoryName—Name of the directory on the server to which the router will
transfer the core dump file
Global Configuration
exception dump
■
585
JUNOSe 11.0.x Command Reference Guide A to M
exception gateway
Syntax
exception gateway ipAddress
no exception gateway
Release Information
Description
Options
Mode
586
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the gateway through which the router sends the core dump file to the remote
FTP server. The no version returns the value to its default (null).
■
ipAddress—IP address of the gateway
Global Configuration
exception gateway
Chapter 6: E Commands
exception http-redirect
Syntax
Release Information
Description
[ no ] exception http-redirect
Command introduced in JUNOSe Release 7.2.0.
Creates the exception rule within an IPv4 or IPv6 policy classifier group so the
application can perform an application-dependent action on the content of the packet.
HTTP redirect is the only application that is available as a destination of the exception
rule. The no version removes the exception rule.
NOTE: This command is not supported for the ES2 10G Uplink LM and ES2 10G ADV
LM.
Mode
Related Topics
Classifier Group Configuration
■
Assigning Values to the ATM CLP Bit
■
Creating an Exception Rule within a Policy Classifier Group
exception http-redirect
■
587
JUNOSe 11.0.x Command Reference Guide A to M
exception monitor
Syntax
exception monitor ipAddress [ directoryName ]
no exception monitor
Release Information
Description
Options
Mode
588
■
Command introduced before JUNOSe Release 7.1.0.
Enables the core dump monitor and specifies the location to which the router transfers
core dump files. The no version disables the core dump monitor.
■
ipAddress—IP address of the server to which you want the router to transfer core
dump files
■
directoryName—Name of the directory on the server to which you want the router
to transfer core dump files
Global Configuration
exception monitor
Chapter 6: E Commands
exception monitor interval
Syntax
exception monitor interval interval
no exception monitor interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the interval at which you want the router to check NVS for core dump files.
The no version disables the core dump monitor.
■
interval—Number of minutes between NVS checks; in the range 1–1440
Global Configuration
exception monitor interval
■
589
JUNOSe 11.0.x Command Reference Guide A to M
exception protocol ftp
Syntax
exception protocol ftp [ [ algorithmType ] userName [ [ algorithmType ] password ] ]
no exception protocol
Release Information
Description
Options
Mode
590
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the username and password for FTP access to a host where you transferred
a core dump file. The no version restores the defaults.
■
algorithmType—Type of user name or password
■
0—Indicates the password is unencrypted; the default
■
8—Indicates the password is encrypted
■
userName—Username required to access the FTP server; the default username
is anonymous
■
password—Password required to access the FTP server; default value is no
password
Global Configuration
exception protocol ftp
Chapter 6: E Commands
exception source
Syntax
exception source ipAddress ipAddressMask
no exception source
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the IP address and mask of the router interface over which you want to
send the core dump file to the remote FTP server. The no version returns the value
to its default (null).
■
ipAddress—IP address of the interface
■
ipAddressMask—Optionally add the IP address mask of the interface
Global Configuration
exception source
■
591
JUNOSe 11.0.x Command Reference Guide A to M
excess-burst
Syntax
excess-burst { size | millisecond milliseconds }
no excess-burst
Release Information
Description
Options
Mode
Related Topics
592
■
excess-burst
Command introduced before JUNOSe Release 7.1.0.
Sets amount of bandwidth allocated to accommodate a packet in progress when the
rate is in excess of the burst. The no version restores the default value, 0.
■
size—Amount of bandwidth allocated; in the range 0–4294967295
■
milliseconds—Milliseconds in the range 1–10000
Rate Limit Profile Configuration
■
Creating a Two-Rate Rate-Limit Profile
Chapter 6: E Commands
exclude-prefix
Syntax
Release Information
Description
[ no ] exclude-prefix Ipv6Prefix [ endIpv6prefix ]
Command introduced in JUNOSe Release 10.1.0.
Specifies the IPv6 prefix or range of prefixes to exclude from being allocated to the
requesting router. You can exclude those prefixes that have been assigned to local
interfaces from being delegated to the DHCPv6 clients. The no version removes the
IPv6 prefix or prefix range from the exclusion set and makes it available again for
delegation to clients.
NOTE: If you attempt to exclude a prefix range that overlaps with another prefix
range that has been already excluded from delegation to clients in the IPv6 local
address pool, an error message is displayed and the configuration fails.
Options
Mode
■
Ipv6Prefix—IPv6 prefix or the starting IPv6 prefix of the range of prefixes to be
excluded from being delegated to the requesting router.
■
endIpv6Prefix—Ending prefix of the range of IPv6 prefixes to be excluded from
being delegated to the requesting router. If you specify this value, all prefixes
from the starting IPv6 prefix up to this prefix are excluded from allocation.
IPv6 Local Pool Configuration
exclude-prefix
■
593
JUNOSe 11.0.x Command Reference Guide A to M
exclude-subsystem
Syntax
exclude-subsystem subsystemName
no exclude-subsystem [ subsystemName ]
Release Information
Description
Options
Mode
594
■
Command introduced before JUNOSe Release 7.1.0.
Excludes subsystem files from being copied when you copy a software release to
the router. The no version removes the exclusion for a specified subsystem file or
all subsystem files.
■
subsystemName—Name of the subsystem file to be excluded
Global Configuration
exclude-subsystem
Chapter 6: E Commands
exec-banner
Syntax
Release Information
Description
Mode
[ no | default ] exec-banner
Command introduced before JUNOSe Release 7.1.0.
Controls display of an exec banner (configured with the banner command) on a
particular line after user authentication (if any) and before the first prompt of a CLI
session. The no version disables the exec banner and the motd banner on the line.
The default version restores the default setting, in which the banner is enabled on
all lines.
Line Configuration
exec-banner
■
595
JUNOSe 11.0.x Command Reference Guide A to M
exec-timeout
Syntax
exec-timeout minutes [ seconds ]
no exec-timeout
Release Information
Description
Options
Mode
596
■
exec-timeout
Command introduced before JUNOSe Release 7.1.0.
Sets the time interval that the console or vty line waits for expected user input. The
no version restores the default value, which is no time limit.
■
minutes—Number of minutes for the time limit; in the range from 0 to 35791
■
seconds—Number of seconds in addition to the minutes for the time limit; in the
range from 0 to 2147483
Line Configuration
Chapter 6: E Commands
existence-test
Syntax
existence-test { event eventOwner eventName |
startup { absent | present } | test-type { absent | changed | present } }
no existence-test [ event | startup | test-type ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Defines existence test values for the trigger that you are configuring, including binding
an event to the existence-test trigger, specifying a startup condition, and defining an
existence-test type. The no version deletes the existence-test values for this trigger
or removes either the startup condition or event binding.
■
eventOwner—Name of event owner that partially specifies event to trigger the
existence test; string of up to 32 alphanumeric characters
■
eventName—Name of event that partially specifies event to trigger the existence
test; string of up to 32 alphanumeric characters
■
startup—Specifies startup existence condition that you predict the sample to
follow; absent or present; you can specify both conditions in the same command
■
test-type—Specifies type of existence test to perform; absent, changed, or present;
you can specify one, two, or all three conditions in the same command
SNMP Trigger Configuration
existence-test
■
597
JUNOSe 11.0.x Command Reference Guide A to M
exit
Syntax
Release Information
Description
Mode
598
■
exit
exit
Command introduced before JUNOSe Release 7.1.0.
Exits the current command mode. In User Exec and Privileged Exec modes, logs out
of the CLI. There is no no version.
All modes
Chapter 6: E Commands
exit-address-family
Syntax
Release Information
Description
Mode
Related Topics
exit-address-family
Command introduced before JUNOSe Release 7.1.0.
Exits from Address Family Configuration mode and returns to Router Configuration
mode. There is no no version.
Address Family Configuration
■
Configuring BGP Signaling for L2VPNs and Configuring BGP Signaling for VPLS in
the JUNOSe BGP and MPLS Configuration Guide
exit-address-family
■
599
JUNOSe 11.0.x Command Reference Guide A to M
exit-remote-neighbor
Syntax
Release Information
Description
Mode
600
■
exit-remote-neighbor
Command introduced before JUNOSe Release 7.1.0.
Exits from Remote Neighbor Configuration mode and returns to Router Configuration
mode. There is no no version.
Remote Neighbor Configuration
exit-remote-neighbor
Chapter 6: E Commands
exp-mask
Syntax
Release Information
Description
Options
Mode
Related Topics
[ no ] exp-mask maskValue
Command introduced before JUNOSe Release 7.1.0.
Sets the EXP mask to be applied with the mark values. The no version restores the
default mask of 7.
■
maskValue—EXP mask value in the range 0–7
Rate Limit Profile Configuration
■
Creating a Two-Rate Rate-Limit Profile
exp-mask
■
601
JUNOSe 11.0.x Command Reference Guide A to M
export destination
Syntax
Release Information
Description
Options
Mode
602
■
[ no ] export destination { hostName | ipAddress } udp-port
Command introduced in JUNOSe Release 8.1.0.
Configures an export destination for the aggregation cache. The no version removes
the destination.
■
hostName—Name of the destination host
■
ipAddress—Address of IP interface
■
udp-port—Specifies UDP port as the destination
Flow Cache Configuration
export destination
Chapter 6: E Commands
export map
Syntax
export map [ ipv4 | ipv6 ] routeMap [ filter ]
no export map [ ipv4 | ipv6 ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Associates a route map with a VRF to modify or filter routes exported by the VRF to
the global BGP VPN RIB in the parent VR. Both IPv4 and IPv6 routes are exported
unless you issue the appropriate keyword to restrict exportation. The no version
restores the default behavior, which is to export all routes without applying a route
map.
■
ipv4—Specifies that only IPv4 routes are exported to the global BGP VPN RIB
■
ipv6—Specifies that only IPv6 routes are exported to the global BGP VPN RIB
■
routeMap—Name of a route map; string of up to 32 alphanumeric characters
■
filter—Prevents routes that do not match the route map from being exported; if
absent, such routes are exported but their attributes are not modified by the
route map
VRF Configuration
export map
■
603
JUNOSe 11.0.x Command Reference Guide A to M
export source
Syntax
Release Information
Description
Options
Mode
604
■
export source
[ no ] export source interface interface
Command introduced in JUNOSe Release 8.1.0.
Sets the source IP address for datagrams containing information from the cache.
The no version removes the setting of the IP address.
■
interface—Name of the interface
Flow Cache Configuration
Chapter 6: E Commands
extended-authentication
Syntax
extended-authentication { none | pap | chap } [ re-authenticate ]
[ skip-peer-config ]
no extended-authentication
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.3.0.
Specifies the extended user authentication protocol for use during the extended user
authentication protocol exchange. The re-authenticate keyword enables the
reauthentication option (a second authentication procedure). The skip-peer-config
keyword disables the router from configuring peer IP characteristics. The no version
restores the default protocol, pap.
■
none—Specifies that no extended authentication is performed
■
pap—Specifies the use of PAP protocol for extended authentication
■
chap—Specifies the use of CHAP protocol for extended authentication
■
re-authenticate—Enables reauthentication when IKE SA rekeying occurs
■
skip-peer-config—Disables configuration of peer IP characteristics
IPSec Tunnel Profile Configuration
extended-authentication
■
605
JUNOSe 11.0.x Command Reference Guide A to M
external-paths
Syntax
external-paths limit
no external-paths
Release Information
Description
Options
Mode
606
■
external-paths
Command introduced in JUNOSe Release 8.2.0.
Configures the maximum number of received external BGP best paths allowed for
route-target signaling. The no version restores the default value, 1.
■
limit—Number of paths, in the range 1–255
Address Family Configuration, Router Configuration
Chapter 7
F Commands
■
607
JUNOSe 11.0.x Command Reference Guide A to M
fabric-strict-priority
Syntax
Release Information
Description
Mode
608
■
[ no ] fabric-strict-priority
Command introduced before JUNOSe Release 7.1.0.
Specifies strict priority scheduling for queues in the traffic class in the fabric. The no
version deletes the strict priority setting.
Traffic Class Configuration
fabric-strict-priority
Chapter 7: F Commands
fabric-weight
Syntax
fabric-weight weight
no fabric-weight
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the relative weight for queues in the traffic class in the fabric. The no version
sets the fabric weight to the default value.
■
weight—Range 1–63; default value is 8
Traffic Class Configuration
fabric-weight
■
609
JUNOSe 11.0.x Command Reference Guide A to M
fabric weights
Syntax
fabric weights multicast multicastValue unicast unicastValue
no fabric weights
Release Information
Description
Options
Mode
610
■
fabric weights
Command introduced in JUNOSe Release 7.2.0.
Defines the multicast-to-unicast traffic ratio for the ERX1440, ERX310, E120, or E320
router switch fabric. The no version returns the switch fabric to its default
multicast:unicast ratio (15:2).
■
multicastValue—Ratio value of multicast bandwidth in the range 1–15
■
unicastValue—Ratio value of unicast bandwidth in the range 1–15
Global Configuration
Chapter 7: F Commands
failover-resync
Syntax
failover-resync { failover-protocol | failover-protocol-fallback-to-silent-failover |
silent-failover | disable | not-configured }
no failover-resync
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.3.0.
Configures the L2TP peer resynchronization method that an L2TP failed endpoint
uses to resynchronize with its peer non-failed endpoint. This command configures
peer resynchronization for a host profile or a domain map tunnel, and overrides a
global peer resynchronization method that is specified in Global Configuration mode.
The no version restores the default setting, not-configured.
■
failover-protocol—Specifies the L2TP failover protocol method
■
failover-protocol-fallback-to-silent-failover—Specifies the L2TP failover protocol
method; however, if the peer does not support this method, the silent failover
method is used
■
silent-failover—Specifies the silent failover method
■
disable—Disables peer resynchronization
■
not-configured—Specifies that peer resynchronization is not configured for L2TP
host profiles and AAA domain map tunnels. L2TP uses the global failover method;
the default setting
Domain Map Tunnel Configuration, L2TP Destination Profile Host Configuration
failover-resync
■
611
JUNOSe 11.0.x Command Reference Guide A to M
filter
Syntax
Release Information
Description
[ no ] [ suspend ] filter
Command introduced before JUNOSe Release 7.1.0.
Defines a policy rule that drops all packets conforming to the current classifier control
list and can be used while the policy list is referenced by interfaces. The no version
removes the filter rule from the policy list; the suspend version temporarily suspends
the policy rule; the no suspend version resumes application of a suspended rule.
NOTE: This command replaces the Policy List Configuration version of the filter
command, which may be removed completely in a future release.
Mode
Related Topics
612
■
filter
Classifier Group Configuration
■
Policy Rule Precedence
Chapter 7: F Commands
flash-disk compare
Syntax
Release Information
Description
Options
Mode
flash-disk compare { all | configuration }
Command introduced before JUNOSe Release 7.1.0.
Performs a checksum validation that compares the contents of the NVS file system
on the primary SRP module with the contents of the NVS file system on the redundant
SRP module, and detects any differences. The command validates only those files
that are synchronized between the primary and redundant SRP modules; it does not
validate log files, core dump files, and other files that are excluded from the system
synchronization process. There is no no version.
■
all—Compares all files in NVS; this option can take several minutes to complete
■
configuration—Compares only configuration files; this option takes less time to
complete because it compares only a subset of the files in the NVS file system
Privileged Exec
flash-disk compare
■
613
JUNOSe 11.0.x Command Reference Guide A to M
flash-disk duplicate
Syntax
Release Information
Description
Mode
614
■
flash-disk duplicate
Command introduced before JUNOSe Release 7.1.0.
Copies the contents of NVS on the primary SRP module to another NVS card. There
is no no version.
Boot
flash-disk duplicate
Chapter 7: F Commands
flash-disk initialize
Syntax
Release Information
Description
Options
Mode
flash-disk initialize [ no-format ] [ disk0 | disk1 ]
Command introduced before JUNOSe Release 7.1.0.
disk0 and disk1 keywords added in JUNOSe Release 7.2.0.
Privileged Exec mode added in JUNOSe Release 8.0.0.
Performs a low-level format of unmounted flash cards. There is no no version.
■
no-format—Erases all files but does not format the flash card
■
disk0—Specifies flash card in slot 0 of the SRP module; default value is disk0;
available only in Boot mode, because disk0 cannot be in an unmounted state in
a router outside of Boot mode
■
disk1—Specifies flash card in slot 1 of the SRP module; supported only on the
E120 router and the E320 router
Boot, Privileged Exec
flash-disk initialize
■
615
JUNOSe 11.0.x Command Reference Guide A to M
flash-disk scan
Syntax
Release Information
Description
Options
Mode
616
■
flash-disk scan
flash-disk scan [ repair ] [ disk0 | disk1 ]
Command introduced before JUNOSe Release 7.1.0.
disk0 and disk1 keywords added in JUNOSe Release 7.2.0.
Privileged Exec mode added in JUNOSe Release 8.0.0.
Scans the flash card on the primary SRP module to detect corrupt sectors, deletes
files and directories that contain corrupt sectors, and fixes nonfatal errors. There is
no no version.
■
repair—Repairs nonfatal errors detected on flash disk
■
disk0—Specifies flash card in slot 0 of the SRP module; default value is disk0;
available only in Boot mode, because disk0 cannot be in an unmounted state in
a router outside of Boot mode
■
disk1—Specifies flash card in slot 1 of the SRP module; supported only on the
E120 router and the E320 router
Boot, Privileged Exec
Chapter 7: F Commands
forward
Syntax
Release Information
Description
[ no ] [ suspend ] forward
[ interface interfaceType interfaceSpecifier [ next-hop nextHop
[ ignore-default-route ] ]
[ order orderValue ] ] | [ next-hop nextHop [ virtual-router vrName ]
[ ignore-default-route ] [ order orderValue ] ] |
[ order orderValue ] | classifier-group claclName ] [ precedence precValue ]
Command introduced before JUNOSe Release 7.1.0.
Defines a rule to forward all packets that match the specified classifier control list.
If you do not specify a classifier control list using the classifier-group keyword, the
router will select all packets from the interface in the direction of the attached policy
list. The no version removes the rule from the policy list; the suspend version
temporarily suspends the forward rule; the no suspend version resumes application
of a suspended rule.
See the forward interface and forward next-hop commands for descriptions of the
Classifier Group Configuration mode versions of this command.
Options
Mode
Related Topics
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
(IP policy lists only)
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see “Interface Types and Specifiers” on page 5 (IP policy lists only)
■
nextHop—Next-hop IP address (IP policy lists only)
■
ignore-default-route—Ignores the default route as a consideration for the next
hop (IP policy lists only)
■
vrName—Name of the virtual router (IP policy lists only)
■
orderValue—Order of this forward rule within the single classifier; in the range
1–32767; default value is 100 (IP policy lists only)
■
claclName—Classifier control list used to classify packets for this policy
■
precValue—Precedence of this rule in relation to other rules within this set: in
the range 0–32768; default value is 100
Policy List Configuration
■
Assigning Values to the ATM CLP Bit
forward
■
617
JUNOSe 11.0.x Command Reference Guide A to M
forward interface
Syntax
Release Information
Description
[ no ] [ suspend ] forward [ interface interfaceType interfaceSpecifier
[ next-hop nextHop [ ignore-default-route ] ] [ order orderValue ] ]
Command introduced before JUNOSe Release 7.1.0.
Defines a rule to forward all packets that match the current classifier control list. The
no version removes the rule from the policy list; the suspend version temporarily
suspends the forward rule; the no suspend version resumes application of a
suspended rule.
NOTE: The forward interface command replaces the next-interface command,
which may be removed completely in a future release.
Options
Mode
Related Topics
618
■
forward interface
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
nextHop—Next-hop IP address
■
ignore-default-route—Ignores the default route as a consideration for the next
hop
■
orderValue—Order of this forward rule within the single classifier; in the range
1–32767; default value is 100
Classifier Group Configuration
■
Assigning Values to the ATM CLP Bit
Chapter 7: F Commands
forward next-hop
Syntax
Release Information
Description
[ no ] [ suspend ] forward next-hop nextHop [ virtual-router vrName ]
[ ignore-default-route ] [ order orderValue ]
Command introduced before JUNOSe Release 7.1.0.
Defines a rule to forward all packets that match the current classifier control list. The
no version removes the rule from the policy list; the suspend version temporarily
suspends the forward rule; the no suspend version resumes application of a
suspended rule.
NOTE: The forward next-hop command replaces the next-hop command, which
may be removed completely in a future release.
Options
Mode
Related Topics
■
nextHop—Next-hop IP address
■
vrName—Name of the virtual router
■
ignore-default-route—Ignores the default route as a consideration for the next
hop
■
orderValue—Order of this forward rule within the single classifier; in the range
1–32767; default value is 100
Classifier Group Configuration
■
Assigning Values to the ATM CLP Bit
forward next-hop
■
619
JUNOSe 11.0.x Command Reference Guide A to M
forwarding-rate-threshold
Syntax
forwarding-rate-threshold forwardingRateThreshold
no forwarding-rate-threshold
Release Information
Description
Options
Mode
Related Topics
620
■
Command introduced before JUNOSe Release 7.1.0.
Configures the threshold above which forwarded-rate-exceeded events are logged.
The no version removes the threshold.
■
forwardingRateThreshold—Bits per second in the range 0–1073741824
Statistics Profile Configuration
■
Configuring Event Statistics
forwarding-rate-threshold
Chapter 7: F Commands
forwarding-table route-holddown
Syntax
forwarding-table route-holddown timerValue
no forwarding-table route-holddown
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the number of seconds allowed after a routing table change for the accumulation
of additional updates and subsequent distribution of the set of routing table changes
to the line modules. The no version sets the hold-down time to the default value (3
seconds).
■
timerValue—Number of seconds allowed for the accumulation and subsequent
distribution of routing table updates to the line modules; a range of 0-30 seconds,
where 0 specifies an update following each routing table change
Global Configuration
forwarding-table route-holddown
■
621
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay class
Syntax
Release Information
Description
Options
Mode
622
■
frame-relay class
[ no ] frame-relay class mapName
Command introduced before JUNOSe Release 7.1.0.
Associates a map class with a subinterface. The no version removes the association
between the map class and the subinterface.
■
mapName—Name of the map class; use up to 64 characters
Subinterface Configuration
Chapter 7: F Commands
frame-relay classifier-list
Syntax
frame-relay classifier-list classifierName [ traffic-class trafficClassName ]
[ color { green | yellow | red } ] [ user-packet-class userPacketClassValue ]
[ de-bit deValue ]
no frame-relay classifier-list classifierName [ classifierNumber ]
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Creates or modifies a Frame Relay classifier control list. The no version removes the
classifier control list.
■
classifierName—Name of the classifier control list entry
■
trafficClassName—Name of the traffic class to match
■
green—Matches packet color to green, indicating a low drop preference
■
yellow—Matches packet color to yellow, indicating a medium drop preference
■
red—Matches packet color to red, indicating a high drop preference
■
userPacketClassValue—User packet value to match in the range 0–15
■
deValue—Value of the DE bit to match; 0 or 1
Global Configuration
■
Creating or Modifying Classifier Control Lists for Frame-Relay Policy Lists
frame-relay classifier-list
■
623
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay description
Syntax
frame-relay description name
no frame-relay description
Release Information
Description
Options
Mode
624
■
Command introduced before JUNOSe Release 7.1.0.
Assigns a text description or an alias to a Frame Relay interface or subinterface. Use
the show frame-relay interface or show frame-relay subinterface command to display
the text description. The no version removes the description or alias.
■
name—Text string or alias of up to 80 characters for the Frame Relay interface
or subinterface
Interface Configuration, Subinterface Configuration
frame-relay description
Chapter 7: F Commands
frame-relay dos-protection-group
Syntax
frame-relay dos-protection-group groupName
no frame-relay dos-protection-group
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.1.0.
Attaches a Frame Relay denial of service (DoS) protection group to an interface. The
no version removes the attachment of the DoS protection group from the interface.
■
groupName—Name of the DoS protection group; string of up to 31 alphanumeric
characters
Interface Configuration
frame-relay dos-protection-group
■
625
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay fragment
Syntax
frame-relay fragment [ [ fragmentSize ] [ fragmentation-only ] | reassembly-only ]
no frame-relay fragment
Release Information
Description
Options
Mode
626
■
Command introduced before JUNOSe Release 7.1.0.
Configures fragmentation and reassembly for the map class created with the
map-class frame-relay command. The no version stops fragmentation and/or
reassembly on the subinterface.
■
fragmentSize—Maximum payload size of a fragment in bytes; a number in the
range 16–8188; default value is 52
■
fragmentation-only—Specifies fragmentation only
■
reassembly-only—Specifies reassembly only
Map Class Configuration
frame-relay fragment
Chapter 7: F Commands
frame-relay interface-dlci ietf
Syntax
frame-relay interface-dlci dlci ietf
no frame-relay interface-dlci dlci
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Assigns a data-link connection identifier to a specified Frame Relay subinterface on
the router or access server. The DLCI number identifies a virtual circuit. The no
version removes this assignment.
■
dlci—DLCI number to be used on the specified subinterface to identify a virtual
circuit in the range 16–1007
Subinterface Configuration
■
Configuring Frame Relay Layer 2 Services in the JUNOSe BGP and MPLS
Configuration Guide
frame-relay interface-dlci ietf
■
627
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay intf-type
Syntax
frame-relay intf-type type
no frame-relay intf-type
Release Information
Description
Options
Mode
Related Topics
628
■
Command introduced before JUNOSe Release 7.1.0.
Configures a Frame Relay interface type. The no version restores the default value,
DTE.
■
type—One of the following interface types:
■
dce—Router is connected to user DTE equipment
■
dte—Router is connected to a Frame Relay network; the default
■
nni—Router connects two Frame Relay networks
Interface Configuration
■
frame-relay intf-type
Configuring Frame Relay Layer 2 Services in the JUNOSe BGP and MPLS
Configuration Guide
Chapter 7: F Commands
frame-relay keepalive
Syntax
frame-relay keepalive [ seconds ]
no frame-relay keepalive
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Enables the LMI mechanism for serial lines using Frame Relay encapsulation. The
no version disables this capability. The keepalive command is similar to the
frame-relay lmi-t391dte command.
■
seconds—Number in the range 5–30; default value is 10 seconds; defines the
keepalive interval; the interval must be set, and the value on the DTE should be
less than the value set on the DCE
Interface Configuration
frame-relay keepalive
■
629
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay lmi-n391dte
Syntax
frame-relay lmi-n391dte keepExchanges
no frame-relay lmi-n391dte
Release Information
Description
Options
Mode
630
■
Command introduced before JUNOSe Release 7.1.0.
Sets the full-status polling counter (N391) on a DTE interface. The no version restores
the default value, assuming an LMI has been configured.
■
keepExchanges—Number in the range 1– 255; default value is 6; number of keep
exchanges to be done before requesting a full-status message. If you specify a
value of 1, you receive full-status messages only.
Interface Configuration
frame-relay lmi-n391dte
Chapter 7: F Commands
frame-relay lmi-n392dce
Syntax
frame-relay lmi-n392dce threshold
no frame-relay lmi-n392dce
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the error threshold counter (N392) on a DCE interface. The no version removes
current setting and sets the default.
■
threshold—Positive number in the range 1– 10; number of errors that will place
the interface in an operationally down state; default value is 2 errors
Interface Configuration
frame-relay lmi-n392dce
■
631
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay lmi-n392dte
Syntax
frame-relay lmi-n392dte threshold
no frame-relay lmi-n392dte
Release Information
Description
Options
Mode
632
■
Command introduced before JUNOSe Release 7.1.0.
Sets the error threshold counter (N392) on a DTE interface. The no version removes
current setting and sets the default.
■
threshold—Positive number in the range 1–10; number of errors that will place
the interface in an operationally down state; default value is 3 errors
Interface Configuration
frame-relay lmi-n392dte
Chapter 7: F Commands
frame-relay lmi-n393dce
Syntax
frame-relay lmi-n393dce events
no frame-relay lmi-n393dce
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the monitored events count (N393) on a DCE interface. The no version removes
current setting and sets the default.
■
events—Number in the range 1–10 events; specifies the diagnostic window used
to verify link integrity; default value is 2 events (The detection of N392 errors
within the window of N393 samples places the interface in an operationally
down state.)
Interface Configuration
frame-relay lmi-n393dce
■
633
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay lmi-n393dte
Syntax
frame-relay lmi-n393dte events
no frame-relay lmi-n393dte
Release Information
Description
Options
Mode
634
■
Command introduced before JUNOSe Release 7.1.0.
Sets the monitored event count (N393) on a DTE interface. The no version removes
current setting and sets the default.
■
events—Number in the range 1–10 events; default value is 4 events; specifies
the diagnostic window used to verify link integrity (the detection of N392 errors
within the window of N393 samples places the interface in an operationally
down state)
Interface Configuration
frame-relay lmi-n393dte
Chapter 7: F Commands
frame-relay lmi-t391dte
Syntax
frame-relay lmi-t391dte seconds
no frame-relay lmi-t391dte
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the link integrity verification polling timer (T391) on a DTE interface. The no
version removes the current setting and sets the default.
■
seconds—Number in the range 5–30 seconds; specifies the interval in seconds
between status inquiries issued by the DTE; default value is 10 seconds
Interface Configuration
frame-relay lmi-t391dte
■
635
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay lmi-t392dce
Syntax
frame-relay lmi-t392dce seconds
no frame-relay lmi-t392dce
Release Information
Description
Options
Mode
636
■
Command introduced before JUNOSe Release 7.1.0.
Sets the polling verification timer (T392) on a DCE interface. The no version removes
current setting and sets the default.
■
seconds—Number in the range 5–30 seconds; specifies the expected interval in
seconds between status inquiries issued by the DTE equipment; default value is
15 seconds
Interface Configuration
frame-relay lmi-t392dce
Chapter 7: F Commands
frame-relay lmi-type
Syntax
frame-relay lmi-type type
no frame-relay lmi-type
Release Information
Description
Options
Mode
Related Topics
Command introduced before JUNOSe Release 7.1.0.
Selects the LMI type. The no version restores the default value.
■
type—One of the following types:
■
ansi—ANSI T1.617 Annex D
■
cisco—Original Group of Four specification developed by DEC, Northern
Telecom, Stratacom, and Cisco
■
q933a—ITU-T Q.933 Annex A
■
none—No management interface is used
Interface Configuration
■
Configuring Frame Relay Layer 2 Services in the JUNOSe BGP and MPLS
Configuration Guide
frame-relay lmi-type
■
637
JUNOSe 11.0.x Command Reference Guide A to M
frame-relay policy
Syntax
frame-relay policy { input | output } policyName
[ statistics { enabled [ baseline { enabled | disabled } ] [ preserve | merge ] |
disabled [ merge ] } | merge ]
no frame-relay policy { input | output } [ policyName ]
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
merge keyword added in JUNOSe Release 7.2.0.
Assigns a policy list to the ingress or egress of a Frame Relay interface. If you enter
this command when the policy list does not exist, the router will create a policy list
with a filter rule as the default. You must specify the input or output keyword to
assign the policy list to the ingress or egress of the interface. The no version removes
the association between a policy list and an interface.
■
input—Applies policy to data arriving at this interface
■
output—Applies policy to data leaving this interface
■
policyName—Name of the policy; a maximum of 40 characters
■
statistics—Enables or disable collection of policy routing statistics
■
Mode
Related Topics
638
■
frame-relay policy
■
enabled—Enables collection of policy routing statistics
■
baseline enabled—Enables baselining of policy routing statistics
■
baseline disabled—Disables baselining of policy routing statistics
■
preserve—Preserves existing statistics for any classifier-list that is the same
for both the new and old policy attachments when you attach a new policy
to an interface
■
disabled—Disables collection of policy routing statistics
merge—Enables merging of multiple policies to form a single policy
Interface Configuration
■
Setting a Statistics Baseline for Policies
Chapter 7: F Commands
frame-relay policy-list
Syntax
Release Information
Description
Options
Mode
Related Topics
[ no ] frame-relay policy-list policyName
Command introduced before JUNOSe Release 7.1.0.
Creates or modifies a Frame Relay policy list and accesses Policy List Configuration
mode. If you execute a frame-relay policy-list command and type exit, the router
creates a policy list with a filter rule as the default. Attaching this policy list to an
interface filters all packets on that interface. The no version removes a policy list.
■
policyName—Name of the policy list
Global Configuration
■
Creating Policy Lists for Frame Relay
frame-relay policy-list
■
639
JUNOSe 11.0.x Command Reference Guide A to M
framing
Syntax
framing framingType
no framing
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Specifies the framing mode used by E3 or T3 interfaces. Available modes vary by
the type of interface. The no version restores the default for that interface.
■
framingType—One of the following framing types:
E3 Frame
■
g751—Default; G.751 compliant frame
■
g832—G.832 compliant frame
T3
Mode
640
■
framing
■
c-bit—Default; specifies c-bit parity framing
■
m23—Specifies M23 multiplexer framing
Controller Configuration
Chapter 7: F Commands
frequency
Syntax
frequency frequencyValue
no frequency
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
In RTR Configuration mode, sets the time interval between RTR operations. In SNMP
Event Manager Configuration mode, sets the frequency (in seconds) at which you
want MIB sampling to occur. The no version restores the default value.
■
frequencyValue—Number of seconds between RTR operations or MIB sampling
operations, depending on the configuration mode; with RTR operations, for both
types (echo and pathEcho), the default value is 60 seconds; with MIB sampling,
the default value is 600 seconds.
RTR Configuration, SNMP Event Manager Configuration
frequency
■
641
JUNOSe 11.0.x Command Reference Guide A to M
ftp-server enable
Syntax
Release Information
Description
Mode
642
■
ftp-server enable
[ no ] ftp-server enable
Command introduced before JUNOSe Release 7.1.0.
Enables the FTP server and monitors the FTP port for attempts to connect to the FTP
server. The no version terminates the current FTP sessions and disables the FTP
server.
Global Configuration
Chapter 7: F Commands
ftp-server flush
Syntax
Release Information
Description
Mode
Related Topics
ftp-server flush
Command introduced in JUNOSe Release 10.0.0.
Forcibly terminates existing file transfer sessions to enable unified ISSU to proceed
successfully. There is no no version.
Privileged Exec
■
FTP Server File Transfers Behaviors in the JUNOSe System Basics Configuration
Guide
ftp-server flush
■
643
JUNOSe 11.0.x Command Reference Guide A to M
full-spf-always
Syntax
Release Information
Description
Mode
644
■
full-spf-always
[ no ] full-spf-always
Command introduced before JUNOSe Release 7.1.0.
Enables full SPF calculations for ISIS network changes. The no version restores partial
route calculation (PRC) mode for SPF calculations.
Router Configuration
Chapter 8
G Commands
■
645
JUNOSe 11.0.x Command Reference Guide A to M
global export map
Syntax
global export map [ ipv4 | ipv6 ] routeMap
no global export map [ ipv4 | ipv6 ]
Release Information
Description
Options
Mode
646
■
Command introduced before JUNOSe Release 7.1.0.
Associates a route map with a VRF to modify and filter routes exported by the VRF
to the global BGP non-VPN RIB in the parent VR. Both IPv4 and IPv6 routes are
exported unless you issue the appropriate keyword to restrict exportation. The no
version disables the exporting of routes to the global BGP non-VPN RIB.
■
ipv4—Specifies that only IPv4 routes are exported to the global BGP non-VPN
RIB
■
ipv6—Specifies that only IPv6 routes are exported to the global BGP non-VPN
RIB
■
routeMap—Name of a route map; string of up to 32 alphanumeric characters
VRF Configuration
global export map
Chapter 8: G Commands
global import map
Syntax
global import map [ ipv4 | ipv6 ] routeMap max-routes maxNumber
no global import map [ ipv4 | ipv6 ]
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.1.0.
Associates a route map with a VRF to modify and filter routes imported by the VRF
from the global BGP non-VPN RIB in the parent VR. Both IPv4 and IPv6 routes are
imported unless you issue the appropriate keyword to restrict importation. The no
version disables the importing of routes from the global BGP non-VPN RIB to the
VRF RIB.
■
ipv4—Specifies that only IPv4 routes are imported from the global BGP non-VPN
RIB
■
ipv6—Specifies that only IPv6 routes are imported from the global BGP non-VPN
RIB
■
routeMap—Name of a route map; string of up to 32 alphanumeric characters
■
maxNumber—Maximum number of routes that can be imported; integer in the
range 1–4294967295
VRF Configuration
global import map
■
647
JUNOSe 11.0.x Command Reference Guide A to M
graceful-restart
Syntax
Release Information
Description
Mode
648
■
graceful-restart
[ no ] graceful-restart
Command introduced before JUNOSe Release 7.1.0.
Configures hitless restart capability for OSPFv2. If high availability is active, the OSPF
instance can perform a hitless restart when switching or failing over to the secondary
SRP module. The no version disables OSPF graceful restart capability on the router.
Router Configuration
Chapter 8: G Commands
graceful-restart helper
Syntax
Release Information
Description
Mode
[ no ] graceful-restart helper
Command introduced before JUNOSe Release 7.1.0.
Configures the router to function as an OSPFv2 or OSPFv3 graceful restart helper
router. The no version disables OSPF graceful restart helper mode capability on the
router.
Router Configuration
graceful-restart helper
■
649
JUNOSe 11.0.x Command Reference Guide A to M
graceful-restart helper-abort-topology-change
Syntax
graceful-restart helper-abort-topology-change { any | non-externals }
no graceful-restart helper-abort-topology-change
Release Information
Description
Options
Mode
650
■
Command introduced before JUNOSe Release 7.1.0.
Configures the OSPFv2 or OSPFv3 helper router to cease help to a restarting router
under the specified conditions. However, the router continues to act as helper for
subsequent graceful restart requests. The no version turns off the graceful restart
helper capability.
■
any—Abandons the helper role when any LSA changes during the restart
■
non-externals—Abandons the helper role only when any nonexternal LSA changes
during the restart
Router Configuration
graceful-restart helper-abort-topology-change
Chapter 8: G Commands
graceful-restart notify-time
Syntax
Release Information
Description
Options
Mode
[ no ] graceful-restart notify-time notifyTime
Command introduced before JUNOSe Release 7.1.0.
Specifies the estimated time for the OSPFv2 router to send purged grace LSAs over
all interfaces. The no version returns the notify duration timer to its default value,
15 seconds.
■
notifyTime—Number of seconds during which the router can send purged grace
LSAs over all interfaces; in the range 1–1800
Router Configuration
graceful-restart notify-time
■
651
JUNOSe 11.0.x Command Reference Guide A to M
graceful-restart restart-time
Syntax
Release Information
Description
Options
Mode
652
■
[ no ] graceful-restart restart-time restartTime
Command introduced before JUNOSe Release 7.1.0.
Specifies the estimated time for the restarting OSPFv2 router to reacquire OSPF
neighbors that were fully functional prior to the restart. When this timer expires, the
restarting router exits the restart procedure, originates any LSAs that were suppressed
during the restart, removes any self-originated LSAs that it received from helping
neighbors, runs SPF, and updates any routes in the routing table. The no version
returns the restart duration timer to its default value, 180 seconds.
■
restartTime—Number of seconds during which the restarting router can reacquire
OSPF neighbors that were fully functional prior to the restart; in the range 1–1800
Router Configuration
graceful-restart restart-time
Chapter 8: G Commands
grace-period
Syntax
grace-period days [ hours [ minutes [ seconds ] ] ]
no grace-period
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.0.0.
Configures the grace period for address leases allocated from the current DHCP local
address pool. When the address lease expires, the address enters the grace period,
when the address continues to be unavailable to other clients and can only be
reassigned to the original client. This command applies only to expired releases—to
optionally apply the grace period to addresses that are explicitly released by a client,
you must enable the use-release-grace-period command. The no version restores
the default, in which no grace period is associated with the local address pool.
■
days—Number of days in the grace period; in the range 0–32767
■
hours—Number of hours in the grace period; in the range 0–23
■
minutes—Number of minutes in the grace period; in the range 0–59
■
seconds—Number of seconds in the grace period; in the range 0–59
DHCP Local Pool Configuration
grace-period
■
653
JUNOSe 11.0.x Command Reference Guide A to M
gre destination profile
Syntax
gre destination profile profileName { [ any-virtual-router ] |
[ virtual-router virtualRouterName ] }
no gre destination profile profileName
Release Information
Description
Options
Mode
654
■
Command introduced in JUNOSe Release 8.2.0.
Configures a destination profile for dynamic GRE tunnels and enters IP Tunnel
Destination Profile Configuration mode. The no version deletes the destination profile.
■
profileName—Name of the destination profile
■
any-virtual-router—Specifies a default destination profile for all virtual routers;
only one default destination profile can be defined in the system
■
virtualRouterName—Name of the transport virtual router
Global Configuration
gre destination profile
Chapter 8: G Commands
green-mark
Syntax
Release Information
Description
Options
Mode
Related Topics
[ no ] green-mark colorMarkValue
Command introduced in JUNOSe Release 7.2.0.
Applies ToS mark value to green packets, which can be from policy actions, earlier
policies, or rate-limit hierarchies. The no version deletes the ToS mark value.
■
colorMarkValue—Value of the ToS mark to be applied: in the range 0–255
Color Mark Profile Configuration
■
Hierarchical Rate Limits Overview
■
Policy Rule Precedence
green-mark
■
655
JUNOSe 11.0.x Command Reference Guide A to M
gre-tunnel classifier-list
Syntax
gre-tunnel classifier-list classifierName
[ traffic-class className ] [ color { green | yellow | red } ]
[ user-packet-class userPacketClassValue ]
[ precedence precNum | dsfield dsfieldNum | tos tosNum ]
no gre-tunnel classifier-list classifierName [ classifierNumber ]
Release Information
Description
Options
Mode
Related Topics
656
■
Command introduced before JUNOSe Release 7.1.0.
Creates or modifies a GRE tunnel classifier control list. The no version deletes the
classifier control list.
■
classifierName—Name of a classifier list entry
■
className—Name of a traffic class; the router supports up to eight traffic classes
■
green—Matches packet color to green, indicating a low drop preference
■
yellow—Matches packet color to yellow, indicating a medium drop preference
■
red—Matches packet color to red, indicating a high drop preference
■
userPacketClassValue—Value of the user packet class in the range 0–15
■
precNum—Upper three bits of the ToS byte; in the range 0–7
■
dsfieldNum—Upper six bits of the ToS byte; in the range 0–63
■
tosNum—Whole eight bits of the ToS byte; in the range 0–255
■
classifierNumber—Index of the classifier control list entry to be deleted; an integer
in the range 1–10000
Global Configuration
■
Creating or Modifying Classifier Control Lists for GRE Tunnel Policy Lists
gre-tunnel classifier-list
Chapter 8: G Commands
gre-tunnel policy
Syntax
gre-tunnel policy { input | output } policyName
[ statistics { enabled | disabled | preserve } | merge ]
no gre-tunnel policy { input | output } [ policyName ]
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
merge keyword added in JUNOSe Release 7.2.0.
Assigns a GRE tunnel policy list to an interface. If you enter the gre-tunnel policy
command and the policy list does not exist, the router creates a policy list with no
rules, the default. Attaching this policy list to an interface filters all packets on that
interface. You must specify the input or output keyword to assign the policy list to
the ingress or egress of the interface. The no version removes the association between
a policy list and an interface.
■
input—Applies policy to data arriving at this interface
■
output—Applies policy to data leaving this interface
■
policyName—Name of the policy; a maximum of 40 characters
■
statistics—Enables or disables collection of policy routing statistics
■
Mode
Related Topics
■
enabled—Enables collection of policy routing statistics
■
disabled—Disables collection of policy routing statistics
■
preserve—Preserves existing statistics for any classifier-list that is the same
for both the new and old policy attachments when you attach a new policy
to an interface
merge—Enables merging of multiple policies to form a single policy
Interface Configuration
■
Setting a Statistics Baseline for Policies
gre-tunnel policy
■
657
JUNOSe 11.0.x Command Reference Guide A to M
gre-tunnel policy-list
Syntax
Release Information
Description
Options
Mode
Related Topics
658
■
[ no ] gre-tunnel policy-list policyName
Command introduced before JUNOSe Release 7.1.0.
Creates the specified policy list and accesses Policy List Configuration mode. If you
enter the gre-tunnel policy-list command and the policy list does not exist, the
router creates a policy list with no rules, the default. Attaching this policy list to an
interface filters all packets on that interface. The no version deletes the policy list.
■
policyName—Name of a policy list; string of up to 40 alphanumeric characters
Global Configuration
■
gre-tunnel policy-list
Creating Policy Lists for GRE Tunnels
Chapter 8: G Commands
group
Syntax
To specify a group scheduler node for QoS:
[ no ] typeOfInterface group groupName scheduler-profile schedulerProfileName
To specify a Diffie-Hellman group:
group { 1 | 2 | 5 }
no group
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
From QoS Profile Configuration mode, specifies that a group scheduler node be
configured for each interface of the given interface type. The no version removes
this rule from the QoS profile.
From IKE Policy Configuration mode, assigns a Diffie-Hellman group to the IKE policy.
The no version restores the default, 1024-bit Diffie-Hellman group.
Options
Mode
Related Topics
■
typeOfInterface—Interface types for group scheduler nodes to be configured:
atm, ethernet, serial, server-port
■
groupName—Name of the traffic class group
■
schedulerProfileName—Name of the scheduler profile
■
1—Specifies the 768-bit group
■
2—Specifies the 1024-bit group
■
5—Specifies the 1536-bit group
IKE Policy Configuration, QoS Profile Configuration
■
Configuring a QoS Profile
■
Configuring Shadow Nodes
■
Configuring QoS for an L2TP Session
■
Configuring QoS for Tunnel-Server Ports for L2TP LNS Sessions
group
■
659
JUNOSe 11.0.x Command Reference Guide A to M
gsmp-syn-timeout
Syntax
Release Information
Description
[ no ] gsmp-syn-timeout timeOutValue
Command introduced in JUNOSe Release 11.0.0.
Defines the ANCP neighbor session connection timeout value (in seconds). The
neighbor session connection is established on the TCP session.
The no version reverts the session timeout to its default setting (60 seconds).
Options
Mode
660
■
gsmp-syn-timeout
■
timeOutValue— Session timeout in seconds. The timer value cannot be more
than the ANCP session timeout value. The default value for the ANCP session
timeout is 75 seconds.
L2C Configuration
Chapter 9
H Commands
■
661
JUNOSe 11.0.x Command Reference Guide A to M
halt
Syntax
The syntax of the command depends on whether you enter it from Boot mode or
Privileged Exec mode.
From Boot mode:
halt
From Privileged Exec mode:
halt [ force | primary-srp [ force ] | standby-srp [ force ] ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Stops operation on both SRP modules or on the specified SRP module. When the
high availability state is active or pending, this command ensures that the router
configuration, up to when you issued the halt command, is mirrored to the standby
SRP module. There is no no version.
CAUTION: To prevent corruption of NVS, issue this command before you remove or
power down an SRP module.
Options
■
force—Prompts the user to confirm that the router should stop operation if the
SRP modules are in certain states, such as writing configuration data to NVS,
that could lead to loss of configuration data or corruption of NVS.
CAUTION: When the high availability state is active or pending, issuing the force
keyword does not guarantee that the configuration has been mirrored; recent
configuration changes may be lost if you issue the force keyword.
Mode
662
■
halt
■
primary-srp—Stops operation on primary SRP module only
■
standby-srp—Stops operation on standby SRP module only
Boot, Privileged Exec
Chapter 9: H Commands
hash
Syntax
hash { sha | md5 }
no hash
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the hash algorithm in an IKE policy. The no version restores the default, SHA-1.
■
sha—Specifies SHA-1 (HMAC variant) as the hash algorithm
■
md5—Specifies MD5 (HMAC variant) as the hash algorithm
IKE Policy Configuration
hash
■
663
JUNOSe 11.0.x Command Reference Guide A to M
hdlc dos-protection-group
Syntax
hdlc dos-protection-group groupName
no hdlc dos-protection-group
Release Information
Description
Options
Mode
664
■
Command introduced in JUNOSe Release 8.1.0.
Attaches an HDLC denial of service (DoS) protection group to an interface. The no
version removes the attachment of the DoS protection group from the interface.
■
groupName—Name of the DoS protection group; string of up to 31 alphanumeric
characters
Interface Configuration
hdlc dos-protection-group
Chapter 9: H Commands
hdlc down-when-looped
Syntax
Release Information
Description
Mode
[ no ] hdlc down-when-looped
Command introduced before JUNOSe Release 7.1.0.
Enables loopback detection on a Cisco HDLC interface. Loopback detection is disabled
by default. The no version disables loopback detection.
Interface Configuration, Subinterface Configuration
hdlc down-when-looped
■
665
JUNOSe 11.0.x Command Reference Guide A to M
hdlc keepalive
Syntax
hdlc keepalive [ seconds ]
no hdlc keepalive
Release Information
Description
Options
Mode
666
■
hdlc keepalive
Command introduced before JUNOSe Release 7.1.0.
Specifies a keepalive value. The keepalive mechanism tracks the health of the
connection. The no version turns off the keepalive feature.
■
seconds—Keepalive timeout period in the range 0–6553 seconds; default value
is 10. A value of zero (0) turns off the keepalive feature.
Interface Configuration, Subinterface Configuration
Chapter 9: H Commands
hdlc shutdown
Syntax
Release Information
Description
Mode
[ no ] hdlc shutdown
Command introduced before JUNOSe Release 7.1.0.
Stops or restarts a Cisco HDLC session. The no version restarts a Cisco HDLC session.
Interface Configuration, Subinterface Configuration
hdlc shutdown
■
667
JUNOSe 11.0.x Command Reference Guide A to M
hello hold-time
Syntax
hello hold-time seconds
no hello hold-time
Release Information
Description
Options
Mode
668
■
hello hold-time
Command introduced before JUNOSe Release 7.1.0.
Configures the MPLS hold time, the period that a sending LSR maintains a record of
link hello messages from the receiving LSR without receipt of another link hello from
that LSR. Each LSR peer sends the hold time in its link hello messages; peers negotiate
to use the minimum of the hold times proposed by all LSRs on the same subnet. The
hold timer is restarted whenever the LSR receives a link hello from the adjacent peer.
The timer expires if no link hello is received from the adjacent peer within the hold
time. The LSR deletes the link hello adjacency when the timer expires. If all link hello
adjacencies are deleted for an LDP session, then the LSR terminates the LDP session.
The no version restores the default value, 15 seconds.
■
seconds—Number of seconds, in the range 1–65535
LDP Profile Configuration
Chapter 9: H Commands
hello interval
Syntax
hello interval seconds
no hello interval
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.1.0.
Specifies the interval between link-hello packets sent by LDP. The no version restores
the default interval, 5 seconds.
■
seconds—Number of seconds, in the range 1–65535
LDP Profile Configuration
hello interval
■
669
JUNOSe 11.0.x Command Reference Guide A to M
hello-interval
Syntax
hello-interval helloInterval
no hello-interval
Release Information
Description
Options
Mode
670
■
hello-interval
Command introduced before JUNOSe Release 7.1.0.
Specifies the interval between hello packets that the router sends on the OSPF
remote-neighbor interface. The no version restores the default value.
■
helloInterval—Number in the range 1–65535 seconds; default value is 10 seconds
Remote Neighbor Configuration
Chapter 9: H Commands
help
Syntax
Release Information
Description
Mode
help
Command introduced before JUNOSe Release 7.1.0.
Displays basic information about the Help system. There is no no version.
All modes
help
■
671
JUNOSe 11.0.x Command Reference Guide A to M
hops-of-statistics-kept
Syntax
hops-of-statistics-kept [ hopsKeptValue ]
no hops-of-statistics-kept
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Sets the number of hops to keep statistics for an entry. The no version restores the
default value.
■
hopsKeptValue—Number of hops for which statistics are collected for a particular
pathEcho type; default value is 16 for a pathEcho entry and 1 for an echo entry;
if you omit this option, all hops found are recorded
NOTE: The E Series router supports only the pathEcho and echo types.
Mode
672
■
RTR Configuration
hops-of-statistics-kept
Chapter 9: H Commands
host
Syntax
host hostname ipAddress [ ftp [ [ userAlgorithmType ] userName
[ [ passwordAlgorithmType ] password ] ] ] | [ tftp ]
no host hostname
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Adds or modifies an entry to the host table. The no version removes the specified
host.
■
hostname—Hostname to add or modify; up to 20 characters
■
ipAddress—IPv4 or IPv6 address of the host
■
ftp—Specifies that the host is an FTP server; the default protocol if neither ftp
nor tftp is specified
■
userAlgorithmType—Type of username
■
0—Indicates that the userName is unencrypted; the default
■
8—Indicates that the userName is an encrypted password
■
userName—Username used to access an FTP server (but not an NFS server);
defaults to anonymous
■
passwordAlgorithmType—Type of password
■
0—Indicates that the password is unencrypted; the default
■
8—Indicates that the password is an encrypted password
■
password—Password used to access an FTP server (but not an NFS server);
defaults to null
■
tftp—Specifies that the host is a TFTP server
Global Configuration
host
■
673
JUNOSe 11.0.x Command Reference Guide A to M
hostname
Syntax
hostname hostname
no hostname
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Sets the name for the router; this hostname subsequently appears in the router CLI
prompt. The no version removes the hostname from the router.
NOTE: In Domain Map Tunnel Configuration mode, this command has been replaced
by the clear suspicious-control-flow-detection command and may be removed
completely from Domain Map Tunnel Configuration mode in a future release.
Options
Mode
674
■
hostname
■
hostname—String of up to 63 characters (no spaces)
Global Configuration
Chapter 9: H Commands
hotfix activate
Syntax
hotfix activate hfixFilename
no hotfix activate { hfixFilename | all }
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.2.0.
Activates the specified hotfix present on the local flash card. The no version
deactivates the specified hotfix or all currently active hotfixes. Deactivating a hotfix
restores the router to the state that existed before the hotfix was activated.
■
hfixFileName—Name of a hotfix software file (.hfx) on the local file system
■
all—Specifies that all currently active hotfixes are deactivated
Privileged Exec
hotfix activate
■
675
JUNOSe 11.0.x Command Reference Guide A to M
676
■
hotfix activate
Chapter 10
I Commands
■
677
JUNOSe 11.0.x Command Reference Guide A to M
id
Syntax
Release Information
Description
Options
Mode
678
■
id
[ no ] id neighborId
Command introduced before JUNOSe Release 7.1.0.
Specifies the ANCP neighbor ID in the L2C Neighbor (config-l2c-neighbor)
Configuration mode. The no version removes the neighbor ID.
■
neighborId—ANCP neighbor ID (MAC address) in the form XXXX.XXXX.XXXX
L2C Neighbor Configuration
Chapter 10: I Commands
identification
Syntax
identification serverId
no identification
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
From Domain Map Tunnel Configuration or Tunnel Group Tunnel mode, specifies
the assignment ID of an L2TP tunnel. The no version removes the assignment ID
from the tunnel.
■
serverId—L2TP tunnel assignment ID up to 32 characters
Domain Map Tunnel Configuration, Tunnel Group Tunnel
identification
■
679
JUNOSe 11.0.x Command Reference Guide A to M
idle-character
Syntax
idle-character { flags | marks }
no idle-character
Release Information
Description
Options
Mode
680
■
idle-character
Command introduced before JUNOSe Release 7.1.0.
Configures the HDLC idle character that is transmitted between HDLC packets. The
no version restores the default value.
■
flags—Sets the idle character to 0x7E; the default value
■
marks—Sets the idle character to 0xFF
Interface Configuration
Chapter 10: I Commands
igmp disable
Syntax
Release Information
Description
Mode
[ no ] igmp disable
Command introduced before JUNOSe Release 7.1.0.
Disables IGMP on a virtual router. The no version reenables IGMP on a virtual router.
Router Configuration
igmp disable
■
681
JUNOSe 11.0.x Command Reference Guide A to M
igmp promiscuous
Syntax
Release Information
Description
Mode
682
■
[ no ] igmp promiscuous
Command introduced before JUNOSe Release 7.1.0.
Allows all IGMP interfaces on the router to accept IGMP reports from hosts on any
subnet. The no version allows IGMP interfaces on the router to accept IGMP reports
only from hosts on their associated subnets.
Router Configuration
igmp promiscuous
Chapter 10: I Commands
ignore-lsp-errors
Syntax
Release Information
Description
Mode
[ no ] ignore-lsp-errors
Command introduced before JUNOSe Release 7.1.0.
Allows the router to ignore IS-IS link-state packets that are received with internal
checksum errors rather than purging the link-state packets. The no version disables
this function.
Router Configuration
ignore-lsp-errors
■
683
JUNOSe 11.0.x Command Reference Guide A to M
ike crl
Syntax
ike crl { ignored | optional | required }
no ike crl
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Controls how the router handles certificate revocation lists (CRLs) during negotiation
of IKE phase 1 signature authentication. The no version returns the CRL setting to
the default, optional.
NOTE: This command has been replaced by the ipsec crl command and may be
removed completely in a future release.
Options
Mode
684
■
ike crl
■
ignored—Allows negotiations to succeed even if a CRL is invalid or the peer's
certificate appears in the CRL; this is the most lenient setting
■
optional—If the router finds a valid CRL, it uses it; this is the default
■
required—Requires a valid CRL; either the certificates belonging to the E Series
router or the peer must not appear in the CRL; this is the strictest setting
Global Configuration
Chapter 10: I Commands
ike local-identity
Syntax
ike local-identity { ip address ipAddress | username userName | domain-name
domainName }
no ike local-identity
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.3.0.
Sets the local IKE identity used for IKE security association (SA) negotiations. The no
version removes the local IKE identity.
■
ipAddress—IP address in 32-bit dotted decimal format (for example, 192.56.32.2)
■
userName—Username used as the IKE local identity for IKE SA negotiations
■
domainName—Domain name used as the IKE local identity for IKE SA negotiations
(string of 1–32 characters)
IPSec Tunnel Profile Configuration
ike local-identity
■
685
JUNOSe 11.0.x Command Reference Guide A to M
ike peer-identity distinguished-name
Syntax
ike peer-identity distinguished-name dnString
no ike peer-identity ip address distinguished-name
Release Information
Description
Options
Mode
686
■
Command introduced in JUNOSe Release 7.3.0.
Enables this profile to accept logins from users that present an ASN.1-encoded
distinguished name as an IKE identity type and the user-provided IKE identity matches
each distinguished name field in this profile. The no version removes the peer IKE
identity.
■
dnString—String of 1–32 characters used as the distinguished name
IPSec Tunnel Profile Configuration
ike peer-identity distinguished-name
Chapter 10: I Commands
ike peer-identity domain-name
Syntax
ike peer-identity domain-name domainName
no ike peer-identity ip address domain-name
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.3.0.
Enables this profile to accept logins from users that present a userFQDN or FQDN
as an IKE identity type and the domain name portion of the IKE identity matches
the domain name setting for this profile. The no version removes the peer IKE
identity.
■
domainName—String of 1–32 characters used as the domain name
IPSec Tunnel Profile Configuration
ike peer-identity domain-name
■
687
JUNOSe 11.0.x Command Reference Guide A to M
ike peer-identity ip address
Syntax
ike peer-identity ip address ipAddress [ ipMask ]
no ike peer-identity ip address ip address
Release Information
Description
Options
Mode
688
■
Command introduced in JUNOSe Release 7.3.0.
Enables this profile to accept logins from users that present an IP address as an IKE
identity type and the IP address resides within the specified network. The no version
removes the peer IKE identity.
■
ipAddress—IP address in 32-bit dotted decimal format (for example, 192.56.32.2)
■
ipMask—Mask for associated IP subnet in dotted decimal or prefix length notation
IPSec Tunnel Profile Configuration
ike peer-identity ip address
Chapter 10: I Commands
ike peer-identity username
Syntax
ike peer-identity username userName
no ike peer-identity ip address username
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.3.0.
Enables this profile to accept logins from users that present a userFQDN as an IKE
identity type and the username portion of the IKE identity matches the username
setting for this profile. The no version removes the peer IKE identity.
■
userName—String of 1–32 characters used as the user name
IPSec Tunnel Profile Configuration
ike peer-identity username
■
689
JUNOSe 11.0.x Command Reference Guide A to M
import map
Syntax
import map [ ipv4 | ipv6 ] routeMap
no import map [ ipv4 | ipv6 ]
Release Information
Description
Options
Mode
690
■
import map
Command introduced before JUNOSe Release 7.1.0.
Associates a route map with a VRF to modify and filter routes imported by the VRF
from the global BGP VPN RIB. Both IPv4 and IPv6 routes are imported unless you
issue the appropriate keyword to restrict importation. The no version enables all
routes whose route targets match the import route targets of the VRF to be imported
without applying a route map.
■
ipv4—Specifies that only IPv4 routes are imported from the global BGP VPN RIB
■
ipv6—Specifies that only IPv6 routes are imported from the global BGP VPN RIB
■
routeMap—Name of a route map; string of up to 32 alphanumeric characters
VRF Configuration
Chapter 10: I Commands
inarp
Syntax
inarp [ frequency ]
no inarp
Release Information
Description
Command introduced in JUNOSe Release 7.1.0.
ATM VC Class Configuration mode added in JUNOSe Release 7.3.0.
In ATM VC Configuration mode, enables Inverse ARP (InARP) on an ATM PVC that
resides on an ATM 1483 NBMA subinterface. Optionally, you can specify the InARP
refresh rate. The inarp command is valid only for data PVCs configured with aal5snap
encapsulation; you cannot use this command for data PVCs with other encapsulation
types or for control (ILMI or signaling) PVCs. The no version restores the default
behavior, which disables InARP.
In ATM VC Class Configuration mode, enables InARP as part of a VC class definition
that you assign to an ATM data PVC. The no version restores the default behavior,
which disables InARP, in the VC class.
Options
Mode
■
frequency—InARP refresh rate in minutes, in the range 1–60; default value is 15
ATM VC Configuration, ATM VC Class Configuration
inarp
■
691
JUNOSe 11.0.x Command Reference Guide A to M
include circuit-identifier
Syntax
include circuit-identifier circuitType [ prepend-circuit-type ]
no include circuit-identifier
Release Information
Description
Options
Mode
692
■
Command introduced before JUNOSe Release 7.1.0.
Specifies that the circuit identifier is included when the router automatically generates
a username for an IP service profile. The no version disables inclusion of the circuit
identifier.
■
circuitType—Type of circuit; atm or vlan
■
prepend-circuit-type—Specifies that the circuit type is included in the username
IP Service Profile Configuration
include circuit-identifier
Chapter 10: I Commands
include dhcp-option 82
Syntax
Release Information
Description
Mode
[ no ] include dhcp-option 82 { agent-circuit-id | agent-remote-id }
Command introduced in JUNOSe Release 7.3.0.
Specifies that the agent-circuit-id suboption or the agent-remote-id suboption of the
DHCP relay agent information option (option 82) is included when the router
automatically generates a username for an IP service profile. The no version disables
inclusion of the suboption.
IP Service Profile Configuration
include dhcp-option 82
■
693
JUNOSe 11.0.x Command Reference Guide A to M
include hostname
Syntax
Release Information
Description
Mode
694
■
[ no ] include hostname
Command introduced in JUNOSe Release 7.3.0.
Specifies that the router's hostname is included when the router automatically
generates a username for an IP service profile. The no version disables inclusion of
the hostname.
IP Service Profile Configuration
include hostname
Chapter 10: I Commands
include ip-address
Syntax
Release Information
Description
Mode
[ no ] include ip-address
Command introduced before JUNOSe Release 7.1.0.
Specifies that the IP address is included when the router automatically generates a
username for an IP service profile. The no version disables inclusion of the IP address.
IP Service Profile Configuration
include ip-address
■
695
JUNOSe 11.0.x Command Reference Guide A to M
include mac-address
Syntax
Release Information
Description
Mode
696
■
[ no ] include mac-address
Command introduced before JUNOSe Release 7.1.0.
Specifies that the MAC address is included when the router automatically generates
a username for an IP service profile. The no version disables inclusion of the MAC
address.
IP Service Profile Configuration
include mac-address
Chapter 10: I Commands
include virtual-router-name
Syntax
Release Information
Description
Mode
[ no ] include virtual-router-name
Command introduced before JUNOSe Release 7.1.0.
Specifies that the virtual router name is included when the router automatically
generates a username for an IP service profile. The no version disables inclusion of
the virtual router name.
IP Service Profile Configuration
include virtual-router-name
■
697
JUNOSe 11.0.x Command Reference Guide A to M
index
Syntax
index indexNumber next-address ipAddress [ [ mask ] ipMask ] [ loose ]
no index indexNumber
Release Information
Description
Options
Mode
698
■
index
Command introduced before JUNOSe Release 7.1.0.
Sets a next hop at a particular index in the MPLS explicit path. The no version removes
the next hop from the index.
■
indexNumber—Number of a node in an ordered set of abstract nodes; in the
range 1–255
■
ipAddress—Address of the next hop
■
ipMask—[ not currently used] mask for the next adjacent address
■
loose—Node is not necessarily directly connected (adjacent) to the previous node
in the path. If loose is not configured, the configuration defaults to strict. Strict
indicates that the node is directly connected to the previous node.
Explicit Path Configuration
Chapter 10: I Commands
instance-interface-type
Syntax
instance-interface-type {instanceInterfaceType | set | superset }
no instance-interface-type { instanceInterfaceType | all }
Release Information
Description
Options
Mode
Related Topics
Command introduced in JUNOSe Release 7.1.0.
lag keyword added in JUNOSe Release 8.1.0.
set and superset keywords added in JUNOSe Release 9.2.0.
Assigns an instance-interface type to a QoS parameter definition. Instance-interface
types indicate the interfaces for which QoS clients can assign QoS parameter
instances. You can specify up to eight instance-interface types for each parameter
definition. The no version removes the specified instance-interface type from the
parameter definition.
■
instanceInterfaceType—One of the following instance-interface types: atm, atm-vc,
atm-vp, bridge, ethernet, fr-vc, ip, ip-tunnel, ipv6, lag, l2tp-session, l2tp-tunnel,
lsp, pppoe, serial, server-port, svlan, vlan
■
set—Specifies an interface set as an instance-interface type
■
superset—Specifies an interface superset as an instance-interface type
■
all—Removes all instance-interface types
QoS Parameter Definition
■
Configuring a Basic Parameter Definition for QoS Administrators
■
Creating a QoS Parameter on an Interface Superset or Interface Set
instance-interface-type
■
699
JUNOSe 11.0.x Command Reference Guide A to M
interface
Syntax
Release Information
Description
[ no ] interface interfaceType interfaceSpecifier [ extension ]
Command introduced before JUNOSe Release 7.1.0.
Configures an interface. The no version removes the subinterface or the logical
interface.
NOTE: See the individual interface command entries for the syntax for each type of
interface.
Options
Mode
700
■
interface
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
extension—Option that depends on the type of interface
Global Configuration
Chapter 10: I Commands
interface atm
Syntax
Release Information
Description
[ no ] interface atm interfaceSpecifier [ multipoint | point-to-point ]
Command introduced before JUNOSe Release 7.1.0.
Configures an ATM interface or subinterface type. The no version removes the
interface or subinterface.
NOTE: On the OC3-2 GE APS I/O module, you can configure only OC3/STM1 ATM
interfaces in ports 0 and 1. Port 2 is reserved for a Gigabit Ethernet interface.
Options
Mode
Related Topics
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
multipoint—Specifies an NBMA subinterface
■
point-to-point—Specifies an ATM interface or subinterface; default
Global Configuration, Interface Configuration
■
Configuring an MPLS Pseudowire with VCC Cell Relay Encapsulation, Configuring
Local ATM Cross-Connects with AAL5 Encapsulation, and Configuring MPLS LSPs
for L2VPNs in the JUNOSe BGP and MPLS Configuration Guide
interface atm
■
701
JUNOSe 11.0.x Command Reference Guide A to M
interface-event-disable
Syntax
Release Information
Description
Mode
702
■
[ no ] interface-event-disable
Command introduced before JUNOSe Release 7.1.0.
Specifies that RIP does not purge the routing table on a RIP interface that has been
brought down. The no version restores the default condition, wherein RIP does purge
the routing table on an interface after a down event.
Address Family Configuration, Router Configuration
interface-event-disable
Chapter 10: I Commands
interface fastEthernet
Syntax
Release Information
Description
Options
Mode
Related Topics
[ no ] interface fastEthernet interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Specifies a Fast Ethernet interface or subinterface or creates a subinterface over a
Fast Ethernet interface. The no version removes the interface or subinterface.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
■
Configuring Customer-Facing Interfaces in the L2VPN Instance, Configuring
Ethernet/VLAN Layer 2 Services, Configuring Local Cross-Connects Between
Ethernet/VLAN Interfaces, and Configuring S-VLAN Tunnels for Layer 2 Services in
the JUNOSe BGP and MPLS Configuration Guide
interface fastEthernet
■
703
JUNOSe 11.0.x Command Reference Guide A to M
interface gigabitEthernet
Syntax
Release Information
Description
[ no ] interface gigabitEthernet interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Specifies or creates a Gigabit Ethernet interface or a subinterface over a Gigabit
Ethernet interface. The no version removes the interface or subinterface.
NOTE: On the GE I/O module, you can configure only the primary port, 0. The router
automatically uses the redundant port, 0R, if the primary port fails.
On the GE-2 APS I/O module, you can configure only the primary ports, 0 and 1. The
router automatically uses the corresponding redundant port, 0R or 1R, if the primary
port fails.
On the OC3-2 GE APS I/O module, you can configure only a Gigabit Ethernet interface
in port 2. Ports 0 and 1 are reserved for OC3/STM1 ATM interfaces.
On the ES-2 GE-4 IOA, you can configure all four ports.
Options
Mode
Related Topics
704
■
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
■
Configuring the QoS Shaping Mode for Ethernet Interfaces
■
Creating a QoS Interface Hierarchy for Bulk-Configured VLAN Subinterfaces with
RADIUS
■
Configuring a Parameter Definition to Shape Ethernet Traffic Using Cell Mode
interface gigabitEthernet
Chapter 10: I Commands
interface ip
Syntax
Release Information
Description
Options
Mode
[ no ] interface ip interfaceName
Command introduced before JUNOSe Release 7.1.0.
Defines a shared IP interface. The no version removes the IP interface.
■
interfaceName—String of up to 15 characters
Global Configuration
interface ip
■
705
JUNOSe 11.0.x Command Reference Guide A to M
interface ipv6
Syntax
Release Information
Description
Options
Mode
706
■
interface ipv6
[ no ] interface ipv6 interfaceName
Command introduced before JUNOSe Release 7.1.0.
Defines a shared IPv6 interface. The no version removes the IPv6 interface.
■
interfaceName—String of up to 15 characters
Global Configuration
Chapter 10: I Commands
interface lag
Syntax
Release Information
Description
Options
Mode
Related Topics
[ no ] interface lag interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Creates an IEEE 802.3ad link aggregation group (LAG) interface, also known as a
LAG bundle, or a subinterface in a LAG bundle. Link aggregation enables you to group
multiple Ethernet physical interfaces configured on the same module and with the
same characteristics into a single logical interface. The individual Ethernet interfaces
are referred to as member links of the LAG bundle. The no version removes the LAG
bundle or subinterface.
■
interfaceSpecifier—LAG interface specifier; see Interface Types and Specifiers on
page 5
Global Configuration
■
Configuring the Scheduler Hierarchy for Hashed Load Balancing in 802.3ad Link
Aggregation Groups
■
Configuring the Scheduler Hierarchy for Subscriber Load Balancing in 802.3ad
Link Aggregation Groups
■
Configuring Load Rebalancing for 802.3ad Link Aggregation Groups
interface lag
■
707
JUNOSe 11.0.x Command Reference Guide A to M
interface loopback
Syntax
Release Information
Description
[ no ] interface loopback interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Defines a loopback interface, which provides a stable address for protocols (for
example, BGP, Telnet, or LDP) to use so that they can avoid any impact if a physical
interface goes down. The loopback interface sends packets back to the router or
access server for local processing. Any packets routed from the loopback interface,
but not destined to the loopback interface, are dropped. The no version deletes the
loopback interface.
NOTE: Do not confuse loopback with the null 0 interface. Traffic routed to null 0 is
discarded on the line module.
You cannot shut down a loopback interface.
BEST PRACTICE: We recommend that you configure a 32-bit subnet mask for the
loopback interface. For example, if you configure a loopback interface with the IP
address and mask as 1.1.1.1/16, the 1.1.0.0/16 route entry is entered on the line
module and if no specific or longer route entry is found, all traffic destined to the to
1.1.0.0/16 subnet is forwarded to the SRP module by the line module. Although the
SRP module responds only to traffic destined to the 1.1.1.1 subnet and discards
traffic to all other host IP addresses within that subnet (1.1.1.1/16), if the SRP module
receives too much traffic from subnets other than 1.1.1.1, the CPU utilization on the
SRP module reaches the saturation level.
Options
Mode
Related Topics
708
■
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
■
interface loopback
Configuring an MPLS Pseudowire with VCC Cell Relay Encapsulation, Configuring
Local ATM Cross-Connects with AAL5 Encapsulation, Configuring Local
Cross-Connects Between Ethernet/VLAN Interfaces, Configuring the Loopback
Interface and Router ID for BGP for L2VPNs, and Configuring the Loopback Interface
and Router ID for VPLS in the JUNOSe BGP and MPLS Configuration Guide
Chapter 10: I Commands
interface mlframe-relay
Syntax
Release Information
Description
Options
Mode
[ no ] interface mlframe-relay interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Defines an MLFR bundle or a subinterface in a bundle. The no version removes the
bundle or subinterface.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
interface mlframe-relay
■
709
JUNOSe 11.0.x Command Reference Guide A to M
interface mlppp
Syntax
Release Information
Description
Options
Mode
710
■
interface mlppp
[ no ] interface mlppp interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Creates an MLPPP network interface, also known as the MLPPP bundle. The no
version deletes the MLPPP bundle.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
interface null
Syntax
Release Information
Description
Mode
interface null 0
Command introduced before JUNOSe Release 7.1.0.
Selects the null interface, which does not forward traffic. The null interface acts as
a data sink. Though you can access the null interface, you cannot configure any
values for it or delete it. There is no no version.
Global Configuration
interface null
■
711
JUNOSe 11.0.x Command Reference Guide A to M
interface pos
Syntax
Release Information
Description
Options
Mode
Related Topics
712
■
interface pos
[ no ] interface pos interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Configures a Packet over SONET interface. The no version removes the interface.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
■
Configuring HDLC Layer 2 Services in the JUNOSe BGP and MPLS Configuration
Guide
Chapter 10: I Commands
interface serial
Syntax
Release Information
Description
Options
Mode
Related Topics
[ no ] interface serial interfaceSpecifier
Command introduced before JUNOSe Release 7.1.0.
Specifies the location of the serial interface on CT3 and COCX-F3 modules. The no
version disables the interface.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
■
Configuring Frame Relay Layer 2 Services and Configuring HDLC Layer 2 Services
in the JUNOSe BGP and MPLS Configuration Guide
interface serial
■
713
JUNOSe 11.0.x Command Reference Guide A to M
interface tenGigabitEthernet
Syntax
Release Information
Description
Options
Mode
714
■
[ no ] interface tenGigabitEthernet interfaceSpecifier
Command introduced in JUNOSe Release 7.1.0.
Specifies or creates a 10-Gigabit Ethernet interface or a subinterface over a 10-Gigabit
Ethernet interface. The no version removes the interface or subinterface.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
interface tenGigabitEthernet
Chapter 10: I Commands
interface tunnel
Syntax
Release Information
Description
Options
Mode
[ no ] interface tunnel interfaceSpecifier [ transport-virtual-router vrName ]
[ ipsec-transport ]
Command introduced before JUNOSe Release 7.1.0.
Creates a tunnel interface for use by DVMRP, GRE, IPSec, or MPLS. You can specify
that the tunnel be established in the routing space of a virtual router other than the
current VR. If you specify another VR, all tunnel commands apply to the tunnel in
that VR. If you do not specify another VR, tunnel commands apply to the current
VR. For DVMRP and GRE tunnels, you can specify that the tunnel be protected with
IPSec in transport mode. The no version removes the tunnel interface.
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
vrName—Name of virtual router (other than the current VR) in which the tunnel
will be established
■
ipsec-transport—Indicates that the tunnel is protected with IPSec in transport
mode; used for GRE or DVMRP tunnels only
Global Configuration
interface tunnel
■
715
JUNOSe 11.0.x Command Reference Guide A to M
invert data
Syntax
Release Information
Description
Mode
716
■
invert data
[ no ] invert data
Command introduced before JUNOSe Release 7.1.0.
Enables data stream inversion. Data stream inversion must be turned on by network
personnel at the other end of the line. The no version disables data stream inversion.
Interface Configuration
Chapter 10: I Commands
ip
Syntax
ip { permit | deny }
no ip
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Modifies the subscriber policy for IP to define whether the subscriber (client) interfaces
that belong to a bridge group or to a VPLS instance forward (permit) or filter (deny)
IP packets. The no version restores the default value, permit IP packets.
You cannot change the default subscriber policy values for trunk (server) interfaces
that belong to a bridge group or to a VPLS instance. You also cannot change the
default subscriber policy values for a VPLS virtual core interface, which acts as a
trunk interface. The VPLS virtual core interface represents all of the MPLS tunnels
from the router to the remote VPLS edge (VE) devices.
Options
Mode
■
permit—Specifies that the subscriber interface associated with the bridge group
or VPLS instance forwards IP packets
■
deny—Specifies that the subscriber interface associated with the bridge group
or VPLS instance filters IP packets
Subscriber Policy Configuration
ip
■
717
JUNOSe 11.0.x Command Reference Guide A to M
ip access-routes
Syntax
Release Information
Description
Mode
718
■
ip access-routes
[ no ] ip access-routes
Command introduced before JUNOSe Release 7.1.0.
Enables the ability to create host access routes on a PPP interface, which is useful
for the B-RAS application. It also enables an access route in a profile. The no version
disables the feature.
Interface Configuration, Profile Configuration, Subinterface Configuration
Chapter 10: I Commands
ip access-route table-map
Syntax
Release Information
Description
Options
Mode
[ no ] ip access-route table-map mapName
Command introduced before JUNOSe Release 7.1.0.
Filters access routes before an access list adds them to the routing table. The no
version deletes the table map.
■
mapName—Name of the table map that you want the router to use
Global Configuration
ip access-route table-map
■
719
JUNOSe 11.0.x Command Reference Guide A to M
ip address
Syntax
ip address ipAddress ipMask [ secondary ]
no ip address [ ipAddress ipMask [ secondary ] ]
Release Information
Description
Options
Mode
Related Topics
720
■
ip address
Command introduced before JUNOSe Release 7.1.0.
Sets a primary or secondary IP address for an interface or subinterface. The no
version removes an IP address or disables IP processing. You must specify the layer
2 encapsulation before you can set the IP address.
■
ipAddress—IP address in 32-bit dotted decimal format (for example, 192.56.32.2)
■
ipMask—mask for associated IP subnet in dotted decimal or prefix length notation
■
secondary—Specifies that the configured address is a secondary IP address; if
omitted, the configured address is the primary IP address
Interface Configuration, Profile Configuration, Subinterface Configuration
■
Configuring Local ATM Cross-Connects with AAL5 Encapsulation, Configuring Local
Cross-Connects Between Ethernet/VLAN Interfaces, Configuring the Loopback
Interface and Router ID for BGP for L2VPNs, Configuring the Loopback Interface
and Router ID for VPLS, and Configuring MPLS LSPs for L2VPNs in the JUNOSe
BGP and MPLS Configuration Guide
Chapter 10: I Commands
ip-address
Syntax
ip-address ipAddress
[ no ] ip-address
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the IP address parameter for a user entry in the local user database. The
no version deletes the IP address parameter from the user entry.
■
ipAddress—IP address in 32-bit dotted decimal format (for example, 192.56.32.2)
Local User Configuration
ip-address
■
721
JUNOSe 11.0.x Command Reference Guide A to M
ip address-pool
Syntax
ip address-pool { dhcp | local | none }
no ip address-pool
Release Information
Description
Options
Mode
722
■
ip address-pool
Command introduced before JUNOSe Release 7.1.0.
Specifies to the router where to get an IP address for the remote user. The no version
uses the default value, local.
■
dhcp—Enables the use of a DHCP server for address allocations
■
local—Enables the use of local address pool for address allocations
■
none—Does not enable an IP address pool
Global Configuration
Chapter 10: I Commands
ip-address-pool
Syntax
ip-address-pool poolName
no ip-address-pool
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the IP address pool parameter for a user entry in the local user database.
The address pool is used to assign an IP address to the subscriber. The no version
deletes the IP address pool parameter from the user entry in the local user database.
■
poolName—Name of IP address pool
Local User Configuration
ip-address-pool
■
723
JUNOSe 11.0.x Command Reference Guide A to M
ip address virtual-router
Syntax
[ no ] ip address ipAddress virtual-router vrName
no ip address
Release Information
Description
Options
Mode
724
■
Command introduced in JUNOSe Release 7.3.0.
Limits the scope of the IKE policy rule to the specified local IP address on the specified
virtual router. This limitation ensures that this policy rule is evaluated for IKE source
address evaluations for only the specified IP address and virtual router. The no version
removes IP address and virtual router limitation.
■
ipAddress—IP address in 32-bit dotted decimal format (for example, 192.56.32.2)
to which you want to limit this policy rule
■
vrName—Name of virtual router to which you want to limit this policy rule
IKE Policy Configuration
ip address virtual-router
Chapter 10: I Commands
ip alwaysup
Syntax
Release Information
Description
Mode
[ no ] ip alwaysup
Command introduced before JUNOSe Release 7.1.0.
Forces the interface to appear as if it is up, regardless of the state of the lower layers.
Use this command to reduce routing protocol topology changes on the router when
the network attached to this link is single-homed. This command may be useful when
the router is running routing protocols with very large routing tables that may take
a long time to converge. The no version makes the interface appear in its current
state.
Interface Configuration, Subinterface Configuration
ip alwaysup
■
725
JUNOSe 11.0.x Command Reference Guide A to M
ip analyzer
Syntax
ip analyzer [ default ]
no ip analyzer
Release Information
Description
Options
Mode
Related Topics
726
■
ip analyzer
Command introduced before JUNOSe Release 7.1.0.
Configures an interface as an analyzer interface, for use in an interface mirroring
configuration. The no version removes the analyzer interface configuration from the
interface.
■
default—Specifies that this interface is the default analyzer interface for the
virtual router
Interface Configuration
■
Configuring CLI-Based Mirroring
■
Configuring RADIUS-Based Mirroring
Chapter 10: I Commands
ip as-path access-list
Syntax
ip as-path access-list accessListName { permit | deny } pathExpression
no ip as-path access-list accessListName [ { permit | deny } pathExpression ]
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Defines a BGP-related access list. You can specify an access list filter on both inbound
and outbound BGP routes. Each filter is an access list based on regular expressions.
If the regular expression matches the representation of the AS path of the route as
an ASCII string, then the permit or deny condition applies. The AS path does not
contain the local AS number. The no version removes a single access list entry if
permit or deny and a pathExpression are specified. Otherwise, the entire access list
is removed.
■
accessListName—Name of the access list; a string of up to 32 characters
■
permit—Permits access for matching conditions
■
deny—Denies access to matching conditions
■
pathExpression—Regular expression describing the AS paths to be matched
Use a sequence of one or more elements, each of which is either an AS number
or one of the following punctuation characters:
^ start of the path
$ end of the path
{ start of an AS_SET
} end of an AS_SET
( start of an AS_CONFED_SET or AS_CONFED_SEQ
) end of an AS_CONFED_SET or AS_CONFED_SEQ
Use the following regular expression metacharacters to match individual elements:
. matches any single element
* matches zero or more occurrences of any element
+ matches one or more occurrences of any element
[ ] matches any elements enclosed between brackets ([ ])
- hyphen; used within brackets to specify a range of AS numbers
ip as-path access-list
■
727
JUNOSe 11.0.x Command Reference Guide A to M
^ matches any AS number except the ones specified when used as a first
item within brackets
_ underscore; used in implementations on routers from other vendors on
either side of a path to specify a literal and disallow substring matching.
Allowed but not required in our CLI.
Mode
728
■
Global Configuration
ip as-path access-list
Chapter 10: I Commands
ip atm-vc
Syntax
ip ipAddress atm-vc vcd broadcast
no ip ipAddress atm-vc vcd
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Associates a protocol and address to a specific virtual circuit. The no version removes
the association.
■
ipAddress—IP address to be associated with the virtual circuit
■
vcd—Number in the range 1–2147483647; virtual circuit descriptor; an identifier
for the VC in other commands
■
broadcast—Specifies that the circuit should participate in broadcast operations
Map List Configuration
ip atm-vc
■
729
JUNOSe 11.0.x Command Reference Guide A to M
ip auto-configure ip-subscriber
Syntax
Release Information
Description
Options
Mode
730
■
[ no ] ip auto-configure ip-subscriber [ include-primary | exclude-primary ]
Command introduced before JUNOSe Release 7.1.0.
include-primary and exclude-primary keywords added in JUNOSe Release 7.1.0.
Configures a primary IP interface to support creation of dynamic subscriber interfaces.
The include-primary and exclude-primary keywords specify whether the primary
interface can be assigned to a subscriber. The no version disables creation of dynamic
subscriber interfaces on this primary IP interface.
■
include-primary—Specifies that the primary interface can be assigned to a
subscriber; the no version disables the assignment of the primary interface
■
exclude-primary—Specifies that the primary interface cannot be assigned to a
subscriber; the no version enables the assignment of the primary interface
Interface Configuration, Profile Configuration, Subinterface Configuration
ip auto-configure ip-subscriber
Chapter 10: I Commands
ip auto-detect ip-subscriber
Syntax
Release Information
Description
Mode
[ no ] ip auto-detect ip-subscriber
Command introduced before JUNOSe Release 7.1.0.
Sets the router's packet detect feature, specifying that IP automatically detect packets
that do not match any entries in the demultiplexer table. When an unmatched packet
is detected, an event is generated that determines whether to create a dynamic
subscriber interface or to configure an existing interface. The no version disables
autodetection.
Interface Configuration, Profile Configuration
ip auto-detect ip-subscriber
■
731
JUNOSe 11.0.x Command Reference Guide A to M
ip bgp-community new-format
Syntax
Release Information
Description
Mode
732
■
[ no ] ip bgp-community new-format
Command introduced before JUNOSe Release 7.1.0.
Specifies that communities must be displayed in AA:NN format, where AA is a number
that identifies the autonomous system and NN is a number that identifies the
community within the autonomous system. The no version restores the default
display.
Global Configuration
ip bgp-community new-format
Chapter 10: I Commands
ip bgp-confed-as-set new-format
Syntax
Release Information
Description
Mode
[ no ] ip bgp-confed-as-set new-format
Command introduced before JUNOSe Release 7.1.0.
Specifies that AS-confed-sets must be displayed within square brackets, [ ], with the
ASs delimited by commas. The no version restores the default, displaying
AS-confed-sets within parentheses, ( ), with the ASs delimited by spaces.
Global Configuration
ip bgp-confed-as-set new-format
■
733
JUNOSe 11.0.x Command Reference Guide A to M
ip block-multicast-sources
Syntax
Release Information
Description
Mode
734
■
[ no ] ip block-multicast-sources
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 8.1.0.
Prevents mroute creation by blocking multicast traffic that has a scope larger than
link-local (for example, global). In Profile Configuration mode, blocks multicast sources
per user on dynamic IP interfaces. The no version restores the default behavior of
creating mroutes upon receiving multicast packets.
Interface Configuration, Profile Configuration
ip block-multicast-sources
Chapter 10: I Commands
ip broadcast-address
Syntax
Release Information
Description
Options
Mode
[ no ] ip broadcast-address [ ipAddress ]
Command introduced before JUNOSe Release 7.1.0.
Defines a broadcast address for an interface. The no version restores the default IP
broadcast address.
■
ipAddress—Broadcast IP address
Interface Configuration, Subinterface Configuration
ip broadcast-address
■
735
JUNOSe 11.0.x Command Reference Guide A to M
ip classifier-list
Syntax
ip classifier-list classifierName [ traffic-class trafficClassName ]
[ color { green | yellow | red } ] [ user-packet-class userPacketClassValue ]
[ source-route-class routeClassValue ] [destination-route-class routeClassValue ]
[ local { true | false } ] [ not ] { protocol }
[ not ] { sourceAddress sourceMask | host sourceHostAddress | any }
[ sourceQualifier ]
[ not ] { destinationAddress destinationMask | host destinationHostAddress | any }
[ destinationQualifier ] [ tcpQualifier ] [ ip-flags ipFlags ]
[ ip-frag-offset { eq 0 | eq 1 | gt 1 } ]
[ precedence precNum | dsField dsFieldNum | tos tosNum ]
no ip classifier-list classifierName [ classifierNumber ]
Release Information
Description
Options
736
■
ip classifier-list
Command introduced before JUNOSe Release 7.1.0.
Creates or modifies a classifier control list. Use the not keyword to deny traffic for
a specific protocol, source address, or destination address. Use the any keyword to
allow traffic to any source or destination address. The no version removes the
classifier control list.
■
classifierName—Name of the classifier control list entry
■
trafficClassName—Name of the traffic class to match
■
green—Matches packet color to green, indicating a low drop preference
■
yellow—Matches packet color to yellow, indicating a medium drop preference
■
red—Matches packet color to red, indicating a high drop preference
■
userPacketClassValue—User packet value to match; in the range 0–15
■
routeClassValue—Value of the route-class; in the range 0–255
■
local—Specifies traffic destined for this interface
■
true—Matches packets that are locally destined
■
false—Matches packets that are not locally destined
■
not—Matches any except the immediately following protocol or address
■
protocol—Protocol name (IGMP, IP, TCP, or UDP) or number (in the range 0–255)
to match
■
sourceAddress—Source address to match
■
sourceMask—Wild-card mask to apply to the source address
■
host—Matches source or destination address as a host
■
sourceHostAddress—Source host address to match
■
any—Matches any source or destination address
Chapter 10: I Commands
■
sourceQualifier—For UDP or TCP protocols, one of the following protocol-specific
classifier parameters. See Creating or Modifying Classifier Control Lists for IP
Policy Lists for details.
■
portOperator—One of the following Boolean operator keywords: lt (less than),
gt (greater than), eq (equal to), ne (not equal), or range (range of port
numbers)
■
range—Single port number or a range of port numbers
■
destinationAddress—Destination address to match
■
destinationMask—Wild-card mask to apply to the destination address
■
destinationHostAddress—Destination host address to match
■
destinationQualifier—One of the following protocol-specific classifier parameters
for destination TCP or UDP ports, ICMP code and type, or IGMP type. The
portOperator and port range are used with TCP and UDP. The icmpType, icmpCode,
and igmpType parameters are used with ICMP and IGMP.
■
portOperator—one of the following Boolean operator keywords: lt (less than),
gt (greater than), eq (equal to), or ne (not equal), or range (range of port
numbers) (TCP and UDP only)
■
range—Single port number or a range of port numbers
■
icmpType—ICMP message type (ICMP only)
■
icmpCode—ICMP message code (ICMP only)
■
igmpType—IGMP message type (IGMP only)
■
tcpQualifier—TCP flags classification parameters
■
tcpFlag—For TCP only; a logic equation that specifies flag bit values; ! means
logical NOT and & means logical AND; use any of the following flag names:
■
■
■
ack—0x10
■
fin—0x01
■
push—0x08
■
rst—0x04
■
syn—0x02
■
urgent—0x20
ipFlags—Logic equation that specifies flag bit values; ! means logical NOT and
& means logical AND; use any of the following flag names:
■
dont-fragment—0x02
■
more-fragments—0x01
■
reserved—0x04
ip-frag-offset—Matches the specified IP fragmentation offset; use any of the
following:
ip classifier-list
■
737
JUNOSe 11.0.x Command Reference Guide A to M
Mode
Related Topics
738
■
ip classifier-list
■
eq 0—Equals 0
■
eq 1—Equals 1
■
gt 1—Greater than 1
■
precNum—Upper three bits of the ToS byte; in the range 0–7
■
dsFieldNum—Upper six bits of the ToS byte; in the range 0–63
■
tosNum—Whole eight bits of the ToS byte; in the range 0–255
■
classifierNumber—Index of the classifier control list entry to be deleted
Global Configuration
■
Creating or Modifying Classifier Control Lists for IP Policy Lists
Chapter 10: I Commands
ip community-list
Syntax
Using a regular expression to specify the community:
[ no ] ip community-list communityLisName { permit | deny } communityExpression
Using some other method to specify the community:
ip community-list communityLisName { permit | deny }
{ communityNumber | asCommunityNumber | no-export | no-advertise | local-as |
internet } [ communityNumber | asCommunityNumber | no-export | no-advertise |
local-as | internet ]*
no ip community-list communityLisName [ { permit | deny }
[ { communityNumber | asCommunityNumber | no-export | no-advertise | local-as |
internet } ] [ communityNumber | asCommunityNumber | no-export | no-advertise |
local-as | internet ]* ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Creates a community list for BGP and controls access to it. The no version removes
the community list, including all list entries.
■
communityLisName—Name of a community list; a string of up to 32 characters;
identifies one or more permit or deny groups of communities; used for standard
community lists
■
permit—Permits access for a matching condition
■
deny—Denies access for a matching condition
■
communityExpression—Regular expression that matches the community
■
communityNumber—Community number in the range 1–4294967295
■
asCommunityNumber—Community number in the format AA:NN, where AA is a
number that identifies the autonomous system and NN is a number that identifies
the community within the autonomous system.
■
no-export—Specifies that BGP does not advertise this route outside a BGP
confederation boundary
■
no-advertise—Specifies that BGP does not advertise this route to any peer (internal
or external)
■
local-as—Specifies that BGP does not advertise this route to external peers;
sometimes known as the no-export-subconfed community
■
internet—Specifies the Internet community
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
ip community-list
■
739
JUNOSe 11.0.x Command Reference Guide A to M
ip debounce-time
Syntax
ip debounce-time [ vrf vrfName ] period
no ip debounce-time [ vrf vrfName ]
Release Information
Description
Options
Mode
740
■
ip debounce-time
Command introduced before JUNOSe Release 7.1.0.
Defines the minimum time an IP interface must be in a given state—for example,
up or down—before being reported. The no version removes the debounce time.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
period—Interval in the range 0–60000 milliseconds
Global Configuration, Interface Configuration
Chapter 10: I Commands
ip demux-type da-prefix
Syntax
Release Information
Description
Mode
[ no ] ip demux-type da-prefix
Command introduced before JUNOSe Release 7.1.0.
Specifies that a subscriber interface will demultiplex traffic using destination
addresses. The no version restores the default situation, in which the subscriber
interface demultiplexes traffic using source addresses.
Interface Configuration
ip demux-type da-prefix
■
741
JUNOSe 11.0.x Command Reference Guide A to M
ip description
Syntax
ip description name
no ip description
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Assigns a text description or an alias to a static IP interface or subinterface. If no IP
interface currently exists, then a static IP interface is automatically created on the
current layer 2 interface and the description is applied to that static IP interface. You
cannot assign a profile to a layer 2 interface that has a static interface configured
above it. Use the show ip interface command to display the text description. The no
version removes the description or alias.
NOTE: This command is replacing the description command to assign a description
to a static IP interface. The description command may be removed completely from
Interface Configuration mode in a future release.
Options
Mode
742
■
ip description
■
name—Name for the static IP interface; string of up to 256 characters
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip destination-prefix
Syntax
Release Information
Description
Options
Mode
[ no ] ip destination-prefix ipAddress ipAddressMask deny
Command introduced before JUNOSe Release 7.1.0.
Configures a subscriber interface or a primary IP interface that is enabled for dynamic
creation of subscriber interfaces to demultiplex traffic with the specified destination
address. The no version removes the association between the interface and the
specified destination address.
■
ipAddress—Destination IP address that the router uses to identify packets for
this interface
■
ipAddressMask—Network mask for associated IP subnet
■
deny—Filters packets matching this command
Interface Configuration, Subinterface Configuration
ip destination-prefix
■
743
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-capture
Syntax
ip dhcp-capture { all | receive | transmit } [ priority { low | high } ]
no ip dhcp-capture { all | receive | transmit }
Release Information
Description
Options
Mode
744
■
ip dhcp-capture
Command introduced in JUNOSe Release 7.3.0.
Configures the E Series router to capture and log DHCP packet information for an
interface. By default, DHCP packet information is not captured. The no version
restores the default behavior.
■
all—Captures received and transmitted packets
■
receive—Captures received packets
■
transmit—Captures transmitted packets
■
low—Captured packets arrive with low priority; the default priority
■
high—Captured packets arrive with high priority
Interface Configuration
Chapter 10: I Commands
ip dhcp-external auto-configure
Syntax
Release Information
Description
Options
Mode
[ no ] ip dhcp-external auto-configure [ agent-circuit-identifier ]
Command introduced before JUNOSe Release 7.1.0.
agent-circuit-identifier keyword added in JUNOSe Release 7.3.0.
Configures the E Series router to automatically create the user's DSI. This command
is specific to a virtual router. The no version disables the autoconfigure feature.
■
agent-circuit-identifier—Creates dynamic subscriber interfaces built over dynamic
VLANs that are based on the agent-circuit-id option (suboption 1) of the option
82 field in DHCP messages.
Global Configuration
ip dhcp-external auto-configure
■
745
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-external disregard-giaddr-next-hop
Syntax
Release Information
Description
Mode
746
■
[ no ] ip dhcp-external disregard-giaddr-next-hop
Command introduced before JUNOSe Release 7.1.0.
Configures the DHCP external application to disregard the giaddr in packets destined
for the DHCP server when the next hop for a subscriber's access route is determined.
The no version returns to the default, in which DHCP external uses the giaddr to
determine the next hop.
Global Configuration
ip dhcp-external disregard-giaddr-next-hop
Chapter 10: I Commands
ip dhcp-external recreate-subscriber-interface
Syntax
Release Information
Description
Mode
Related Topics
[ no ] ip dhcp-external recreate-subscriber-interface
Command introduced in JUNOSe Release 9.2.0.
Configures the DHCP external server application to delete and re-create the existing
dynamic subscriber interface after a bound DHCP client extends its IP address lease
by restarting the DHCP discovery process on its primary IP interface instead of by
initiating the DHCP renewal process on its dynamic subscriber interface. This
command is specific to a virtual router. The no version restores the default behavior,
which preserves the dynamic subscriber interface after a bound client restarts the
discovery process on its primary IP interface.
Global Configuration
■
Preservation of Dynamic Subscriber Interfaces with DHCP External Server
Overview
■
Configuring DHCP External Server to Control Preservation of Dynamic Subscriber
Interfaces
ip dhcp-external recreate-subscriber-interface
■
747
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-external server-address
Syntax
Release Information
Description
Options
Mode
748
■
[ no ] ip dhcp-external server-address ipAddress
Command introduced before JUNOSe Release 7.1.0.
Configures a DHCP server that is used to determine which DHCP packets are
monitored. The no version removes the DHCP server.
■
ipAddress—IP address of the external DHCP server; you can specify a maximum
of four servers
Global Configuration
ip dhcp-external server-address
Chapter 10: I Commands
ip dhcp-external server-sync
Syntax
Release Information
Description
Mode
[ no ] ip dhcp-external server-sync
Command introduced before JUNOSe Release 7.1.0.
Creates subscriber state information based on lease renewals when the external
DHCP server is unsynchronized with the E Series router. The no version disables this
feature.
Global Configuration
ip dhcp-external server-sync
■
749
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-local auth domain
Syntax
Release Information
Description
Options
Mode
750
■
[ no ] ip dhcp-local auth domain domainName
Command introduced in JUNOSe Release 7.1.0.
Specifies a domain name for a username that is locally configured for a DHCP
standalone mode client. In standalone mode, the locally configured username is
presented to AAA in an authentication request. The no version removes the domain
name.
■
domainName—String of 1–32 characters used as the domain name
Global Configuration
ip dhcp-local auth domain
Chapter 10: I Commands
ip dhcp-local auth include
Syntax
Release Information
Description
Options
Mode
[ no ] ip dhcp-local auth include { circuit-identifier | circuit-type | mac-address |
option82 | virtual-router-name }
Command introduced in JUNOSe Release 7.1.0.
Includes optional information as part of the locally configured username for a DHCP
standalone mode client. In standalone mode, the username is presented to AAA in
an authentication request. The no version removes the specified optional information.
■
circuit-identifier—Specifies the circuit identifier of the interface on which the
DHCP client's request was received
■
circuit-type—Specifies the circuit type of the interface on which the DHCP client's
request was received
■
mac-address—Specifies the DHCP client's MAC address
■
option82—Specifies the DHCP client's Option 82 value
■
virtual-router-name—Specifies the DHCP local server's virtual router name
Global Configuration
ip dhcp-local auth include
■
751
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-local auth password
Syntax
Release Information
Description
Options
Mode
752
■
[ no ] ip dhcp-local auth password password
Command introduced in JUNOSe Release 7.1.0.
Assigns a password used to authenticate a locally configured DHCP standalone mode
client. In DHCP standalone mode, the password is presented to AAA in an
authentication request. The no version removes the password.
■
password—String of 1–32 characters used as the password
Global Configuration
ip dhcp-local auth password
Chapter 10: I Commands
ip dhcp-local auth user-prefix
Syntax
Release Information
Description
Options
Mode
[ no ] ip dhcp-local auth user-prefix userNamePrefix
Command introduced in JUNOSe Release 7.1.0.
Specifies a user prefix for a username that is locally configured for a DHCP standalone
mode client. In DHCP standalone mode, the username is presented to AAA in an
authentication request. The no version removes the user prefix.
■
userNamePrefix—String of 1–32 characters used as the prefix for a locally
configured username
Global Configuration
ip dhcp-local auth user-prefix
■
753
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-local auto-configure agent-circuit-identifier
Syntax
Release Information
Description
Mode
754
■
[ no ] ip dhcp-local auto-configure agent-circuit-identifier
Command introduced in JUNOSe Release 7.3.0.
Configures the DHCP local server to support the creation of dynamic subscriber
interfaces built over dynamic VLANs that are based on the agent-circuit-id option
(suboption 1) of the option 82 field in DHCP messages. This command is specific to
a virtual router. The no version disables the autoconfigure feature.
Global Configuration
ip dhcp-local auto-configure agent-circuit-identifier
Chapter 10: I Commands
ip dhcp-local cable-modem
Syntax
Release Information
Description
[ no ] ip dhcp-local cable-modem dhcp-server ipAddress
Command introduced before JUNOSe Release 7.1.0.
Specifies the IP address of the external DHCP server to which the DHCP local server
will relay DHCP messages from cable modems. The no version removes the cable
modem configuration.
NOTE: This command is deprecated and might be removed completely in a future
release. Use the set dhcp vendor-option command to configure the vendor class
identifier option to match the string used by cable modems to replace the function
of this command.
Options
Mode
■
ipAddress—IP address of the cable modem DHCP server
Global Configuration
ip dhcp-local cable-modem
■
755
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-local excluded-address
Syntax
Release Information
Description
Options
Mode
756
■
[ no ] ip dhcp-local excluded-address ipAddressStart ipAddressStop
Command introduced before JUNOSe Release 7.1.0.
Specifies IP addresses that the DHCP local server should not supply from the default
address pool because those addresses are already used by devices on the subnet.
The no version allows the DHCP local server to supply the specified IP address.
■
ipAddressStart—Single IP address or start of the range of IP addresses that the
DHCP local server should not supply
■
ipAddressStop—End of the range of IP addresses that the DHCP local server
should not supply
Global Configuration
ip dhcp-local excluded-address
Chapter 10: I Commands
ip dhcp-local limit
Syntax
ip dhcp-local limit
{ atm | ethernet | pos | vlan | interface InterfaceType InterfaceSpecifier } value
no ip dhcp-local limit [ atm | ethernet | pos | vlan
| interface InterfaceType InterfaceSpecifier ]
Release Information
Command introduced before JUNOSe Release 7.1.0.
interface keyword and interfaceType and interfaceSpecifier variables added in JUNOSe
Release 7.1.0.
pos keyword added in JUNOSe Release 10.0.0.
Description
Specifies the maximum number of IP addresses that the DHCP local server can supply
to each VPI/VCI, VLAN, Ethernet subnetwork, or POS access interface, or to a particular
interface or subinterface. The no version restores the default address limit value,
48000.
Options
Mode
■
atm—Specifies the limit for VPIs and VCIs
■
ethernet—Specifies the limit for Ethernet subnets
■
pos—Specifies the limit for POS access interfaces
■
vlan—Specifies the limit for VLANs
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
value—Maximum number of leases, in the range 0–96000; default is 48000
Global Configuration
ip dhcp-local limit
■
757
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-local pool
Syntax
Release Information
Description
Options
Mode
758
■
ip dhcp-local pool
[ no ] ip dhcp-local pool { poolName | default }
Command introduced before JUNOSe Release 7.1.0.
Accesses DHCP Local Pool Configuration mode. The no version prevents the DHCP
local server from supplying IP addresses from the specified pool.
■
poolName—Name of the address pool
■
default—Specifies the default address pool
Global Configuration
Chapter 10: I Commands
ip dhcp-local snmpTraps
Syntax
Release Information
Description
Mode
[ no ] ip dhcp-local snmpTraps
Command introduced before JUNOSe Release 7.1.0.
Enables DHCP local server SNMP traps. The no version disables DHCP local server
SNMP traps.
Global Configuration
ip dhcp-local snmpTraps
■
759
JUNOSe 11.0.x Command Reference Guide A to M
ip dhcp-local unique-client-ids
Syntax
Release Information
Description
[ no ] ip dhcp-local unique-client-ids
Command introduced in JUNOSe Release 8.0.0.
Configures the method that DHCP local server uses when it receives a DHCP
DISCOVER or REQUEST packet from a client ID or hardware address that matches
the client ID or hardware address of a currently bound client on another subnet or
subinterface.
Use this command to specify that DHCP local server uses a method that considers
a request from a client with a duplicate client ID or hardware address to be from a
roaming client—the server then terminates the currently bound client's existing lease
and assigns a new address to the requesting client.
The no version restores the default behavior, in which DHCP local server uses the
DHCP client's subnet or subinterface to differentiate between two clients that use
the same client ID or hardware address—the DHCP server processes requests in the
normal manner.
NOTE: This command replaces the ip dhcp-local inhibit-roaming command, which
has been removed from the CLI.
Mode
760
■
Global Configuration
ip dhcp-local unique-client-ids
Chapter 10: I Commands
ip dhcp-server
Syntax
ip dhcp-server dhcpServerAddress [ adminStatus ]
no ip dhcp-server [ dhcpServerAddress [ adminStatus ] ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Adds the IP address of a single DHCP server to the list of DHCP servers from which
the router can request addresses to allocate to remote users. A maximum of five
DHCP servers can be specified. The no version removes the specified DHCP server
or removes all DHCP servers from the list.
■
dhcpServerAddress—IP address of the DHCP server that will allocate addresses
for remote users
■
adminStatus—One of the following options:
■
disable—Disables the DHCP server
■
drain—Drains the DHCP server
Global Configuration
ip dhcp-server
■
761
JUNOSe 11.0.x Command Reference Guide A to M
ip directed-broadcast
Syntax
Release Information
Description
Mode
762
■
[ no ] ip directed-broadcast
Command introduced before JUNOSe Release 7.1.0.
Enables translation of directed broadcast to physical broadcasts. The no version
disables the function.
Interface Configuration, Profile Configuration, Subinterface Configuration
ip directed-broadcast
Chapter 10: I Commands
ip disable-forwarding
Syntax
Release Information
Description
Mode
[ no ] ip disable-forwarding
Command introduced before JUNOSe Release 7.1.0.
Disables forwarding of packets on the SRP Ethernet interface to maintain router
performance. The no version enables forwarding of packets on the SRP Ethernet
interface. You see an error message if you try to set this command for interfaces
other than the SRP Ethernet interface.
Interface Configuration, Subinterface Configuration
ip disable-forwarding
■
763
JUNOSe 11.0.x Command Reference Guide A to M
ip domain-lookup
Syntax
Release Information
Description
Options
Mode
764
■
ip domain-lookup
[ no ] ip domain-lookup [ transit-virtual-router vrName ]
Command introduced before JUNOSe Release 7.1.0.
Without the transit-virtual-router option, enables the router to query the configured
DNS name servers when it needs an IP hostname–to–IP address translation. With
the transit-virtual-router option, configures a virtual router to use the name servers
you configured for another virtual router. The no version without the
transit-virtual-router option restores the default situation, in which the router does
not query the DNS server. The no version with the transit-virtual-router option stops
a virtual router from using the same name servers you configured for another virtual
router.
■
vrName—Name of the virtual router that has the DNS configuration you want to
use for a second virtual router
Global Configuration
Chapter 10: I Commands
ip domain-name
Syntax
Release Information
Description
Options
Mode
[ no ] ip domain-name domainName
Command introduced before JUNOSe Release 7.1.0.
Defines a default domain name for the clients that a name resolver serves. The no
version deletes the domain name; that is, the domain name will no longer be
appended to hostnames in the static host table.
■
domainName—Default domain name for your hosts
Global Configuration
ip domain-name
■
765
JUNOSe 11.0.x Command Reference Guide A to M
ip dos-protection-group
Syntax
ip dos-protection-group groupName
no ip dos-protection-group
Release Information
Description
Options
Mode
766
■
Command introduced in JUNOSe Release 8.1.0.
Attaches an IP denial of service (DoS) protection group to an interface. The no version
removes the attachment of the DoS protection group from the interface.
■
groupName—Name of the DoS protection group; string of up to 31 alphanumeric
characters
Interface Configuration
ip dos-protection-group
Chapter 10: I Commands
ip dvmrp
Syntax
Release Information
Description
Mode
[ no ] ip dvmrp
Command introduced before JUNOSe Release 7.1.0.
Activates DVMRP on an interface. The no version removes DVMRP from an interface.
Interface Configuration
ip dvmrp
■
767
JUNOSe 11.0.x Command Reference Guide A to M
ip dvmrp accept-filter
Syntax
Release Information
Description
Options
Mode
768
■
[ no ] ip dvmrp accept-filter listName1 [ distance ] neighbor-list listName2
Command introduced before JUNOSe Release 7.1.0.
Filters incoming DVMRP reports in accordance with a standard IP access list. The
no version disables the filter.
■
listName1—Name of the IP access list. If the name is 0, the interface accepts all
destinations. You can specify a simple or extended access list; with an extended
access list you can specify an address and a subnet mask.
■
distance—Number in the range 0–255; default value is 0; the distance associated
with the DVMRP route when the router determines the RPF interface for the
source of a multicast packet
■
listName2—Name of an access list containing the neighbors from which the
router will accept reports. If the name is 0, the interface accepts destinations
from all its neighbors.
Interface Configuration
ip dvmrp accept-filter
Chapter 10: I Commands
ip dvmrp announce-filter
Syntax
ip dvmrp announce-filter listName
no ip dvmrp announce-filter
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies a list of DVMRP routes that the router will advertise on an interface. The
no version restores the default situation, in which the router advertises all known
routes on the interface.
■
listName—Name of the IP access list that specifies the DVMRP routes that the
router will advertise on the interface. You can specify a simple or extended access
list; with an extended access list you can specify an address and a subnet mask.
Interface Configuration
ip dvmrp announce-filter
■
769
JUNOSe 11.0.x Command Reference Guide A to M
ip dvmrp auto-summary
Syntax
Release Information
Description
Mode
770
■
[ no ] ip dvmrp auto-summary
Command introduced before JUNOSe Release 7.1.0.
Summarizes routes automatically on an interface. By default, automatic
summarization is enabled. The no version disables automatic summarization.
Interface Configuration
ip dvmrp auto-summary
Chapter 10: I Commands
ip dvmrp disable
Syntax
Release Information
Description
Mode
[ no ] ip dvmrp disable
Command introduced before JUNOSe Release 7.1.0.
Disables DVMRP on an interface without removing the DVMRP configuration. The
no version reenables the DVMRP configuration on a disabled interface.
Interface Configuration
ip dvmrp disable
■
771
JUNOSe 11.0.x Command Reference Guide A to M
ip dvmrp metric-offset
Syntax
Release Information
Description
Options
Mode
772
■
[ no ] ip dvmrp metric-offset { in | out } [ increment ]
Command introduced before JUNOSe Release 7.1.0.
Adjusts the number of hops associated with routes passing through an interface. This
action indicates that the route is more efficient or less efficient than an alternative
route. The no version restores the default values.
■
in—Increments the number of hops for a DVMRP route advertised in incoming
DVMRP reports. If you do not specify a key word, this option is the default.
■
out—Increments the number of hops for a DVMRP route advertised in outgoing
DVMRP reports
■
increment—Number of hops associated with this interface; default value is 1 for
incoming reports and 0 for outgoing reports.
Interface Configuration
ip dvmrp metric-offset
Chapter 10: I Commands
ip dvmrp route-hog-notification
Syntax
[ no ] ip dvmrp route-hog-notification [ limit ]
limit—Number in the range 0–2147483647
Release Information
Description
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the number of DVMRP routes that the router can record before it generates a
system log warning message. The no version restores the default setting, 10,000
routes.
Global Configuration
ip dvmrp route-hog-notification
■
773
JUNOSe 11.0.x Command Reference Guide A to M
ip dvmrp route-limit
Syntax
Release Information
Description
Options
Mode
774
■
[ no ] ip dvmrp route-limit [ limit ]
Command introduced before JUNOSe Release 7.1.0.
Limits the number of routes that the router can advertise on each interface. The
default value is 7000. The no version removes the limit for the number of routes that
the router can advertise on each interface.
■
limit—Number of routes that the router can advertise
Global Configuration
ip dvmrp route-limit
Chapter 10: I Commands
ip dvmrp summary-address
Syntax
Release Information
Description
Options
Mode
[ no ] ip dvmrp summary-address ipAddress mask [ metric cost ]
Command introduced before JUNOSe Release 7.1.0.
Advertises a DVMRP summary address on the interface. The no version stops the
advertising of a summary address on an interface.
■
ipAddress—Summary address
■
mask—Subnet mask
■
cost—Cost associated with this summary address
Interface Configuration
ip dvmrp summary-address
■
775
JUNOSe 11.0.x Command Reference Guide A to M
ip dvmrp unicast-routing
Syntax
Release Information
Description
Mode
776
■
[ no ] ip dvmrp unicast-routing
Command introduced before JUNOSe Release 7.1.0.
Enables the exchange of DVMRP unicast routes on an interface not owned by DVMRP.
The no version disables the exchange of DVMRP unicast routes on an interface not
owned by DVMRP.
Interface Configuration
ip dvmrp unicast-routing
Chapter 10: I Commands
ip dynamic-interface-prefix
Syntax
ip dynamic-interface-prefix [ vrf vrfName ] prefix
no ip dynamic-interface-prefix [ vrf vrfName ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the prefix for the names of dynamic shared IP interfaces created for
overlapping BGP/MPLS VPNs. The no version restores the default prefix, dyn.
■
vrfName—Name of the VRF in which the shared interface is created; a string of
1–32 alphanumeric characters
■
prefix—String of 1–10 alphanumeric characters
Global Configuration
ip dynamic-interface-prefix
■
777
JUNOSe 11.0.x Command Reference Guide A to M
ip explicit-path
Syntax
Description
Mode
778
■
ip explicit-path
Defines an explicit path by name and also enables or disables explicit path routing
in implementations on routers from other vendors. See the mpls explicit-path
command for a complete description and syntax.
Global Configuration
Chapter 10: I Commands
ip extcommunity-list
Syntax
ip extcommunity-list listName { permit | deny }
extendedCommunity [ extendedCommunity ]*
no ip extcommunity-list listName [ { permit | deny }
extendedCommunity [ extendedCommunity ]* ]
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Defines an extended-community (extcommunity) list to be referenced in a route
map. The no version deletes the extcommunity.
■
listName—Name of the extended-community list
■
permit—Permits membership in the extended community for matching
conditions
■
deny—Denies membership in the extended community for matching conditions
■
extendedCommunity—Extended community specified in the format:
{rt | soo } { ASN:nn | ipAddress:nn }
■
Mode
■
rt—Specifies a route-target community; consists of one or more routers that
can receive a set of routes advertised by BGP that carry the
extended-community attribute
■
soo—Specifies a Site-of-Origin community; consists of one or more routers
that injects a set of routes into BGP that carry the extended-community
attribute
■
ASN:nn—Identifies the extended community by a 16-bit autonomous system
number followed by a 32-bit integer
■
ipAddress:nn—Identifies the extended community identified by an IP address
followed by a 16-bit integer
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
ip extcommunity-list
■
779
JUNOSe 11.0.x Command Reference Guide A to M
ip fallback global
Syntax
Release Information
Description
Mode
780
■
ip fallback global
[ no ] ip fallback global
Command introduced before JUNOSe Release 7.1.0.
Enables secondary routing table lookup for an interface in a virtual router forwarding
table of the parent (global) virtual router if the initial route lookup on a VRF is
unsuccessful. The no version discontinues secondary routing table lookup.
VRF Configuration
Chapter 10: I Commands
ip filter-options all
Syntax
Release Information
Description
Mode
Related Topics
[ no ] ip filter-options all
Command introduced before JUNOSe Release 7.1.0.
Enables filtering of packets with IP options on an interface. IP options filtering is
disabled by default. The no version disables filtering of packets with IP options.
Interface Configuration, Profile Configuration
■
Enabling IP Options Filtering
ip filter-options all
■
781
JUNOSe 11.0.x Command Reference Guide A to M
ip flow-aggregation cache
Syntax
Release Information
Description
Options
Mode
782
■
[ no ] ip flow-aggregation cache [ as | destination-prefix | prefix | protocol-port |
source-prefix ]
Command introduced in JUNOSe Release 8.1.0.
Creates an aggregation cache and accesses Flow Cache Configuration mode. The no
version removes the aggregation cache and its configuration.
■
as—Specifies autonomous system aggregation
■
destination prefix—Specifies destination prefix aggregation
■
prefix—Specifies prefix aggregation
■
protocol-port—Specifies protocol port aggregation
■
source-prefix—Specifies source prefix aggregation
Flow Cache Configuration, Global Configuration
ip flow-aggregation cache
Chapter 10: I Commands
ip flow-cache entries
Syntax
ip flow-cache entries cacheEntries
no ip flow-cache entries
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Limits the number of entries in the flow cache (for all line modules in the router).
The no version sets the number of entries back to its default value.
■
cacheEntries—Number of cache entries allowed for all line modules in the router
in the range 1024–524288; default value is 65536
Global Configuration
ip flow-cache entries
■
783
JUNOSe 11.0.x Command Reference Guide A to M
ip flow-cache timeout
Syntax
ip flow-cache timeout { active activeTimer | inactive inactiveTimer }
no ip flow-cache timeout { active | inactive }
Release Information
Description
Options
Mode
784
■
Command introduced before JUNOSe Release 7.1.0.
Defines the J-Flow activity or inactivity timers. The no version restores the default
value of each timer.
■
activeTimer—Value of activity timer in the range 0–60 minutes; default value is
30
■
inactiveTimer—Value of inactivity timer in the range 10–600 seconds; default
value is 15
Global Configuration
ip flow-cache timeout
Chapter 10: I Commands
ip flow-export
Syntax
[ no ] ip flow-export { hostName | ipAddress } udpPort version 5
[ peer-as | origin-as ]
[ no ] ip flow-export destination { hostName | ipAddress } udpPort
[ no ] ip flow-export source interfaceType interfaceSpecifier
[ no ] ip flow-export version 5 [ peer-as | origin-as ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Defines J-Flow export values for the IP flow. The no version removes the export
setting.
■
hostName—Name of the remote host for outgoing export datagrams
■
ipAddress—IP address of the export destination host
■
udpPort—UDP port number
■
version 5—Specifies version 5 of the J-Flow statistical information
■
peer-as—Exports peer-as information
■
origin-as—Exports origin-as information
■
destination—Specifies destination for outgoing export datagrams
■
source—Specifies source interface for outgoing export datagrams
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
ip flow-export
■
785
JUNOSe 11.0.x Command Reference Guide A to M
ip flow-sampling-mode packet-interval
Syntax
ip flow-sampling-mode packet-interval intervalValue
no ip flow-sampling-mode packet-interval
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Defines the sampling interval for an interface that is running J-Flow. Even though
each flow is sampled, the flow sample is not necessarily cached because of system
constraints. The no version returns the sampling interval to the default value.
NOTE: For interfaces on the ES2 10G LM with either the ES2-S1 GE-8 IOA or the
ES2-S2 10GE PR IOA on E120 routers and E320 routers, J-Flow adjusts the maximum
sampling interval to 8,388,608 (decimal equivalent of 0x800000) and changes the
sampling interval to the closest integer that is a power of two and that is less than
or equal to the configured value.
Options
Mode
786
■
■
intervalValue—Sampling interval, in the range 1–4000000000 packets; default
value is 4000000000
Global Configuration
ip flow-sampling-mode packet-interval
Chapter 10: I Commands
ip flow statistics
Syntax
Release Information
Description
Mode
[ no ] ip flow statistics
Command introduced before JUNOSe Release 7.1.0.
Enables J-Flow statistics. The no version disables J-Flow statistics.
Global Configuration
ip flow statistics
■
787
JUNOSe 11.0.x Command Reference Guide A to M
ip ftp source-address
Syntax
ip ftp source-address sourceAddress
no ip ftp source-address [ sourceAddress ]
Release Information
Description
Options
Mode
788
■
Command introduced before JUNOSe Release 7.1.0.
Specifies an operational interface by IP address as the source interface in FTP packets
sent via the router's FTP client. The no version restores the source address in the
FTP packets to that on which the FTP connection is made.
■
sourceAddress—Source IP address
Global Configuration
ip ftp source-address
Chapter 10: I Commands
ip ftp source-interface
Syntax
ip ftp source-interface interfaceType interfaceSpecifier
no ip ftp source-interface [ interfaceType interfaceSpecifier ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Identifies an interface by type and location as the source interface in FTP packets
sent via the router's FTP client. The no version restores the source address in the
FTP packets to that on which the FTP connection is made.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
ip ftp source-interface
■
789
JUNOSe 11.0.x Command Reference Guide A to M
ip-hint
Syntax
ip-hint { enable | disable }
no ip-hint
Release Information
Description
Options
Mode
790
■
ip-hint
Command introduced before JUNOSe Release 7.1.0.
When enabled, the E Series router preallocates an IP address for the remote (B-RAS)
user before calling authentication. The address is then passed as a hint in the
authentication request to the RADIUS server. The no version disables the feature.
■
enable—Specifies the feature
■
disable—Disables the feature; this is the default setting
Domain Map Configuration
Chapter 10: I Commands
ip http
Syntax
Release Information
Description
Mode
[ no ] ip http
Command introduced in JUNOSe Release 7.2.0.
Creates the HTTP local server. The no version deletes the HTTP local server.
Global Configuration
ip http
■
791
JUNOSe 11.0.x Command Reference Guide A to M
ip http access-class
Syntax
ip http access-class listName
no ip http access-class
Release Information
Description
Options
Mode
792
■
Command introduced in JUNOSe Release 7.2.0.
Specifies the standard IP access list that identifies the subscribers who are authorized
to connect to the HTTP local server. The no version removes the association between
the access list and the HTTP local server.
■
listName—Name of the access list
Global Configuration
ip http access-class
Chapter 10: I Commands
ip http max-connection-time
Syntax
ip http max-connection-time seconds
no ip http max-connection-time
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.2.0.
Specifies the maximum time that the HTTP local server maintains an inactive
connection. The no version restores the default time.
■
seconds—Either 0 (unlimited) or the number of seconds in the range 3–7200;
default value is 30 seconds
Global Configuration
ip http max-connection-time
■
793
JUNOSe 11.0.x Command Reference Guide A to M
ip http port
Syntax
ip http port portNumber
no ip http port
Release Information
Description
Options
Mode
794
■
ip http port
Command introduced in JUNOSe Release 7.2.0.
Specifies the port on which the HTTP local server receives connection attempts. The
no version restores the default port number.
■
portNumber—Number of the port, in the range 0–65535; the default is port 80
Global Configuration
Chapter 10: I Commands
ip http redirectUrl
Syntax
ip http redirectUrl url
no ip http redirectUrl
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.2.0.
Specifies the URL to which a subscriber's initial Web browser session is redirected,
enabling initial provisioning and service selection for the subscriber. The no version
removes the redirection action.
■
url—Name of the URL; 64 characters maximum
Interface Configuration, Profile Configuration, Subinterface Configuration
ip http redirectUrl
■
795
JUNOSe 11.0.x Command Reference Guide A to M
ip http same-host-limit
Syntax
ip http same-host-limit maxConnections
no ip http same-host-limit
Release Information
Description
Options
Mode
796
■
Command introduced in JUNOSe Release 7.2.0.
Specifies the maximum number of connections that can exist between one IP address
and the HTTP local server. The no version restores the default number of allowed
connections.
■
maxConnections—Maximum number of connections allowed, in the range 0–1000;
the default is 3
Global Configuration
ip http same-host-limit
Chapter 10: I Commands
ip http server
Syntax
Release Information
Description
Mode
[ no ] ip http server
Command introduced in JUNOSe Release 7.2.0.
Enables the HTTP local server. The no version disables the HTTP local server.
Global Configuration
ip http server
■
797
JUNOSe 11.0.x Command Reference Guide A to M
ip icmp update-source
Syntax
ip icmp update-source [ vrf vrfName ] { interfaceType interfaceSpecifier | ipAddress }
no ip icmp update-source [ vrf vrfName ] [ interfaceType interfaceSpecifier
| ipAddress ]
Release Information
Description
Options
Mode
798
■
Command introduced before JUNOSe Release 7.1.0.
Specifies a unique source address or interface for any ICMP messages that the E
Series router generates. The no version removes the unique source specification.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
ipAddress—IP address of an E Series interface over which you want to send ICMP
messages
Global Configuration
ip icmp update-source
Chapter 10: I Commands
ip igmp
Syntax
Release Information
Description
Mode
[ no ] ip igmp
Command introduced before JUNOSe Release 7.1.0.
Enables IGMP on an interface, and sets the IGMP version to IGMPv2. The no version
disables IGMP on an interface.
Interface Configuration, Profile Configuration
ip igmp
■
799
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp access-group
Syntax
ip igmp access-group accessListName
no ip igmp access-group
Release Information
Description
Options
Mode
800
■
Command introduced before JUNOSe Release 7.1.0.
Restricts hosts on this subnet to joining multicast groups on the specified IP access
list. The no version removes the association with the specified access list and allows
hosts on the subnet to join any multicast group.
■
accessListName—Name of the access list; a string of up to 32 characters
Interface Configuration, Profile Configuration
ip igmp access-group
Chapter 10: I Commands
ip igmp access-source-group
Syntax
ip igmp access-source-group accessListName
no ip igmp access-source-group
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Restricts hosts on this subnet to membership in those source-groups (also known as
“ channels” ) permitted by the specified IP access list. The no version removes any
access list restriction.
■
accessListName—Name of the access list; a string of up to 32 characters
Interface Configuration, Profile Configuration
ip igmp access-source-group
■
801
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp apply-oif-map
Syntax
ip igmp apply-oif-map mapName
no ip igmp apply-oif-map
Release Information
Description
Options
Mode
802
■
Command introduced before JUNOSe Release 7.1.0.
Applies the specified outgoing interface (OIF) map to the current interface. The no
version removes the outgoing interface map association from the interface.
■
mapName—Name of the OIF map
Interface Configuration, Profile Configuration
ip igmp apply-oif-map
Chapter 10: I Commands
ip igmp explicit-tracking
Syntax
Release Information
Description
Options
Mode
[ no ] ip igmp explicit-tracking [ disable-if-igmp-v2-detected ]
Command introduced in JUNOSe Release 8.2.0.
Enables explicit host tracking for IGMP interfaces. The no version disables explicit
host tracking on the interface or with the disable-if-igmp-v2-detected keyword
reverts to the default explicit host tracking.
■
disable-if-igmp-v2-detected—Disables explicit host tracking if IGMP V2 hosts
detected on IGMP V3 interfaces
Interface Configuration, Profile Configuration
ip igmp explicit-tracking
■
803
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp group limit
Syntax
ip igmp group limit groupLimit
no ip igmp group limit
Release Information
Description
Options
Mode
804
■
Command introduced before JUNOSe Release 7.1.0.
Limits the number of IGMP groups that an interface can accept. The no version
restores the default situation, in which there is no limit to the number of IGMP groups
that the interface accepts.
■
groupLimit—Maximum number of IGMP groups that an interface can accept in
the range 0–64,000
Interface Configuration, Profile Configuration
ip igmp group limit
Chapter 10: I Commands
ip igmp immediate-leave
Syntax
Release Information
Description
[ no ] ip igmp immediate-leave
Command introduced before JUNOSe Release 7.1.0.
Removes an interface immediately when the router receives an leave group
membership message from the host associated with this interface. The no version
restores the default situation, in which the router issues query messages to multicast
groups and removes an interface if the associated host does not return a group
membership report within a certain length of time.
CAUTION: Issue this command only on IGMPv2 interfaces to which one IGMP client
is connected. Do not issue this command to interfaces to which more than one IGMP
client is connected.
Mode
Interface Configuration, Profile Configuration
ip igmp immediate-leave
■
805
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp last-member-query-interval
Syntax
ip igmp last-member-query-interval tenthsOfaSecond
no ip igmp last-member-query-interval
Release Information
Description
Options
Mode
806
■
Command introduced before JUNOSe Release 7.1.0.
Specifies in tenths of a second the maximum time the router waits for a response
after sending a last member query. The router sends a last member query when it
receives an IGMPv2 leave message or an IGMPv3 state change report. The no version
restores the default value, 10 tenths of a second (1 second).
■
tenthsOfaSecond—Time interval between receipt of an IGMP leave message and
sending out of a query in the range 1–254 tenths of a second. Using a lower
value allows members to leave groups more quickly.
Interface Configuration, Profile Configuration
ip igmp last-member-query-interval
Chapter 10: I Commands
ip igmp oif-map
Syntax
Release Information
Description
Options
Mode
[ no ] ip igmp oif-map mapName { interfaceType interfaceSpecifier | self }
[ groupPrefix [ sourcePrefix ] ]
Command introduced before JUNOSe Release 7.1.0.
Creates an outgoing interface (OIF) map. The no version removes an outgoing
interface map attribute or the entire outgoing interface map.
■
mapName—Name of the OIF map
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
self—Specifies that the multicast outgoing interface is the same as IGMP join
interface
■
groupPrefix—Group prefix in the form ipAddress/maskLength
■
sourcePrefix—Source prefix in the form ipAddress/maskLength
Global Configuration
ip igmp oif-map
■
807
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp promiscuous
Syntax
ip igmp promiscuous { on | off }
no ip igmp promiscuous
Release Information
Description
Options
Mode
808
■
Command introduced before JUNOSe Release 7.1.0.
Enables the specified interface to accept IGMP reports from hosts on any subnet.
The no version specifies that an IGMP interface should use the Router Configuration
mode setting (see the igmp promiscuous command) to determine from which subnets
it can accept IGMP reports.
■
on—Enables the interface to accept IGMP reports from hosts on any subnet
■
off—Allows the interface to accept IGMP reports only from hosts on subnets
associated with this interface
Interface Configuration, Profile Configuration
ip igmp promiscuous
Chapter 10: I Commands
ip igmp-proxy
Syntax
Release Information
Description
Options
Mode
[ no ] ip igmp-proxy [ version { 2 | 3 } ]
Command introduced before JUNOSe Release 7.1.0.
Enables IGMP proxy on an interface and specifies the version. Version 2 is enabled
by default. The no version disables IGMP proxy for an interface.
■
2—Specifies IGMP proxy version 2
■
3—Specifies IGMP proxy version 3
Interface Configuration
ip igmp-proxy
■
809
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp-proxy unsolicited-report-interval
Syntax
ip igmp-proxy unsolicited-report-interval tenths-of-a-second
no ip igmp-proxy unsolicited-report-interval
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Specifies how often the upstream interface should transmit unsolicited reports. This
command has no effect on interfaces other than the upstream value. The no version
transmits unsolicited reports using the default value, 400 tenths of a second.
NOTE: Issue this command only on the upstream interface. Otherwise, this command
will have no effect.
Options
Mode
810
■
■
tenths-of-a-second—Time interval at which the interface transmits unsolicited
reports
Interface Configuration
ip igmp-proxy unsolicited-report-interval
Chapter 10: I Commands
ip igmp-proxy V1-router-present-time
Syntax
ip igmp-proxy V1-router-present-time seconds
no ip igmp-proxy V1-router-present-time
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies how long the router assumes that there is an IGMPv1 querier router on the
subnet after the router receives an IGMP V1 query on this interface. The no version
restores the default value, 10 seconds.
■
seconds—Time for which the router assumes that there is an IGMPv1 querier
router on the subnet after the router receives an IGMP V1 query on this interface
Interface Configuration
ip igmp-proxy V1-router-present-time
■
811
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp querier
Syntax
Release Information
Description
[ no ] ip igmp querier
Command introduced before JUNOSe Release 7.1.0.
Specifies that the interface will act as a querier when you configure IGMPv1 on an
interface; this is the default behavior. The no version specifies that this interface will
not issue query packets.
NOTE: This command is valid only for interfaces on configured with IGMPv1.
Mode
812
■
ip igmp querier
Interface Configuration, Profile Configuration
Chapter 10: I Commands
ip igmp querier-timeout
Syntax
ip igmp querier-timeout seconds
no ip igmp querier-timeout
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the time that the interface waits before declaring itself as the querier. The no
version restores the default value, twice the query interval.
■
seconds—Time interval between the last query from the previous router and the
first query from this interface
Interface Configuration, Profile Configuration
ip igmp querier-timeout
■
813
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp query-interval
Syntax
ip igmp query-interval seconds
no ip igmp query-interval
Release Information
Description
Options
Mode
814
■
Command introduced before JUNOSe Release 7.1.0.
Sets how often the router sends IGMP host-query packets from this interface. The
no version restores the default value, 125 seconds.
■
seconds—Polling interval in the range 0–65535 seconds
Interface Configuration, Profile Configuration
ip igmp query-interval
Chapter 10: I Commands
ip igmp query-max-response-time
Syntax
ip igmp query-max-response-time tenthsOfaSecond
no ip igmp query-max-response-time
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the period in tenths of a second during which the host is expected to respond
to an IGMP query. IGMP version 2 includes this value in IGMP query messages sent
out on the interface. You cannot set this value on interfaces running IGMP version
1. The no version restores the default value, 100 tenths of a second (10 seconds).
■
tenthsOfaSecond—Time interval between receipt of an IGMP query and the
response; in the range 1–254 tenths of a second.
Interface Configuration, Profile Configuration
ip igmp query-max-response-time
■
815
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp robustness
Syntax
ip igmp robustness numberOfMessages
no ip igmp robustness
Release Information
Description
Options
Mode
816
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the number of times that the router sends IGMP group-specific queries
before declaring a group to no longer have any members on an interface. The no
version restores the default value, 3.
■
numberOfMessages—Number of times that the router sends IGMP group-specific
queries in the range 1–4
Interface Configuration, Profile Configuration
ip igmp robustness
Chapter 10: I Commands
ip igmp ssm-map enable
Syntax
Release Information
Description
Mode
[ no ] ip igmp ssm-map enable
Command introduced before JUNOSe Release 7.1.0.
Enables SSM mapping on the router. SSM mapping statically assigns sources to
IGMPv1 and IGMPv2 groups. You must use SSM mapping for IGMPv1 and IGMPv2
hosts to interoperate with PIM SSM. SSM mapping allows the router to use a statically
configured list to translate (*,G) memberships to (S,G) memberships. The no version
disables the SSM map.
Privileged Exec, User Exec
ip igmp ssm-map enable
■
817
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp ssm-map static
Syntax
Release Information
Description
Options
Mode
818
■
[ no ] ip igmp ssm-map static accessListName sourceAddress
Command introduced before JUNOSe Release 7.1.0.
Specifies an access list and source address for use in SSM mapping. SSM mapping
statically assigns sources to IGMPv1 and IGMPv2 groups. You must use SSM mapping
for IGMPv1 and IGMPv2 hosts to interoperate with PIM SSM. SSM mapping allows
the router to use a statically configured list to translate (*,G) memberships to (S,G)
memberships. The no version removes the SSM map association.
■
accessListName—Name of the access control list
■
sourceAddress—Address of the source
Privileged Exec, User Exec
ip igmp ssm-map static
Chapter 10: I Commands
ip igmp static-exclude
Syntax
Release Information
Description
Options
Mode
[ no ] ip igmp static-exclude sourceAddress groupAddress
Command introduced before JUNOSe Release 7.1.0.
Specifies that an interface not handle multicast traffic for one or more (S,G)
combinations. The no version removes the (S,G) exclusion from the interface.
■
sourceAddress—Address of the source
■
groupAddress—Address of the group
Interface Configuration, Profile Configuration
ip igmp static-exclude
■
819
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp static-group
Syntax
Release Information
Description
Options
Mode
820
■
[ no ] ip igmp static-group groupAddress
Command introduced before JUNOSe Release 7.1.0.
Assigns an interface to handle all multicast traffic for a group. The interface sets no
timers for this group. The no version removes the group from the interface.
■
groupAddress—Address of the group
Interface Configuration, Profile Configuration
ip igmp static-group
Chapter 10: I Commands
ip igmp static-include
Syntax
Release Information
Description
Options
Mode
[ no ] ip igmp static-include sourceAddress groupAddress
Command introduced before JUNOSe Release 7.1.0.
Assigns an interface to handle multicast traffic for one or more (S,G) combinations.
The no version removes the (S,G) association from the interface.
■
sourceAddress—Address of the source
■
groupAddress—Address of the group
Interface Configuration, Profile Configuration
ip igmp static-include
■
821
JUNOSe 11.0.x Command Reference Guide A to M
ip igmp version
Syntax
ip igmp version { 3 | 2 | 1 | passive }
no ip igmp version
Release Information
Description
Options
Mode
822
■
ip igmp version
Command introduced before JUNOSe Release 7.1.0.
Sets the IGMP version for the interface. The no version restores the default value,
IGMPv2.
■
3—Specifies IGMP version 3
■
2—Specifies IGMP version 2
■
1—Specifies IGMP version 1
■
passive—Configures a mapped OIF as a passive interface with only
multicast-data-forwarding capability
Interface Configuration, Profile Configuration
Chapter 10: I Commands
ip ignore-df-bit
Syntax
Release Information
Description
Mode
[ no ] ip ignore-df-bit
Command introduced before JUNOSe Release 7.1.0.
Specifies that the router ignores the don't-fragment bit if present in the IP header of
packets crossing the configured interface; the router then fragments packets even if
the bit is present. The no version restores the default behavior, which is to consider
the DF bit before fragmenting.
Interface Configuration, Profile Configuration
ip ignore-df-bit
■
823
JUNOSe 11.0.x Command Reference Guide A to M
ip inactivity-timer
Syntax
Release Information
Description
Options
Mode
824
■
ip inactivity-timer
[ no ] ip inactivity-timer inactiveTime
Command introduced before JUNOSe Release 7.1.0.
Configures an inactivity timer. IP polls the dynamic interface at the configured interval
to determine whether the interface was active during the interval. Inactive interfaces
are deleted only when the period of inactivity is equal to or greater than the configured
value. The no version disables the timer.
■
inactiveTime—Length of time in the range 0–63335 minutes; a value of 0 specifies
that dynamically created subscriber interfaces are not deleted
Interface Configuration, Profile Configuration
Chapter 10: I Commands
ip initial-sequence-preference
Syntax
ip initial-sequence-preference preference
no ip initial-sequence-preference
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.1.0.
Configures the warm restart replay preference for an IP interface after a high
availability switchover. The no version restores the default value.
■
preference—Preference value, 0 or 1; 1 indicates highest preference; default value
is 0
Subinterface Configuration
ip initial-sequence-preference
■
825
JUNOSe 11.0.x Command Reference Guide A to M
ip interface
Syntax
Description
Mode
826
■
ip interface
no ip interface
This command has only a no version. See the no ip interface command for a complete
description.
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip irdp
Syntax
Release Information
Description
Mode
[ no ] ip irdp
Command introduced before JUNOSe Release 7.1.0.
Enables ICMP Router Discovery Protocol processing on an interface. The no version
disables IRDP routing.
Interface Configuration, Subinterface Configuration
ip irdp
■
827
JUNOSe 11.0.x Command Reference Guide A to M
ip local alias
Syntax
ip local alias aliasName pool-name poolName
[ no ] ip local alias aliasName
Release Information
Description
Options
Mode
828
■
ip local alias
Command introduced before JUNOSe Release 7.1.0.
Specifies an alias for a local address pool. The no version deletes the alias name.
■
aliasName—Text string in the range 1–16 characters that defines an alias name
for the local address pool
■
poolName—Text string in the range 1–16 characters that is the name of the local
address pool
Global Configuration
Chapter 10: I Commands
ip local pool
Syntax
Release Information
Description
Options
[ no ] ip local pool name [ startIpAddress [ endIpAddress ] ]
[ warning highUtilization abatedUtilization ] [ snmpTrap ]
Command introduced before JUNOSe Release 7.1.0.
Specifies the pool name, the starting address, the ending address, group name, the
utilization threshold, and the SNMP trap flag. The no version deletes a local pool.
■
name—Text string in the range 1–16 characters that defines the name of the
local address pool
■
startIpAddress—Starting IP address in the local address pool
■
endIpAddress—Ending IP address in the local address pool
■
warning—Specifies one of the following utilization warnings:
■
Mode
■
highUtilization—High utilization value; a number in the range 1–100; default
value is 85
■
abatedUtilization—Abated utilization value; a number in the range 1–100;
default value is 75
snmpTrap—Enables SNMP pool utilization traps
Global Configuration
ip local pool
■
829
JUNOSe 11.0.x Command Reference Guide A to M
ip local pool snmpTrap
Syntax
Release Information
Description
Options
Mode
830
■
[ no ] ip local pool name snmpTrap
Command introduced before JUNOSe Release 7.1.0.
Enables SNMP pool utilization traps. The no version disables SNMP pool utilization
traps.
■
name—Text string in the range 1–16 characters that defines the name of the
local address pool
Global Configuration
ip local pool snmpTrap
Chapter 10: I Commands
ip local pool warning
Syntax
ip local pool name warning highUtilization abatedUtilization [ snmpTrap ]
no ip local pool name warning [ highUtilization abatedUtilization ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Identifies the warning threshold values. The no version resets the thresholds to their
default values.
■
name—Text string in the range 1–16 characters that defines the name of the
local address pool
■
highUtilization—High utilization value; a number in the range 1–100; default
value is 85
■
abatedUtilization—Abated utilization value; a number in the range 1–100; default
value is 75
■
snmpTrap—Enables snmp pool utilization traps
Global Configuration
ip local pool warning
■
831
JUNOSe 11.0.x Command Reference Guide A to M
ip local shared-pool
Syntax
ip local shared-pool localPoolName dhcpPoolName
no ip local shared-pool localPoolName
Release Information
Description
Options
Mode
832
■
Command introduced before JUNOSe Release 7.1.0.
Configures a shared local address pool that shares addresses from the specified DHCP
local server address pool in the same virtual router. The no version deletes the shared
local address pool.
■
localPoolName—Text string in the range 1–16 characters that defines the name
of the shared local address pool that obtains addresses from a DHCP local server
address pool.
■
dhcpPoolName—Text string in the range 1–64 characters that defines the name
of the DHCP local address pool that provides addresses to the shared local address
pool.
Global Configuration
ip local shared-pool
Chapter 10: I Commands
ip mac-validate
Syntax
ip mac-validate [ strict | loose ]
no ip mac-validate
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Enables MAC address validation on a per interface basis. When MAC address
validation is enabled, the router checks the entry in the MAC validation table that
corresponds to the IP source address of an incoming packet. The MAC source address
of the packet must match the MAC source address of the table entry for the router
to forward the packet. The no version disables the feature.
■
strict—Prevents transmission of IP packets that do not reside in the validation
table
■
loose—Allows IP packets to pass through even though the packets do not have
entries in the validation table; only packets that have matching IP–MAC pair
entries in the table are validated; this is the default setting
Interface Configuration
ip mac-validate
■
833
JUNOSe 11.0.x Command Reference Guide A to M
ip mask-reply
Syntax
Release Information
Description
Mode
834
■
ip mask-reply
[ no ] ip mask-reply
Command introduced before JUNOSe Release 7.1.0.
Enables ICMP netmask reply. The no version disables the feature.
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip match-policy-list
Syntax
Release Information
Description
Options
Mode
[ no ] ip match-policy-list policyList { permit | deny }
Command introduced before JUNOSe Release 7.1.0.
Creates an IP policy list and launches the policy list configuration mode. The no
version deletes the policy list.
■
policyList—Name of the policy list
■
permit—Defines the policy list as a permit
■
deny—Defines the policy list as a deny
Global Configuration
ip match-policy-list
■
835
JUNOSe 11.0.x Command Reference Guide A to M
ip mirror
Syntax
ip mirror mirrorInterfaceType mirrorInterfaceSpecifier
[ analyzerInterfaceType analyzerInterfaceSpecifier [ next-hop nextHop ] ]
no ip mirror mirrorInterfaceType mirrorInterfaceSpecifier
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures the specified interface to mirror all IP ingress and egress traffic, and
directs the mirrored traffic to an analyzer interface. The no version disables mirroring
on the interface.
NOTE: This command is deprecated and might be removed completely in a future
release. The function provided by this command has been replaced by the updated
packet mirroring feature and the ip policy command used with the secure-input
and secure-output keywords.
Options
Mode
Related Topics
836
■
ip mirror
■
mirrorInterfaceType—Interface type; see Interface Types and Specifiers on page 5
■
mirrorInterfaceSpecifier—Particular interface that performs the interface mirroring
function; see Interface Types and Specifiers on page 5
■
analyzerInterfaceType—Interface type
■
analyzerInterfaceSpecifier—Particular interface used as the analyzer interface; if
omitted, the virtual router's default analyzer interface is used
■
nextHop—Next-hop IP address to the remote analyzer host; required if the
analyzer interface is a shared medium, such as Ethernet
Global Configuration
■
Configuring CLI-Based Mirroring
Chapter 10: I Commands
ip mobile home-agent
Syntax
ip mobile home-agent [ care-of-access acl ] [ lifetime lifetimeSeconds ]
[ replay replaySeconds ] [ reverse-tunnel-off ]
no ip mobile home-agent
Release Information
Description
Command introduced in JUNOSe Release 9.0.0.
Configures the Mobile IP home agent on a virtual router. Issuing this command does
not affect existing parameters such as lifetime, replay value, or care-of-access ACL
for any mobile node's existing binding. The new parameters take effect only upon
each re-registration or new registration. For example, configuring a shorter lifetime
does not cause an existing binding to be removed prematurely, but the new lifetime
value is used only upon re-registration by a mobile node so that both the mobile
node and the home agent are informed of the newly negotiated value. The no version
disables the home agent service on the virtual router.
NOTE: The values for lifetime, replay, and care-of access configured per mobile host
by using the ip mobile host command override the values configured by using the
ip mobile home-agent command.
Options
Mode
■
acl—Name of the access control list applied to the care-of-access, which restricts
access for foreign agents or networks. You can override this care-of-access ACL
with other ACLs for specific host mobile nodes. By default, the router does not
apply a care-of-access ACL
■
lifetimeSeconds—Maximum number of seconds, in the range 5–65535, during
which registration requests are established; default value is 36,000 seconds. The
maximum lifetime configured for specific mobile nodes can override this lifetime
value
■
replaySeconds—Number of seconds, in the range 1–255, by which a registration
request can exceed the home agent configured time value; default value is
7 seconds
■
reverse-tunnel-off—Disables reverse tunneling support by the home agent, which
denies T bit registration requests. By default, reverse tunneling is enabled on the
router. When you modify support for reverse tunnels, the modification takes
effect only for subsequently accepted registration requests
Global Configuration
ip mobile home-agent
■
837
JUNOSe 11.0.x Command Reference Guide A to M
ip mobile host
Syntax
ip mobile host { nai { user@realm | @realm | @ } | ipAddress } [ aaa ]
[ care-of-access acl ] [ lifetime lifetimeSeconds ]
no ip mobile host { nai { user@realm | @realm | @ } | ipAddress }
Release Information
Description
Options
Mode
838
■
ip mobile host
Command introduced in JUNOSe Release 9.0.0.
Configures the mobile node on a virtual router with an optional host network access
identifier (NAI) address or the home address (IP address of the home agent). You
can specify either the nai keyword or a non-zero home address (IP address of the
mobile node). If the AAA server does not provide all configuration information, a
local lookup retrieves the configuration information by either matching the NAI
registration request or the home address registration request. The no version deletes
the configuration of the mobile node on the virtual router.
■
user@realm—Name of the user for the mobile node specification when the nai
keyword is specified, in the format user@realm, where realm is the domain name
■
@realm—Name of the user for the mobile node specification when the nai
keyword is specified, in the format @realm, where realm is the domain name
■
@—Name of the user for the mobile node specification when the nai keyword
is specified, in the format @
■
ipAddress—IP address of the home agent
■
aaa—Causes the router to use the AAA server to validate registration requests
and to obtain configuration and security association information
■
acl—Name of the access control list applied to the care-of-access, which restricts
access for foreign agents or networks. You can override this care-of-access ACL
with other ACLs for specific host mobile nodes. By default, the router does not
apply a care-of-access ACL
■
lifetimeSeconds—Maximum number of seconds during which the registration
requests are established; default value is 36,000 seconds. The maximum lifetime
configured for specific mobile nodes can override this lifetime value
Global Configuration
Chapter 10: I Commands
ip mobile profile
Syntax
Release Information
Description
Options
Mode
[ no ] ip mobile profile profileName
Command introduced in JUNOSe Release 9.0.0.
Configures or associates a preconfigured interface profile with the home agent in a
virtual router. You must configure a mobile profile for every virtual router in which
the home agent exists. The profile parameters determine the interface characteristics
for Mobile IP signaling. The no version removes the profile configuration from the
virtual router.
■
profileName—Name of the profile associated with the home agent for Mobile IP
signaling in a virtual router
Global Configuration
ip mobile profile
■
839
JUNOSe 11.0.x Command Reference Guide A to M
ip mobile secure foreign-agent
Syntax
ip mobile secure foreign-agent ipAddress spi spi key { hex hexKeyVal | ascii
asciiKeyVal } [ replay timestamp within seconds ] [ algorithm { hmac-md5 |
keyed-md5 } ]
no ip mobile secure foreign-agent ipAddress spi spi key { hex hexKeyVal |
ascii asciiKeyVal }
Release Information
Description
Options
Mode
840
■
Command introduced in JUNOSe Release 9.0.0.
Configures the security associations for a foreign agent by specifying a security
parameter index (SPI) value and an authentication key. You can specify the interval
within which a registration request can exceed the home agent configured time value
by specifying the replay timestamp within keyword. The no version deletes the
security associations for the specified foreign agent on the virtual router.
■
ipAddress—IP address of the foreign agent
■
spi—Security parameter index (SPI) value, a specific 4-octet hexadecimal number,
in the range 0x100–0xFFFFFFFF, that authenticates inbound requests and permits
authentication for outbound registration requests
■
hexKeyVal—128-bit hexadecimal number, in the range 0x0–0xFFFFFFFE, that
specifies the authentication key for a specific security association
■
asciiKeyVal—128-bit alphanumeric value, up to a maximum of 16 characters,
that specifies the authentication key for a specific security association
■
seconds—Number of seconds, in the range 1–255, by which a registration request
can exceed the home agent configured time value; default value is 7 seconds
■
hmac-md5—Specifies the authentication algorithm for Mobile IP messages,
default value is hmac-md5
■
keyed-md5—Specifies the authentication algorithm for Mobile IP messages
Global Configuration
ip mobile secure foreign-agent
Chapter 10: I Commands
ip mobile secure host
Syntax
ip mobile secure host { nai { user@realm | @realm | @ } | ipAddress } spi spi
key { hex hexKeyVal | ascii asciiKeyVal } [ replay timestamp within seconds ]
[ algorithm { hmac-md5 | keyed-md5 } ]
no ip mobile secure host { nai { user@realm | @realm } | ipAddress } spi spi
key { hex hexKeyVal | ascii asciiKeyVal }
Release Information
Description
Command introduced in JUNOSe Release 9.0.0.
Configures the security associations for a mobile node. You can configure the security
associations for a mobile node only after configuring a corresponding host
configuration for the mobile node, and only if you have not configured the AAA
service on the virtual router. You can specify the interval within which a registration
request can exceed the home agent configured time value by specifying the replay
timestamp within keyword. The no version deletes the security associations for the
specified host on the virtual router.
NOTE: If you delete a mobile node host by using the no ip mobile host command,
all security associations that you configured for this host are deleted.
Options
■
user@realm—Name of the user for the mobile node specification when the nai
keyword is specified, in the format user@realm, where realm is the domain name
■
@realm—Name of the user for the mobile node specification when the nai
keyword is specified, in the format @realm, where realm is the domain name
■
@—Name of the user for the mobile node specification when the nai keyword
is specified, in the format @
■
ip Address—IP address of the foreign agent
■
spi—Security parameter index (SPI) value, a specific 4-octet hexadecimal number,
in the range 0x100–0xFFFFFFFF, that authenticates inbound requests and permits
authentication for outbound registration requests
■
hexKeyVal—128-bit hexadecimal number, in the range 0x0–0xFFFFFFFE, that
specifies the authentication key for a specific security association
■
asciiKeyVal—128-bit alphanumeric value, up to a maximum of 16 characters,
that specifies the authentication key for a specific security association
■
seconds—Number of seconds, in the range 1–255, by which a registration request
can exceed the home agent configured time value; default value is 7 seconds
■
hmac-md5—Specifies the authentication algorithm for Mobile IP messages,
default value is hmac-md5
■
keyed-md5—Specifies the authentication algorithm for Mobile IP messages
ip mobile secure host
■
841
JUNOSe 11.0.x Command Reference Guide A to M
Mode
842
■
Global Configuration
ip mobile secure host
Chapter 10: I Commands
ip mpls forwarding-mode label-switched
Syntax
Release Information
Description
[ no ] ip mpls forwarding-mode label-switched
Command introduced before JUNOSe Release 7.1.0.
Generates a label for each different FEC that a BGP route points to in a BGP/MPLS
VPN. The no version restores the default, generating a single label for all BGP routes
sent from a given VRF.
NOTE: For some types of routes, the router always generates a per-VRF label,
regardless of the status of this command. See Creating labels per FEC in the JUNOSe
BGP and MPLS Configuration Guide, for details.
Mode
VRF Configuration
ip mpls forwarding-mode label-switched
■
843
JUNOSe 11.0.x Command Reference Guide A to M
ip mtu
Syntax
Release Information
Description
Options
Mode
844
■
ip mtu
[ no ] ip mtu [ mtuSize ]
Command introduced before JUNOSe Release 7.1.0.
Sets the maximum transmission unit size of IP packets sent on an interface. The no
version restores the default value.
■
mtuSize—Maximum number of packet transmissions permitted on an interface;
in the range 160–10240; default value is 0, which means that the router takes
the value from a lower protocol layer
Interface Configuration, Profile Configuration, Subinterface Configuration
Chapter 10: I Commands
ip multicast admission-bandwidth-limit
Syntax
Release Information
Description
Options
Mode
[ no ] ip multicast admission-bandwidth-limit limitValue
Command introduced in JUNOSe Release 7.1.0.
Specifies multicast admission bandwidth (in kilobits per second) for a given interface.
The no version removes the admission bandwidth limit.
■
limitValue—Maximum admission bandwidth (in kilobits per second) permitted
on an interface; default value is 0, which disables the limit
Interface Configuration, Profile Configuration
ip multicast admission-bandwidth-limit
■
845
JUNOSe 11.0.x Command Reference Guide A to M
ip multicast ioa-packet-replication
Syntax
ip multicast ioa-packet-replication interfaceType interfaceSpecifier
no ip multicast ioa-packet-replication
Release Information
Description
Options
Mode
846
■
Command introduced in JUNOSe Release 7.3.0.
Enables IPv4 hardware multicast packet replication on port 8 of a high-density
Ethernet I/O module or IOA. The no version disables hardware multicast packet
replication.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Interface Configuration
ip multicast ioa-packet-replication
Chapter 10: I Commands
ip multicast-routing
Syntax
Release Information
Description
Mode
[ no ] ip multicast-routing
Command introduced before JUNOSe Release 7.1.0.
Enables IP multicast routing on the router. The no version disables IP multicast
routing on the router.
Global Configuration
ip multicast-routing
■
847
JUNOSe 11.0.x Command Reference Guide A to M
ip multicast-routing bandwidth-map
Syntax
ip multicast-routing bandwidth-map routeMapName
no ip multicast-routing bandwidth-map
Release Information
Description
Options
Mode
848
■
Command introduced in JUNOSe Release 7.1.0.
Enables the QoS adjust function on the router. The no version disables the QoS adjust
function on the router.
■
routeMapName—Name of the route map you want to use for the bandwidth map
Global Configuration
ip multicast-routing bandwidth-map
Chapter 10: I Commands
ip multicast-routing disable-rpf-check
Syntax
ip multicast-routing disable-rpf-check ipAccessList
no ip multicast-routing disable-rpf-check
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Disables RPF checks for the (S,G) pairs in the specified access list. The no version
restores the default situation, in which the router performs RPF checks for all (S,G)
pairs.
■
ipAccessList—Name of the IP access list that specifies the (S,G) pairs
Global Configuration
ip multicast-routing disable-rpf-check
■
849
JUNOSe 11.0.x Command Reference Guide A to M
ip multicast-routing permanent-mroute
Syntax
ip multicast-routing permanent-mroute accessListName
no ip multicast-routing permanent-mroute
Release Information
Description
Options
Mode
850
■
Command introduced before JUNOSe Release 7.1.0.
Specifies that newly created mroutes that match the specified access list do not get
timed out. The no version of this command prevents any new mroutes from becoming
permanent. However, it does not remove any existing permanent mroutes. To remove
existing permanent mroutes, use the clear ip mroute command.
■
accessListName—Name of the IP access list that contains the mroutes
Global Configuration
ip multicast-routing permanent-mroute
Chapter 10: I Commands
ip multipath round-robin
Syntax
Release Information
Description
Mode
[ no ] ip multipath round-robin
Command introduced before JUNOSe Release 7.1.0.
Specifies round-robin as the mode for ECMP load sharing on an interface. The no
version restores the default value, hashed.
Subinterface Configuration
ip multipath round-robin
■
851
JUNOSe 11.0.x Command Reference Guide A to M
ip name-server
Syntax
Release Information
Description
Options
Mode
852
■
ip name-server
[ no ] ip name-server serverIpAddress [ serverIpAddress ]*
Command introduced before JUNOSe Release 7.1.0.
Specifies a DNS name server that the router can query for hostname–to–IP address
resolution. The no version deletes the name server.
■
serverIpAddress—IP or IPv6 address of a DNS name server
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Global Configuration
Chapter 10: I Commands
ip nat
Syntax
Release Information
Description
Options
Mode
[ no ] ip nat { inside | outside }
Command introduced before JUNOSe Release 7.1.0.
Marks interfaces that participate in NAT translation as residing on the inside or the
outside network. The no version unmarks the interface so that it does not participate
in NAT translation.
■
inside—Specifies that the interface resides on the inside (private) portion of the
network. The inside portion of the network uses nonroutable IP addresses.
■
outside—Specifies that the interface resides on the outside (public) portion of
the network. The outside portion of the network (for example, the Internet) uses
routable legitimate addresses.
Interface Configuration, Profile Configuration
ip nat
■
853
JUNOSe 11.0.x Command Reference Guide A to M
ip nat inside source list
Syntax
ip nat inside source list accessListName pool poolName [ overload ]
no ip nat inside source list accessListName
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Creates dynamic translation rules that are applied to a source address when routing
a packet from the inside network to the outside network, and for translating the
destination address when a packet returns from the outside network to the inside
network. The no version removes the dynamic translation rule.
NOTE: This command does not remove any dynamic translations from the translation
table.
Options
Mode
854
■
■
accessListName—Name of the access list that you want to use for this dynamic
translation
■
poolName—Name of the NAT IP address pool that contains addresses you want
to use when translating matched access list addresses
■
overload—Specifies that the translation process create extended translation table
entries (IP address, protocol, and port values)
Global Configuration
ip nat inside source list
Chapter 10: I Commands
ip nat inside source static
Syntax
[ no ] ip nat inside source static localIpAddress globalIpAddress
[ no ] ip nat inside source static { tcp | udp } localIpAddress localPort globalIpAddress
globalPort
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Creates static translations for a source address when routing a packet from the inside
network to the outside network, and “ untranslates” the destination address when
a packet returns from the outside network to the inside network. The no version
removes the static translation and purges the associated translations from the
translation table.
■
tcp—Indicates a TCP port
■
udp—Indicates a UDP port
■
localIpAddress—Inside local address
■
localPort—Inside local TCP or UDP port
■
globalIpAddress—Inside global address
■
globalPort —Inside global TCP or UDP port
Global Configuration
ip nat inside source static
■
855
JUNOSe 11.0.x Command Reference Guide A to M
ip nat outside source list
Syntax
ip nat outside source list accessListName pool poolName
no ip nat outside source list accessListName
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Creates dynamic translation rules that are applied to a source address when routing
a packet from the outside network to the inside network, and used for translating
the destination address when a packet returns to the outside network from the inside
network. The no version removes the dynamic translation rule.
NOTE: This command does not remove any dynamic translations from the translation
table.
Options
Mode
856
■
■
accessListName—Name of the access list that you want to use for this dynamic
translation
■
poolName—Name of the NAT IP address pool that contains addresses you want
to use when translating matched access list addresses
Global Configuration
ip nat outside source list
Chapter 10: I Commands
ip nat outside source static
Syntax
[ no ] ip nat outside source static globalIpAddress localIpAddress
[ no ] ip nat outside source static { tcp | udp } globalIpAddress globalPort localIpAddress
localPort
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Translates the source address when routing a packet from the outside network to
the inside network, and “ untranslates” the destination address when a packet travels
from the inside network to the outside network. The no version removes the static
translation and purges the associated translations from the translation table.
■
tcp—Indicates a TCP port
■
udp—Indicates a UDP port
■
globalIpAddress—Inside global address
■
globalPort—Inside global TCP or UDP port
■
localIpAddress—Inside local address
■
localPort—Inside local TCP or UDP port
Global Configuration
ip nat outside source static
■
857
JUNOSe 11.0.x Command Reference Guide A to M
ip nat pool
Syntax
ip nat pool name [ startIpAddress endIpAddress ]
{ netmask networkMask | prefix-length length }
no ip nat pool name
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Creates an address pool from which the NAT router obtains an address when
performing a dynamic translation. You can create address pools with either a single
range or multiple, nonoverlapping ranges. The no version removes the NAT pool.
NOTE: The router will not allow you to remove a pool that has allocations outstanding.
Before removing this type of pool, you must remove the dynamic translation, clear
any outstanding translations, and then remove the pool.
CAUTION: Specifying a range in “single line” mode from the CLI replaces all other
ranges. You cannot specify a range in this mode if any existing ranges are in use. To
add additional ranges, issue this command to access IP NAT Pool Configuration
mode.
Options
Mode
858
■
ip nat pool
■
name—Name of the address pool; 32 alphanumeric characters maximum
■
startIpAddress—First IP address (inclusive) in the NAT pool range you are creating;
omitting this value in the command (along with endIpAddress) launches the IP
NAT Pool Configuration mode, in which you can enter multiple, discontinuous
ranges
■
endIpAddress—Last IP address (inclusive) in the NAT pool range you are creating;
omitting this value in the command (along with startIpAddress) accesses IP NAT
Pool Configuration mode, in which you can enter multiple, discontinuous ranges
■
ipAddressMask—Subnet mask for any NAT pool ranges you specify
■
length—Length of the network prefix; the number of bits masking the base
address that results in the address that you want to match
Global Configuration
Chapter 10: I Commands
ip nat translation
Syntax
ip nat translation { timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout
|icmp-timeout | gre-timeout } seconds
no ip nat translation { timeout | udp-timeout | dns-timeout | tcp-timeout |
finrst-timeout |
icmp-timeout | gre-timeout}
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
gre-timeout keyword added in JUNOSe Release 7.3.0.
Changes or disables translation timeouts, per virtual router, for existing and newly
created translations in the translation table. All timeouts for this command support
a range of 1–2147483 seconds (about 25 days). The no version enables the timer
using its default value.
NOTE: GRE translations are used as optimizations to discard GRE traffic. You can
use the gre-timeout keyword to control GRE aging timeout, even though we do not
support NAPT for GRE. The GRE aging timer has no effect on any simple translations
GRE might use.
Options
Mode
■
timeout—Sets aging time for dynamic translations (except for overloaded
translations); default value is 86400 seconds (24 hours)
■
udp-timeout—Sets aging time for UDP protocol translations; default value is 300
seconds (5 minutes)
■
dns-timeout—Sets aging time for DNS protocol translations (port 53 on TCP or
UDP); default value is 60 seconds
■
tcp-timeout—Sets aging time for TCP protocol translations; default value is 86400
seconds (24 hours)
■
first-timeout—Sets aging time for TCP connections terminated with RST or FIN
flags; default value is 60 seconds
■
icmp-timeout—Sets aging time for ICMP protocol translations; default value is
300 seconds (5 minutes)
■
gre-timeout—Sets aging time for GRE protocol translations; default value is 300
seconds (5 minutes)
■
seconds—Number of seconds before the router removes an unused NAT table
entry
Global Configuration
ip nat translation
■
859
JUNOSe 11.0.x Command Reference Guide A to M
ip nat translation max-entries
Syntax
ip nat translation max-entries maximumEntryNumber
no ip nat translation max-entries
Release Information
Description
Options
Mode
860
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the maximum number of translation entries per virtual router (that is,
address bindings, not translation rules) that the translation table can contain in global
configuration mode. The no version removes the configured limit.
■
maximumEntryNumber—Maximum number of translation entries in the current
virtual router; default value is no limit
Global Configuration
ip nat translation max-entries
Chapter 10: I Commands
ip nfs
Syntax
ip nfs { source-address ipAddress
| source-interface interfaceType interfaceSpecifier }
no ip nfs { source-address | source-interface }
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the E Series interface that the current virtual router uses to exchange NFS
communications with an NFS server. The no version prevents this interface from
sending or receiving NFS communications for the current virtual router.
■
ipAddress—IP address of an E Series interface that sends and receives NFS
communications
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Global Configuration
ip nfs
■
861
JUNOSe 11.0.x Command Reference Guide A to M
ip nfs host
Syntax
ip nfs host hostName [ user userID [ group groupID ] ]
no ip nfs host hostName
Release Information
Description
Options
Mode
862
■
ip nfs host
Command introduced before JUNOSe Release 7.1.0.
Configures a remote host as an NFS server for the current virtual router. The no
version disassociates the NFS server from the virtual router.
■
hostName—Name of the remote host
■
userID—User identity in the range 0–4294967295 that a user must enter to
connect to the remote host; default value is 2001
■
groupID—Group identity in the range 0–4294967295 that the user must enter
to connect to the remote host; default value is 100
Global Configuration
Chapter 10: I Commands
ip ospf authentication-key
Syntax
ip ospf authentication-key authKey
no ip ospf authentication-key
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Assigns a password used by neighboring routers that are using OSPF simple password
authentication. The no version deletes the password.
■
authKey—Password; string of up to 8 characters
Interface Configuration, Subinterface Configuration
ip ospf authentication-key
■
863
JUNOSe 11.0.x Command Reference Guide A to M
ip ospf authentication message-digest
Syntax
Release Information
Description
Mode
864
■
[ no ] ip ospf authentication message-digest
Command introduced before JUNOSe Release 7.1.0.
Specifies that the authentication mode for the interface is MD5. The no version sets
authentication for the interface to none, but leaves any configured MD5 key intact.
Interface Configuration, Subinterface Configuration
ip ospf authentication message-digest
Chapter 10: I Commands
ip ospf authentication-none
Syntax
Release Information
Description
Mode
ip ospf authentication-none
Command introduced before JUNOSe Release 7.1.0.
Specifies that no authentication is to be used for the interface. The no version has
no effect.
Interface Configuration, Subinterface Configuration
ip ospf authentication-none
■
865
JUNOSe 11.0.x Command Reference Guide A to M
ip ospf bfd-liveness-detection
Syntax
ip ospf bfd-liveness-detection [ minimum-interval minInterval |
[ minimum-receive-interval minRecInterval ]
[ minimum-transmit-interval minTransInterval ] ] [ multiplier multValue ]
no ip ospf bfd-liveness-detection
Release Information
Description
Command introduced in JUNOSe Release 7.1.0.
Enables BFD (bidirectional forwarding detection) on an interface running OSPFv2
and defines BFD values to be negotiated between OSPFv2 neighbors for detection
of IP data path failures. The no version disables BFD on the OSPFv2 interface.
NOTE: BFD sessions might not be maintained when the multiplier value is 1 and
configured intervals are very short. We recommend that you do not use a multiplier
value of 1 with very short intervals.
Options
Mode
866
■
■
minInterval—Minimum proposed transmit interval and required receive interval
for BFD control packets; has the same effect as configuring the minimum receive
interval and the minimum transmit interval to the same value; number in the
range 100–65535 milliseconds—for ES2 4G LM only, the range is 10–65535
milliseconds; default value is 300 milliseconds
■
minRecInterval—Minimum interval at which the local peer must receive BFD
control packets sent by the remote peer; number in the range 100–65535
milliseconds—for ES2 4G LM only, the range is 10–65535 milliseconds; default
value is 300 milliseconds
■
minTransInterval—Minimum proposed interval between BFD control packets
sent by the local peer; number in the range 100–65535 milliseconds—for ES2
4G LM only, the range is 10–65535 milliseconds; default value is 300 milliseconds
■
multValue—Detection multiplier value that the remote peer router multiplies by
the local peer's negotiated transmit interval to determine the remote peer's BFD
liveness detection interval; equal to the number of BFD packets that can be
missed before the BFD session is declared down; number in the range 1–255;
default value is 3
Interface Configuration, Subinterface Configuration
ip ospf bfd-liveness-detection
Chapter 10: I Commands
ip ospf cost
Syntax
ip ospf cost intfCost
no ip ospf cost
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies a cost metric for an interface. Used in the calculation of the SPF routing
table. The no version resets the path cost to the default.
■
intfCost—Link-state metric cost; number in the range 0–65535; default value
is 10
Interface Configuration, Subinterface Configuration
ip ospf cost
■
867
JUNOSe 11.0.x Command Reference Guide A to M
ip ospf dead-interval
Syntax
ip ospf dead-interval deadInterval
no ip ospf dead-interval
Release Information
Description
Options
Mode
868
■
Command introduced before JUNOSe Release 7.1.0.
Sets the time period during which the router's neighbors do not see hello packets
before they declare the router to be down. The no version resets the dead interval
to its default.
■
deadInterval—Number in the range 0–2147483647 seconds; default value is 40
seconds
Interface Configuration, Subinterface Configuration
ip ospf dead-interval
Chapter 10: I Commands
ip ospf hello-interval
Syntax
ip ospf hello-interval helloInterval
no ip ospf hello-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the interval between hello packets that the router sends on the interface.
The no version resets the hello interval to its default.
■
helloInterval—Number in the range 1–65535 seconds; default value is 10 seconds
Interface Configuration, Subinterface Configuration
ip ospf hello-interval
■
869
JUNOSe 11.0.x Command Reference Guide A to M
ip ospf message-digest-key md5
Syntax
ip ospf message-digest-key keyID md5 [ 0 | 8 ] msgDigestKey
no ip ospf message-digest-key keyID
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Enables OSPF MD5 authentication and configures the MD5 key. The no version
deletes an MD5 key.
NOTE: If all the MD5 keys have been deleted, the authentication type is still MD5,
but you must configure MD5 keys.
To disable MD5 authentication for the interface, use the ip ospf authentication-none
command.
To display the password only in encrypted text, use the service password-encryption
command.
Options
Mode
870
■
■
keyID—Key identifier in the range 1–255
■
md5—Specifies use of the MD5 algorithm
■
0—Indicates the msgDigestKey is entered in unencrypted form (plaintext); this
is the default option
■
8—Indicates the msgDigestKey is entered in encrypted form (ciphertext)
■
msgDigestKey—OSPF password; string of up to 16 alphanumeric characters
Interface Configuration, Subinterface Configuration
ip ospf message-digest-key md5
Chapter 10: I Commands
ip ospf network
Syntax
ip ospf network { broadcast | non-broadcast | point-to-point }
no ip ospf network
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Configures the OSPF network type to something other than the default for the network
medium. The no version restores the default value for the medium.
■
broadcast—Sets the network type to broadcast
■
non-broadcast—Sets the network type to NBMA
■
point-to-point—Sets the network type to point-to-point
Interface Configuration, Subinterface Configuration
ip ospf network
■
871
JUNOSe 11.0.x Command Reference Guide A to M
ip ospf priority
Syntax
ip ospf priority intfPriority
no ip ospf priority
Release Information
Description
Options
Mode
872
■
ip ospf priority
Command introduced before JUNOSe Release 7.1.0.
Sets the router priority. Used in determining the designated router for the particular
network. This designation applies only to multiaccess networks. Every broadcast and
nonbroadcast multiaccess network has a designated router. The no version restores
the default value.
■
intfPriority—Priority value, an 8-bit number in the range 1–255; default value
is 1
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip ospf retransmit-interval
Syntax
ip ospf retransmit-interval retransInterval
no ip ospf retransmit-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the time between LSA retransmissions for the interface when an
acknowledgment for the LSA is not received. The no version restores the default
value.
■
retransInterval—Number in the range 0–3600 seconds; default value is 5 seconds
Interface Configuration, Subinterface Configuration
ip ospf retransmit-interval
■
873
JUNOSe 11.0.x Command Reference Guide A to M
ip ospf shutdown
Syntax
Release Information
Description
Mode
874
■
ip ospf shutdown
[ no ] ip ospf shutdown
Command introduced before JUNOSe Release 7.1.0.
Disables OSPF on an interface. The no version enables OSPF on the interface.
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip ospf transmit-delay
Syntax
ip ospf transmit-delay transmDelay
no ip ospf transmit-delay
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the estimated time it takes to transmit a link-state update packet on the interface.
The no version restores the default value.
■
transmDelay—Link-state transmit delay, a number in the range 0–3600 seconds;
default value is 1 second
Interface Configuration, Subinterface Configuration
ip ospf transmit-delay
■
875
JUNOSe 11.0.x Command Reference Guide A to M
ip pim
Syntax
In Interface Configuration mode:
[ no ] ip pim [ dense-mode | sparse-mode | sparse-dense-mode ]
In Profile Configuration mode:
[ no ] ip pim [ sparse-mode | sparse-dense-mode ]
Release Information
Description
Options
Mode
876
■
ip pim
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 8.2.0.
In Interface Configuration mode, enables PIM on an interface. In Profile Configuration
mode, enables a PIM interface for a dynamic profile. The no version disables PIM
on an interface.
■
dense-mode—Enables PIM in dense mode
■
sparse-mode—Enables PIM in sparse mode
■
sparse-dense-mode—Enables PIM in sparse-dense mode
Interface Configuration, Profile Configuration
Chapter 10: I Commands
ip pim bfd-liveness-detection
Syntax
ip pim bfd-liveness-detection [ minimum-interval minInterval |
[ minimum-receive-interval minRecInterval ]
[ minimum-transmit-interval minTransInterval ] ] [ multiplier multValue ]
no ip pim bfd-liveness-detection
Release Information
Description
Command introduced in JUNOSe Release 8.0.0.
Enables BFD (bidirectional forwarding detection) on an interface running PIM and
defines BFD values to be negotiated between PIM neighbors for detection of IP data
path failures. The no version disables BFD on the PIM interface.
NOTE: BFD sessions might not be maintained when the multiplier value is 1 and
configured intervals are very short. We recommend that you do not use a multiplier
value of 1 with very short intervals.
Options
Mode
■
minInterval—Minimum proposed transmit interval and required receive interval
for BFD control packets; has the same effect as configuring the minimum receive
interval and the minimum transmit interval to the same value; number in the
range 100–65535 milliseconds—for ES2 4G LM only, the range is 10–65535
milliseconds; default value is 300 milliseconds
■
minRecInterval—Minimum interval at which the local peer must receive BFD
control packets sent by the remote peer; number in the range 100–65535
milliseconds—for ES2 4G LM only, the range is 10–65535 milliseconds; default
value is 300 milliseconds
■
minTransInterval—Minimum proposed interval between BFD control packets
sent by the local peer; number in the range 100–65535 milliseconds—for ES2
4G LM only, the range is 10–65535 milliseconds; default value is 300 milliseconds
■
multValue—Detection multiplier value that the remote neighbor multiplies by
the local router's negotiated transmit interval to determine the remote neighbor's
BFD liveness detection interval; equal to the number of BFD packets that can be
missed before the BFD session is declared down; number in the range 1–255;
default value is 3
Interface Configuration
ip pim bfd-liveness-detection
■
877
JUNOSe 11.0.x Command Reference Guide A to M
ip pim bsr-candidate
Syntax
ip pim bsr-candidate interfaceType interfaceSpecifier
[ hashMaskLen [ priority priority ] ] [ period bootstrapPeriod ]
no ip pim bsr-candidate
Release Information
Description
Options
Mode
878
■
Command introduced before JUNOSe Release 7.1.0.
Defines a router as a bootstrap router (BSR) candidate. The no version disables the
router BSR candidacy.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see “Interface Types and Specifiers” on page 5. The autoRP announcement
messages will contain the IP address for this interface.
■
hashMaskLen—Length (up to 32 bits) of the hash mask length field sent in BSMs
that the router originates; default value is 30 bits
■
priority—Value in the range 0–255 of the BSR-Priority field of BSMs that the
router originates; default value is 0
■
bootstrapPeriod—Interval in the range 1–65535 seconds at which the BSR sends
bootstrap messages; default value is 60 seconds
Global Configuration
ip pim bsr-candidate
Chapter 10: I Commands
ip pim data-mdt
Syntax
Release Information
Description
Mode
[ no ] ip pim data-mdt
Command introduced in JUNOSe Release 8.2.0.
Activates data MDTs and enters IP PIM Data MDT Configuration mode. The no version
deactivates data MDTs.
Global Configuration
ip pim data-mdt
■
879
JUNOSe 11.0.x Command Reference Guide A to M
ip pim dr-priority
Syntax
ip pim dr-priority priority
no ip pim dr-priority
Release Information
Description
Command introduced in JUNOSe Release 9.0.0.
Router Configuration mode added in JUNOSe Release 10.0.0.
Assigns a priority for the interface to be selected as the designated router. An interface
with a higher priority value is preferred as a designated router over an interface with
a lower priority value. In Interface Configuration mode, the no version restores the
value that is specified in Router Configuration mode. If the designated router priority
is not specified in Router Configuration mode, then the default value of 1 is restored.
NOTE: You cannot configure the designated router priority on PIM dense mode
interfaces.
Options
Mode
880
■
ip pim dr-priority
■
priority—Value in the range 1–254; default value is 1.
Interface Configuration, Router Configuration
Chapter 10: I Commands
ip pim group-address-pool
Syntax
ip pim group-address-pool poolName groupAddressMinimum groupAddressMaximum
no ip pim group-address-pool poolName
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.2.0.
Configures PIM group address pools from which data MDT group addresses are
allocated. The no version removes the group address pool.
■
poolName—Name of the group address pool
■
groupAddressMinimum—Minimum value in the group address range
■
groupAddressMaximum—Maximum value in the group address range
Global Configuration
ip pim group-address-pool
■
881
JUNOSe 11.0.x Command Reference Guide A to M
ip pim join-filter
Syntax
ip pim join-filter accessListName
no ip pim join-filter
Release Information
Description
Options
Mode
882
■
ip pim join-filter
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 8.2.0.
Specifies an extended access list that you want this PIM interface to use as a join
filter. If an interface-level filter exists, it takes precedence over the global-level filter.
The no version removes the filter association.
■
accessListName—Name of the access list that you want this interface to use as
a PIM join filter; a string of up to 32 alphanumeric characters
Global Configuration, Interface Configuration, Profile Configuration
Chapter 10: I Commands
ip pim join-prune-interval
Syntax
ip pim join-prune-interval interval
no ip pim join-prune-interval
Release Information
Description
Command introduced in JUNOSe Release 10.0.0.
Specifies the time interval at which the router sends the PIM join/prune message to
the upstream RPF neighbor. In Interface Configuration mode, the no version restores
the value that is specified in Router Configuration mode. If the message interval is
not specified in Router Configuration mode, then the default value of 60 seconds is
restored.
NOTE: You cannot configure the designated router priority on PIM dense mode
interfaces.
Options
Mode
■
interval—Interval in the range 10–210 seconds at which the router sends the
PIM join/prune message; the default value is 60 seconds.
Interface Configuration, Router Configuration
ip pim join-prune-interval
■
883
JUNOSe 11.0.x Command Reference Guide A to M
ip pim query-interval
Syntax
ip pim query-interval queryTime
no ip pim query-interval
Release Information
Description
Options
Mode
884
■
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 8.2.0.
Specifies how often the router sends PIM router query messages from this interface.
The no version specifies the default time interval, 30 seconds.
■
queryTime—Interval in the range 0–210 seconds at which the router sends PIM
router query messages from this interface
Interface Configuration, Profile Configuration
ip pim query-interval
Chapter 10: I Commands
ip pim rp-address
Syntax
Release Information
Description
Options
Mode
[ no ] ip pim rp-address ipAddress [ ipAccessList ] [ override ]
Command introduced before JUNOSe Release 7.1.0.
Specifies a static PIM group–to–RP mapping. The no version clears the mapping
from this interface.
■
ipAddress—IP address of the router you want to designate as an RP router
■
ipAccessList—Name of the IP access list that specifies which multicast groups
use this RP
■
override—Specifies that this static RP mapping has priority over group-to-RP
mappings learned by auto-RP
Global Configuration
ip pim rp-address
■
885
JUNOSe 11.0.x Command Reference Guide A to M
ip pim rp-candidate
Syntax
ip pim rp-candidate interfaceType interfaceSpecifier [ group-list accessListName ]
[ hold-time holdTime ] [ priority priority ] [ interval interval ]
no ip pim rp-candidate interfaceType interfaceSpecifier
Release Information
Description
Options
Mode
886
■
Command introduced before JUNOSe Release 7.1.0.
Defines a router as a rendezvous point (RP) router candidate. The no version stops
the router from being an RP candidate.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see “Interface Types and Specifiers” on page 5. The autoRP announcement
messages will contain the IP address for this interface.
■
accessListName—Access list containing the set of group prefixes supported by
this C-RP. If no group-list is specified, the default value is the entire multicast
address range.
■
holdTime—Amount of time in the range 1–65535 seconds that the BSR keeps
an RP in its C-RP list if the BSR does not receive a C-RP advertisement message;
default value is 150 seconds
■
priority—Priority field value in the range 0–255 that the C-RP sends to the BSR
in C-RP advertisement messages. In the RP election process, the RP with the
lower priority value is preferred; default value is 192
■
interval—Interval in the range 1–65535 seconds at which the C-RP sends
advertisement messages to the BSR; default value is 60 seconds
Global Configuration
ip pim rp-candidate
Chapter 10: I Commands
ip pim send-rp-announce
Syntax
ip pim send-rp-announce interfaceType interfaceSpecifier scope ttl
[ group-list ipAccessList] [ interval seconds ]
no ip pim send-rp-announce interfaceType interfaceSpecifier [ scope ttl ]
[ group-list ipAccessList ] [ interval seconds ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sends autoRP announcement messages from a router you configured as an RP. The
no version clears the specified filters from this interface.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see “Interface Types and Specifiers” on page 5. The autoRP announcement
messages will contain the IP address for this interface.
■
ttl—Time-to-live value; the number of hops for which the announcement is valid
in the range 1–65535; default value is 64 hops
■
ipAccessList—Name of the IP access list that specifies which multicast groups
use this RP; default value is no access list
■
seconds—Time interval in the range 1–65535 seconds at which the router sends
the announcements; default value is 60 seconds
Global Configuration
ip pim send-rp-announce
■
887
JUNOSe 11.0.x Command Reference Guide A to M
ip pim send-rp-discovery scope
Syntax
ip pim send-rp-discovery scope ttl [ interfaceType interfaceSpecifier ]
no ip pim send-rp-discovery
Release Information
Description
Options
Mode
888
■
Command introduced before JUNOSe Release 7.1.0.
Configures the router as an RP mapping agent, which records RP-to-group mappings
and notifies PIM DRs about the mappings. The no version stops the router from
acting as an RP mapping agent.
■
ttl—Time-to-live value; number of hops for which the RP discovery message is
valid. Specify a value that covers the PIM domain.
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see “Interface Types and Specifiers” on page 5. If you specify an interface, the
autoRP discovery messages will contain the IP address for this interface.
Global Configuration
ip pim send-rp-discovery scope
Chapter 10: I Commands
ip pim sparse-mode graceful-restart-duration
Syntax
ip pim sparse-mode graceful-restart-duration seconds
no ip pim sparse-mode graceful-restart-duration
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 8.1.0.
Sets duration time for IP PIM sparse-mode graceful restart. The no version resets the
duration to the default.
■
sparse-mode—Enables PIM in sparse mode
■
seconds—Restart duration in seconds; default value is 30 seconds
Global Configuration
ip pim sparse-mode graceful-restart-duration
■
889
JUNOSe 11.0.x Command Reference Guide A to M
ip pim spt-threshold
Syntax
Release Information
Description
Options
Mode
890
■
[ no ] ip pim spt-threshold { 0 | nonzero_integer | infinity } [ group-list ipAccessList
]
Command introduced before JUNOSe Release 7.1.0.
Specifies the network configuration that PIM sparse mode uses when a source starts
sending multicast messages. The no version restores the default value, 0.
■
0—Configures PIM sparse mode to switch to an SPT when a source begins to
send multicast messages
■
nonzero_integer—Integer in the range 1–4294967294; prevents PIM sparse mode
from switching from a shared tree to an SPT
■
infinity—Prevents PIM sparse mode from switching from a shared tree to an
SPT
■
ipAccessList—Name of the IP access list that specifies the groups to which the
threshold applies
Global Configuration
ip pim spt-threshold
Chapter 10: I Commands
ip pim ssm
Syntax
ip pim ssm [ default | range ipAccessList ]
no ip pim ssm
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Enables SSM and defines the SSM range of IP multicast addresses. The no version
disables SSM on the router.
■
default—Specifies that SSM use the IANA-specified range of 232/8
■
ipAccessList—Name of the IP access list that specifies the range of multicast
addresses you want SSM to use
Global Configuration
ip pim ssm
■
891
JUNOSe 11.0.x Command Reference Guide A to M
ip policy
Syntax
For standard policy lists in Interface Configuration mode:
ip policy { input | output | secondary-input } policyName
[ statistics { enabled [ baseline { enabled | disabled } ] [ preserve | merge ] |
disabled [ merge ] } | merge ]
no ip policy { input | output | secondary-input } [ policyName ]
For secure policy lists in Interface Configuration mode:
ip policy { secure-input | secure-output } policyName
[ statistics { enabled [ baseline baselineValue ] [ preserve ] | disabled } ]
no ip policy { secure-input | secure-output }
For policy lists in Profile Configuration mode:
ip policy { input | output | secondary-input } policyName
[ statistics { enabled | disabled } ] [ merge ]
no ip policy { input | output | secondary-input } [ policyName ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
merge keyword added in JUNOSe Release 7.2.0.
Profile Configuration mode added in JUNOSe Release 7.2.0.
Assigns a policy list to the ingress or egress of an interface.
For standard policy lists, specify the input or output keyword to assign the policy
list to the ingress or egress of the interface. If you enter the ip policy command and
the policy list does not exist, the router inserts a default filter rule. Attaching this
policy list to an interface filters all packets on that interface.
For secure policy lists, which are used for packet mirroring, use the secure-input or
secure-output keyword to assign the packet mirroring policy list to the ingress or
egress side of the interface. If you use the ip policy command and the secure policy
list does not exist, the router creates a secure policy list with a default mirror rule
that disables mirroring. Attaching this policy list to an interface results in no packet
mirroring.
In Profile Configuration mode, assigns the policy list to a profile, which then assigns
the policy to an interface.
In Interface Configuration mode, the no version removes the association between a
policy list and an interface. In Profile Configuration mode, the no version removes
policy reference from the profile.
892
■
ip policy
Chapter 10: I Commands
Options
■
input—Applies policy to data arriving at this interface before a route lookup
■
output—Applies policy to data leaving this interface
■
secondary-input—Applies policy to data that arrives at this interface after a route
lookup
■
secure-input—Applies secure policy to data arriving at this interface
■
secure-output—Applies secure policy to data leaving this interface
NOTE: The ip policy command used with the secure-input and secure-output
keywords provides packet mirroring support. These keywords are available in Interface
Configuration mode and do not support the statistics-related keywords. The ip policy
command used with these keywords replaces the ip mirror command, which has
been deprecated.
■
policyName—Name of the policy; a maximum of 40 characters
■
statistics—Enables or disables collection of policy routing statistics
■
■
enabled—Enables collection of policy routing statistics
■
baseline enabled—Enables baselining of policy routing statistics (Interface
Configuration mode only)
■
baseline disabled—Disables baselining of policy routing statistics (Interface
Configuration mode only)
■
preserve—Preserves existing statistics for any classifier list that is the same
for both the new and old policy attachments when you attach a new policy
to an interface
■
disabled—Disable collection of policy routing statistics
merge—Enables merging of multiple policies to form a single policy
NOTE: The local-input keyword for the ip policy command is deprecated, and might
be completely removed in a future release. We recommend that you remove the
keyword from scripts.
Mode
Related Topics
Interface Configuration, Profile Configuration
■
Setting a Statistics Baseline for Policies
■
Configuring CLI-Based Mirroring
ip policy
■
893
JUNOSe 11.0.x Command Reference Guide A to M
ip policy-list
Syntax
Release Information
Description
Options
Mode
Related Topics
894
■
ip policy-list
[ no ] ip policy-list policyName
Command introduced before JUNOSe Release 7.1.0.
Creates or modifies an IP policy list. If you execute an ip policy-list command and
type exit, the router creates a policy list with no rules, the default. When a policy list
does not have rules, the router inserts a default filter rule. Attaching this policy list
to an interface filters all packets on that interface. The no version removes a policy
list.
■
policyName—Name of the policy list
Global Configuration
■
Creating Policy Lists for IP
Chapter 10: I Commands
ip policy-parameter hierarchical
Syntax
ip policy-parameter hierarchical parameterName { nodeValue | atm | atm-vc | atm-vp
vpValue | ethernet | fr-vc | forwarding |
ppp-interface | svlan svlanValue | vlan }
no ip policy-parameter parameterName
Release Information
Description
Options
Mode
Related Topics
Command introduced in JUNOSe Release 8.0.0.
ppp-interface keyword added in JUNOSe Release 10.3.0.
Specifies a parameter value for IP interfaces. The no version removes the policy
parameter and its contents.
■
parameterName—Name of policy parameter
■
nodeValue— Aggregation node number in the range 1–65535
■
vpValue—ATM VPI number in the range 0–255
■
svlanValue—S-VLAN ID number in the range 0–4095
Interface Configuration, Profile Configuration
■
Creating a Classifier Group for a Policy List
ip policy-parameter hierarchical
■
895
JUNOSe 11.0.x Command Reference Guide A to M
ip policy-parameter reference-rate
Syntax
In Interface Configuration mode:
ip policy parameter reference-rate parameterName [ increase ] value
no ip policy-parameter reference-rate parameterName [ increase value ]
In Profile Configuration mode:
ip policy parameter reference-rate parameterName [ increase ] value
no ip policy-parameter reference-rate parameterName
Release Information
Description
Options
Mode
Related Topics
896
■
Command introduced in JUNOSe Release 8.1.0.
Creates an IP policy parameter for a reference rate; creates a global parameter if it
does not exist. The no version removes the policy parameter and its contents; if used
with the increase keyword, decreases the value.
■
parameterName—Name of policy parameter up to 40 characters
■
increase—Increments the existing reference rate value
■
value—Value of the reference rate parameter, in the range 0–4292967295
Interface Configuration, Profile Configuration
■
Creating a Classifier Group for a Policy List
ip policy-parameter reference-rate
Chapter 10: I Commands
ip prefix-list
Syntax
ip prefix-list listName { description desc |
[ seq sequence ] { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] }
no ip prefix-list listName [ description |
[ seq sequence ] [ { permit | deny } ipPrefix [ ge geNumber ] [ le leNumber ] ] ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Creates a prefix list for route filtering; specifies a list entry—a permit or deny clause
for a network address. The no version removes the specified prefix list or the specified
list entry.
■
listName—Name of the prefix list; a string of up to 32 characters
■
desc—Description of the prefix list
■
sequence—Number in the range 0–65535 that indicates the position the prefix
list entry is to have in the list of entries already configured for the prefix list; if
sequence is not specified, the value of the last sequence number + 5 is used
■
permit—If the prefix of the route being filtered matches the specified prefix and
permit is specified, the route is redistributed as controlled by the set actions
■
deny—If the prefix of the route being filtered matches the specified prefix and
deny is specified, the route is not redistributed
■
ipPrefix—Network route to be filtered, in the format network / length, where
■
network—Base address of the network route to be filtered; for example,
192.168.32.0 or 10.10.0.0
■
length—Length of the network prefix; number of bits masking base address
to produce address to be matched
■
geNumber—Route being filtered matches if its prefix is within the range specified:
greater than or equal to geNumber and less than or equal to 32
■
leNumber—Route being filtered matches if its prefix is within the range specified:
greater than or equal to length and less than or equal to leNumber
Global Configuration
ip prefix-list
■
897
JUNOSe 11.0.x Command Reference Guide A to M
ip prefix-tree
Syntax
ip prefix-tree treeName { description desc | { permit | deny } ipPrefix }
no ip prefix-tree treeName [ description | { permit | deny } ipPrefix ]
Release Information
Description
Options
Mode
898
■
ip prefix-tree
Command introduced before JUNOSe Release 7.1.0.
Creates a prefix tree for best-match route filtering; specifies a tree entry—a deny or
permit clause for a network address. The no version removes the specified prefix
tree or the specified tree entry.
■
treeName—Name of the prefix list; a string of up to 32 characters
■
desc—Description of the prefix list
■
deny—If the prefix of the route being filtered matches the specified prefix and
deny is specified, the route is not redistributed
■
permit—If the prefix of the route being filtered matches the specified prefix and
permit is specified, the route is redistributed as controlled by the set actions
■
ipPrefix—Network route to be filtered, in the format network / length, where
■
network—Base address of the network route to be filtered; for example,
192.168.32.0 or 10.10.0.0
■
length—Length of the network prefix; number of bits masking base address
to produce address to be matched
Router Configuration
Chapter 10: I Commands
ip profile
Syntax
ip profile profileName
no ip profile
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.3.0.
Specifies the IP profile that the IPSec layer passes on to the IP layer upon request for
upper-layer instantiation. The no version removes the association with this profile.
■
profileName—Name of the profile that you want the IPSec layer to pass to the
IP layer upon request for upper-layer instantiation
IPSec Tunnel Profile Configuration
ip profile
■
899
JUNOSe 11.0.x Command Reference Guide A to M
ip proxy-arp
Syntax
ip proxy-arp [ restricted | unrestricted ]
no ip proxy-arp
Release Information
Description
Options
Mode
900
■
ip proxy-arp
Command introduced before JUNOSe Release 7.1.0.
Enables proxy ARP on an Ethernet or bridge1483 interface. Proxy ARP is enabled
by default. The no version disables proxy ARP on an Ethernet or bridge1483 interface.
■
restricted—Restricts proxy-arp to hosts on the local interface
■
unrestricted—Enables proxy-arp for all reachable hosts
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip re-authenticate-auto-detect ip-subscriber
Syntax
ip re-authenticate-auto-detect ip-subscriber
no ip re-authenticate-auto-detect ip-subscriber
Release Information
Description
Mode
Command introduced in JUNOSe Release 10.0.0.
Re-authenticates the auto-detected subscribers (dynamic subscriber interfaces) created
on static and dynamic IP subscriber interfaces using the DHCP options dhcp-options,
dhcp-gi-address, and dhcp-mac-address when the DHCP external application
manages the subscriber addresses following a cold boot. The no version negates the
command or restores the defaults.
Interface Configuration, Profile Configuration
ip re-authenticate-auto-detect ip-subscriber
■
901
JUNOSe 11.0.x Command Reference Guide A to M
ip redirects
Syntax
Release Information
Description
Mode
902
■
ip redirects
[ no ] ip redirects
Command introduced before JUNOSe Release 7.1.0.
Enables the sending of redirect messages if the software is forced to resend a packet
through the same interface on which it was received. The no version disables the
sending of redirect messages.
Interface Configuration, Profile Configuration, Subinterface Configuration
Chapter 10: I Commands
ip refresh-route
Syntax
Release Information
Description
Options
Mode
ip refresh-route [ vrf vrfName ]
Command introduced before JUNOSe Release 7.1.0.
Reinstalls routes removed from the IP routing table by the clear ip route command.
There is no no version.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
Privileged Exec
ip refresh-route
■
903
JUNOSe 11.0.x Command Reference Guide A to M
ip rip
Syntax
Release Information
Description
Mode
904
■
ip rip
[ no ] ip rip
Command introduced before JUNOSe Release 7.1.0.
Configures RIP to run on the network specified by the network command. Uses the
default values: send version is RIP version 1, receive version is RIP version 1 and
version 2, authentication is not enabled. The no version deletes the RIP interface.
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip rip authentication key
Syntax
ip rip authentication key [ 0 | 8 ] authkey
no ip rip authentication key
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the password for text authentication and the key for MD5 authentication.
The no version clears the key for the interface. Supported only in RIP version 2.
Authentication is disabled by default.
■
0—Indicates the authKey is entered in unencrypted form (plaintext); this is the
default option
■
8—Indicates the authKey is entered in encrypted form (ciphertext)
■
authkey—Password sent with RIP messages or the key used to encrypt/decrypt
RIP messages, depending on the authentication mode set for this interface
Interface Configuration, Subinterface Configuration
ip rip authentication key
■
905
JUNOSe 11.0.x Command Reference Guide A to M
ip rip authentication mode
Syntax
ip rip authentication mode { text | md5 keyID }
no ip rip authentication mode
Release Information
Description
Options
Mode
906
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the type of authentication used on this interface. The no version removes
authentication from the interface. Supported only in RIP version 2. Authentication
is disabled by default.
■
text—Sends a simple text password with each RIP message; if the password is
not possessed by neighbors, the message is rejected
■
md5—Encrypts and compresses the RIP message with MD5 message-digest
algorithms
■
keyID—Number identifying the MD5 key; neighbors must share the MD5 key to
decrypt the message and encrypt the response
Interface Configuration, Subinterface Configuration
ip rip authentication mode
Chapter 10: I Commands
ip rip bfd-liveness-detection
Syntax
ip rip bfd-liveness-detection [ minimum-interval minInterval |
[ minimum-receive-interval minRecInterval ]
[ minimum-transmit-interval minTransInterval ] ] [ multiplier multValue ]
no ip rip bfd-liveness-detection
Release Information
Description
Command introduced in JUNOSe Release 8.0.0.
Enables BFD (bidirectional forwarding detection) on an interface running RIP and
defines BFD values to be negotiated between peers for detection of IP data path
failures. The no version disables BFD on the RIP interface.
NOTE: BFD sessions might not be maintained when the multiplier value is 1 and
configured intervals are very short. We recommend that you do not use a multiplier
value of 1 with very short intervals.
Options
Mode
■
minInterval—Minimum proposed transmit interval and required receive interval
for BFD control packets; has the same effect as configuring the minimum receive
interval and the minimum transmit interval to the same value; number in the
range 100–65535 milliseconds—for ES2 4G LM only, the range is 10–65535
milliseconds; default value is 300 milliseconds
■
minRecInterval—Minimum interval at which the local peer must receive BFD
control packets sent by the remote peer; number in the range 100–65535
milliseconds—for ES2 4G LM only, the range is 10–65535 milliseconds; default
value is 300 milliseconds
■
minTransInterval—Minimum proposed interval between BFD control packets
sent by the local peer; number in the range 100–65535 milliseconds—for ES2
4G LM only, the range is 10–65535 milliseconds; default value is 300 milliseconds
■
multValue—Detection multiplier value that the remote peer router multiplies by
the local peer's negotiated transmit interval to determine the remote peer's BFD
liveness detection interval; equal to the number of BFD packets that can be
missed before the BFD session is declared down; number in the range 1–255;
default value is 3
Interface Configuration
ip rip bfd-liveness-detection
■
907
JUNOSe 11.0.x Command Reference Guide A to M
ip rip copy-to-dynamic
Syntax
Release Information
Description
Mode
908
■
[ no ] ip rip copy-to-dynamic
Command introduced before JUNOSe Release 7.1.0.
Enables RIP on dynamic, unnumbered IP interfaces. You cannot configure RIP on
dynamic interfaces directly. However, this command allows dynamic, unnumbered
interfaces (that refer to numbered IP interface for configuration data) to obtain RIP
attributes from the numbered IP interface to which they refer. The no version disables
the feature but does not remove all existing, active RIP interfaces that were created
by this command.
Interface Configuration
ip rip copy-to-dynamic
Chapter 10: I Commands
ip rip receive version
Syntax
ip rip receive version { 1 | 2 | 1 2 | 2 1 | off }
no ip rip receive version
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Restricts the RIP version that the router can receive on an interface. The no version
sets the interface back to the default value, receiving both RIP version 1 and version
2.
■
1—Specifies RIP version 1 only
■
2—Specifies RIP version 2 only
■
1 2—Specifies RIP version 1 and version 2
■
2 1—Specifies RIP version 2 and version 1
■
off—Turns reception off
Interface Configuration, Subinterface Configuration
ip rip receive version
■
909
JUNOSe 11.0.x Command Reference Guide A to M
ip rip send version
Syntax
ip rip send version { 1 | 2 | 1 2 | 2 1 | off }
no ip rip send version
Release Information
Description
Options
Mode
910
■
Command introduced before JUNOSe Release 7.1.0.
Restricts the RIP version that the router can send on an interface. The no version
sets the interface back to the default value, sending only RIP version 1.
■
1—Specifies RIP version 1 only
■
2—Specifies RIP version 2 only
■
1 2—Specifies RIP version 1 and version 2
■
2 1—Specifies RIP version 2 and version 1
■
off—Turns reception off
Interface Configuration, Subinterface Configuration
ip rip send version
Chapter 10: I Commands
ip route
Syntax
ip route [ vrf vrfName ] { ipAddress ipMask { ipNextHop
[ interfaceType interfaceSpecifier ] | interfaceType interfaceSpecifier } }
[ distance ] [ tag tagVal ] [ permanent ] [ verify rtr rtrIndex [ last-resort ] ]
[ verify bfd-liveness-detection [ minimum-interval minInterval |
[ minimum-receive-interval minRecInterval ]
[ minimum-transmit-interval minTransInterval ] ] ] [ multiplier multValue ]
[ last-resort] ]
no ip route [ vrf vrfName ] ipAddress ipMask [ ipNextHop | interfaceType
interfaceSpecifier ] [ distance ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Establishes static routes and can also enable Bidirectional Forwarding Detection
(BFD) for the static route. The no version removes static routes or removes BFD from
the static route.
NOTE: BFD sessions might not be maintained when the multiplier value is 1 and
configured intervals are very short. We recommend that you do not use a multiplier
value of 1 with very short intervals.
Options
■
vrfName—Name of the VRF if the static route is being established within a VRF
context; available only in Global Configuration mode
■
ipAddress—Destination IP address
■
ipMask—IP mask for the destination
■
ipNextHop—IP address of the next hop that can be used to reach the destination
network
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
distance—Administrative distance for this route in the range 0–254
■
tagVal—Number in the range 0–4294967295 that identifies the tag for this route
■
permanent—Specifies that the route will not be removed, even if the interface
shuts down
■
verify rtr—Installs the static route in the routing table only if the next hop to the
specified destination address is resolved and if the specified RTR operation is
currently reachable
■
rtrIndex—Number of the RTR operation to be verified; there is no default value
ip route
■
911
JUNOSe 11.0.x Command Reference Guide A to M
Mode
912
■
ip route
■
last-resort—Installs the static route in the routing table even if the specified RTR
operation is currently unreachable, provided that no other static route to the
same network prefix is available
■
verify bfd-liveness-detection—Installs the static route in the routing table only if
the next hop to the specified destination address is verifiable by means of BFD
liveness detection
■
minInterval—Minimum proposed transmit interval and required receive interval
for BFD control packets; has the same effect as configuring the minimum receive
interval and the minimum transmit interval to the same value; number in the
range 100–65535 milliseconds—for ES2 4G LM only, the range is 10–65535
milliseconds; default value is 300 milliseconds
■
minRecInterval—Minimum interval at which the local peer must receive BFD
control packets sent by the remote peer; number in the range 100–65535
milliseconds—for ES2 4G LM only, the range is 10–65535 milliseconds; default
value is 300 milliseconds
■
minTransInterval—Minimum proposed interval between BFD control packets
sent by the local peer; number in the range 100–65535 milliseconds—for ES2
4G LM only, the range is 10–65535 milliseconds; default value is 300 milliseconds
■
multValue—Detection multiplier value that the remote peer router multiplies by
the local peer's negotiated transmit interval to determine the remote peer's BFD
liveness detection interval; equal to the number of BFD packets that can be
missed before the BFD session is declared down; number in the range 1–255;
default value is 3
Global Configuration, VRF Configuration
Chapter 10: I Commands
ip route-cache flow sampled
Syntax
Release Information
Description
Mode
[ no ] ip route-cache flow sampled
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 7.2.0.
Enables J-Flow statistics on an interface. The no version disables J-Flow statistics on
the interface.
Interface Configuration, Profile Configuration
ip route-cache flow sampled
■
913
JUNOSe 11.0.x Command Reference Guide A to M
ip route-map ip-subscriber
Syntax
ip route-map ip-subscriber routeMapName
no ip route-map ip-subscriber
Release Information
Description
Options
Mode
914
■
Command introduced before JUNOSe Release 7.1.0.
Configures an interface for route-map processing and specifies the route map that
is applied to the IP interface subscriber. If no route map is specified, then all packets
will trigger the creation of a dynamic subscriber interface. The no version deletes
the route map.
■
routeMapName—Name of route map
Interface Configuration, Profile Configuration
ip route-map ip-subscriber
Chapter 10: I Commands
ip route-type
Syntax
For BGP:
ip route-type [ unicast | both ]
no ip route-type
For IS-IS, OSPF, and RIP:
ip route-type [ unicast | multicast | both ]
no ip route-type
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies whether BGP, IS-IS, OSPF, or RIP routes are available only for unicast
forwarding, only for multicast reverse path forwarding checks, or for both. The no
version restores the default value, unicast for BGP or both for IS-IS, OSPF, and RIP.
■
unicast—Specifies that routes for the protocol are available only for unicast
forwarding
■
multicast—Specifies that routes for the protocol are available only for multicast
route path forwarding checks; this option is not available for BGP
■
both—Specifies that routes for the protocol are available for both unicast
forwarding and multicast route path forwarding checks
Address Family Configuration (RIP), Router Configuration
ip route-type
■
915
JUNOSe 11.0.x Command Reference Guide A to M
ip router-id
Syntax
Release Information
Description
Options
Mode
Related Topics
916
■
ip router-id
[ no ] ip router-id [ vrfName ] ipAddress
Command introduced before JUNOSe Release 7.1.0.
Establishes the IP address of a router. The no version removes the IP address
assignment.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
ipAddress—IP address of the router
Global Configuration
■
Configuring the Loopback Interface and Router ID for BGP for L2VPNs and
Configuring the Loopback Interface and Router ID for VPLS in the JUNOSe BGP and
MPLS Configuration Guide
Chapter 10: I Commands
ip router isis
Syntax
Release Information
Description
Options
Mode
[ no ] ip router isis [ tag ]
Command introduced before JUNOSe Release 7.1.0.
Configures an IS-IS routing process for IP on an interface. The no version disables
IS-IS for IP on the interface.
■
tag—Meaningful name for a routing process. If not specified, a null tag is assumed.
The name must be unique among all IP router processes for a given router. Use
the same text for the argument tag as specified in the router isis command.
Interface Configuration, Subinterface Configuration
ip router isis
■
917
JUNOSe 11.0.x Command Reference Guide A to M
ip-router-name
Syntax
Release Information
Description
[ no ] ip-router-name [ vrName ]
Command introduced in JUNOSe Release 9.0.0.
Assigns an IPv4 virtual router. The no version restores the default router.
NOTE: This command replaces the deprecated router-name command, which may
be removed completely in a future release.
Options
Mode
918
■
ip-router-name
■
vrName—Name of the virtual router; string of 1–32 alphanumeric characters
Domain Map Configuration
Chapter 10: I Commands
ip rpf-route
Syntax
ip rpf-route ipAddress addressMask
{ nextHopIpAddress | nextHopInterfaceType nextHopInterfaceSpecifier }
[ distanceValue ] [ tag tagValue ]
[ no ] ip rpf-route ipAddress addressMask
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Customizes static routes that the router can use to verify source addresses in multicast
packets. The no version removes the static route.
■
ipAddress—IP address of the destination network
■
addressMask—Subnet mask for the destination network
■
nextHopIpAddress—IP address of the next hop
■
nextHopInterfaceType—Interface type; see Interface Types and Specifiers on
page 5
■
nextHopInterfaceSpecifier—Particular interface; format varies according to
interface type; see Interface Types and Specifiers on page 5
■
distanceValue—Number in the range 0–255 that indicates the preference for this
route
■
tagValue—Number in the range 0–4294967295 that identifies the route in the
routing table
Global Configuration
ip rpf-route
■
919
JUNOSe 11.0.x Command Reference Guide A to M
ip rsvp authentication
Syntax
Description
Mode
920
■
[ no ] { ip | mpls } rsvp authentication
Enables MD5 authentication on the RSVP interface in implementations on routers
from other vendors. See the mpls rsvp authentication command for a complete
description and syntax.
Interface Configuration
ip rsvp authentication
Chapter 10: I Commands
ip rsvp authentication key
Syntax
{ ip | mpls } rsvp authentication [ key authkey ]
no { ip | mpls } rsvp authentication [ key [ authkey ] ]
Description
Mode
Assigns a key for MD5 authentication between RSVP peers in implementations on
routers from other vendors. See the mpls rsvp authentication key command for a
complete description and syntax.
Interface Configuration
ip rsvp authentication key
■
921
JUNOSe 11.0.x Command Reference Guide A to M
ip rsvp bandwidth
Syntax
{ ip rsvp | mpls } bandwidth bandwidth
no { ip rsvp | mpls } bandwidth
Description
Mode
922
■
Specifies the total bandwidth reservable on the interface in a non–E Series
implementation. See the mpls bandwidth command for a complete description and
syntax.
Interface Configuration
ip rsvp bandwidth
Chapter 10: I Commands
ip rsvp bfd-liveness-detection
Syntax
{ ip | mpls } rsvp bfd-liveness-detection [ minimum-interval minInterval |
[ minimum-receive-interval minRecInterval ]
[ minimum-transmit-interval minTransInterval ] ] [ multiplier multValue ]
no { ip | mpls } rsvp bfd-liveness-detection
Description
Mode
Enables BFD (bidirectional forwarding detection) on an interface running RSVP-TE
and defines BFD values to be negotiated between RSVP-TE neighbors for detection
of IP data path failures. See the mpls rsvp bfd-liveness-detection command for a
complete description and syntax.
Interface Configuration
ip rsvp bfd-liveness-detection
■
923
JUNOSe 11.0.x Command Reference Guide A to M
ip rsvp signalling hello
Syntax
{ ip | mpls } rsvp signalling hello
[ refresh { interval helloInterval | misses helloMisses } ]
{ no | default } { ip | mpls } rsvp signalling hello
Description
Mode
924
■
Turns on or configures RSVP-TE hello support. See the mpls rsvp signalling hello
command for a complete description and syntax.
Global Configuration, Interface Configuration, Subinterface Configuration
ip rsvp signalling hello
Chapter 10: I Commands
ip sa-validate
Syntax
Release Information
Description
Mode
[ no ] ip sa-validate
Command introduced before JUNOSe Release 7.1.0.
Enables source address validation on an interface. This feature verifies that a packet
has been sent from a valid source address. When a packet arrives on an interface,
the router performs a routing table lookup using the source address. The result from
the routing table lookup is an interface to which packets destined for that address
are routed. This interface must match the interface that the packet arrived on. If it
does not match, the router drops the packet. The no version disables source address
validation.
Interface Configuration, Profile Configuration
ip sa-validate
■
925
JUNOSe 11.0.x Command Reference Guide A to M
ip sa-validate trap-enable
Syntax
Release Information
Description
Options
Mode
926
■
[ no ] ip sa-validate [ vrf vrfName ] trap-enable
Command introduced in JUNOSe Release 7.1.0.
Enables the generation of source address validation failure traps. The no version
disables the generation of source address validation failure traps.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
Global Configuration
ip sa-validate trap-enable
Chapter 10: I Commands
ip service-profile
Syntax
ip service-profile profileName
no ip service-profile
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies a service profile used in the route map and enters Service Profile
configuration mode. The no version deletes the profile.
■
profileName—Name of service profile
Global Configuration
ip service-profile
■
927
JUNOSe 11.0.x Command Reference Guide A to M
ip share-interface
Syntax
ip share-interface interfaceType interfaceSpecifier
no ip share-interface
Release Information
Description
Options
Mode
928
■
ip share-interface
Command introduced before JUNOSe Release 7.1.0.
Specifies the layer 2 interface that an IP interface will share in the current virtual
router. The no version removes the association between the layer 2 interface and
the shared IP interface.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Interface Configuration
Chapter 10: I Commands
ip share-nexthop
Syntax
ip share-nexthop ipAddress [ virtual-router vrName ]
no ip share-nexthop
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies that the shared IP interface dynamically tracks a next hop for the specified
destination. The no version halts tracking of the next hop.
■
ipAddress—IP address of the destination for which the next hop is tracked
■
vrName—Name of the virtual router for the next hop
Interface Configuration
ip share-nexthop
■
929
JUNOSe 11.0.x Command Reference Guide A to M
ip shutdown
Syntax
Release Information
Description
Mode
930
■
ip shutdown
[ no ] ip shutdown
Command introduced before JUNOSe Release 7.1.0.
Shuts down an IP interface. The no version restarts the interface.
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip source-prefix
Syntax
[ no ] ip source-prefix ipAddress ipAddressMask deny
Release Information
Command introduced before JUNOSe Release 7.1.0.
Description
Options
Mode
Configures a subscriber interface or a primary IP interface that is enabled for dynamic
creation of subscriber interfaces to demultiplex traffic with the specified IP address
and mask. The no version removes the association between the interface and the
specified IP address and mask.
■
ipAddress—IP address of the physical interface that receives messages for this
subscriber
■
ipAddressMask—Network mask for associated IP subnet
■
deny—Filters packets matching this command
Interface Configuration, Subinterface Configuration
ip source-prefix
■
931
JUNOSe 11.0.x Command Reference Guide A to M
ip source-route
Syntax
Release Information
Description
Options
Mode
932
■
ip source-route
[ no ] ip source-route [ vrf vrfName ]
Command introduced before JUNOSe Release 7.1.0.
Enables the forwarding of source-routed packets in a VR or VRF. The no version
disables forwarding. Forwarding is disabled by default in all VRs.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
Global Configuration
Chapter 10: I Commands
ip speed
Syntax
Release Information
Description
Options
Mode
[ no ] ip speed adminSpeed
Command introduced before JUNOSe Release 7.1.0.
Sets the speed of an IP interface in bits per second. The no version restores the
default value, 0 bps.
■
adminSpeed—Speed of the interface in bps in the range 1–4294967295
Interface Configuration, Subinterface Configuration
ip speed
■
933
JUNOSe 11.0.x Command Reference Guide A to M
ip split-horizon
Syntax
Release Information
Description
Mode
934
■
ip split-horizon
[ no ] ip split-horizon
Command introduced before JUNOSe Release 7.1.0.
Enables split horizon, preventing the RIP router from advertising routes from the
interface originating the route, reducing the possibility of routing loops; this is the
default condition. The no version disables split horizon.
Interface Configuration, Subinterface Configuration
Chapter 10: I Commands
ip ssh authentication-retries
Syntax
ip ssh authentication-retries retryLimit
no ip ssh authentication-retries
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the number of times that a user can retry a failed authentication (such as trying
to correct a wrong password) before the server terminates the connection. The no
version restores the default value, 20 retries.
■
retryLimit—Number of times authentication can be retried after the initial failure
within a given connection attempt
Global Configuration
ip ssh authentication-retries
■
935
JUNOSe 11.0.x Command Reference Guide A to M
ip ssh crypto
Syntax
Release Information
Description
Options
Mode
936
■
ip ssh crypto
ip ssh crypto [ client-to-server | server-to-client ] [ no | default ] cipherAlgorithm
Command introduced before JUNOSe Release 7.1.0.
Adds an encryption algorithm to the specified list of supported algorithms. The no
version removes or excludes an algorithm from the specified list. The default version
restores the default algorithms for the specified list.
■
client-to-server—Adds the specified algorithm to the SSH server's list of supported
inbound algorithms
■
server-to-client—Adds the specified algorithm to the SSH server's list of supported
outbound algorithms
■
no—Removes or excludes the specified algorithm from the list
■
default—Restores the specified list to the factory defaults, which includes
3des-cbc, twofish-cbc, and blowfish-cbc
■
cipherAlgorithm—Algorithm to add to the list
Global Configuration
Chapter 10: I Commands
ip ssh disable-user-authentication
Syntax
Release Information
Description
Mode
[ no ] ip ssh disable-user-authentication
Command introduced before JUNOSe Release 7.1.0.
Disables RADIUS password authentication, resulting in the acceptance of all SSH
clients that pass protocol negotiation. The no version restores RADIUS authentication.
Global Configuration
ip ssh disable-user-authentication
■
937
JUNOSe 11.0.x Command Reference Guide A to M
ip ssh mac
Syntax
Release Information
Description
Options
Mode
938
■
ip ssh mac
ip ssh mac [ client-to-server | server-to-client ] [ no | default ] macAlgorithm
Command introduced before JUNOSe Release 7.1.0.
Adds a MAC algorithm to the specified list of supported algorithms. The no version
removes or excludes an algorithm from the specified list. The default version restores
the default algorithms for the specified list.
■
client-to-server—Adds the specified algorithm to the SSH server's list of supported
inbound algorithms
■
server-to-client—Adds the specified algorithm to the SSH server's list of supported
outbound algorithms
■
no—Removes or excludes the specified algorithm from the list
■
default—Restores the specified list to the factory defaults, which includes
hmac-md5, hmac-sha1, and hmac-sha1-96
■
macAlgorithm—Algorithm to add to the list
Global Configuration
Chapter 10: I Commands
ip ssh sleep
Syntax
ip ssh sleep sleepPeriod
no ip ssh sleep
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets a sleep period in seconds for users that have exceeded the authentication retry
limit. Connection attempts from the user at the same host are denied until this period
expires. The no version restores the default value, 600 seconds.
■
sleepPeriod—Period in the range 0–4294967295 seconds
Global Configuration
ip ssh sleep
■
939
JUNOSe 11.0.x Command Reference Guide A to M
ip ssh timeout
Syntax
ip ssh timeout timeout
no ip ssh timeout
Release Information
Description
Options
Mode
940
■
ip ssh timeout
Command introduced before JUNOSe Release 7.1.0.
Sets a timeout period in seconds. The SSH server terminates the connection if protocol
negotiation—including user authentication—is not complete within this timeout. The
no version restores the default value, 600 seconds.
■
timeout—Period in the range 10–600 seconds
Global Configuration
Chapter 10: I Commands
ip ssh user-authentication-protocol
Syntax
ip ssh user-authentication-protocol protocol
no ip ssh user-authentication-protocol
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 10.2.0.
Configures the SSH user authentication protocol. E Series routers support RADIUS
and TACACS+ user authentication protocols. The no version restores the SSH user
authentication protocol to the default, RADIUS.
■
protocol—User authentication protocol: either RADIUS or TACACS+.
Global Configuration
ip ssh user-authentication-protocol
■
941
JUNOSe 11.0.x Command Reference Guide A to M
ip static-route table-map
Syntax
ip static-route table-map [ vrf vrfName ] mapName
no ip static-route table-map [ vrf vrfName ] [ mapName ]
Release Information
Description
Options
Mode
942
■
Command introduced before JUNOSe Release 7.1.0.
Filters static routes before adding them to the routing table. The no version deletes
the table map.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
mapName—Name of the table map that you want the router to use
Global Configuration
ip static-route table-map
Chapter 10: I Commands
ip summary-address
Syntax
ip summary-address [ rip ] ipAddress ipAddressMask [ metric ]
no ip summary-address [ rip ] ipAddress ipAddressMask
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Summarizes specified addresses for RIP. The no version removes the summarization.
■
rip—Specifies optional keyword for compatibility with non–E Series
implementations
■
ipAddress—IP address identifying the route to be summarized
■
ipAddressMask—Network mask identifying the route to be summarized
■
metric—Specifies a metric for the summary address; default value is 1
Address Family Configuration, Router Configuration
ip summary-address
■
943
JUNOSe 11.0.x Command Reference Guide A to M
ip tcp ack-rst-and-syn
Syntax
Description
Mode
944
■
[ no ] [ ip ] tcp ack-rst-and-syn [ vrf vrfName ]
The ip keyword for tcp commands is now optional (with the exception of the ip tcp
adjust-mss command, which is IPv4 specific). For information about this command
and any other ip tcp command, see the tcp commands.
Global Configuration
ip tcp ack-rst-and-syn
Chapter 10: I Commands
ip tcp adjust-mss
Syntax
[ ip ] tcp adjust-mss mssAdjustment
no [ ip ] tcp adjust-mss
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Modifies the maximum segment size (MSS) for TCP SYN packets traveling through
the interface. The router compares the MSS value of incoming or outgoing packets
against the MSS adjustment value. For any packet that contains an MSS value larger
than the MSS adjustment value, the router replaces the MSS option with the configured
adjustment value. If the packet does not contain an MSS value, the router assumes
a value of 536 for the packet MSS on which to base the comparison. The no version
removes the MSS modification.
NOTE: The purpose behind using MSS is to alleviate problems with Path MTU
Discovery (PMTUD) and resulting “ black hole” detection issues. See RFC 2923—TCP
Problems with Path MTU Discovery (September 2000) for additional information
about the black hole scenario.
Options
Mode
■
ip—Specifies optional keyword for use with older scripts
■
mssAdjustment—Adjustment value for the MSS; in the range 160–10240
Interface Configuration, Profile Configuration
ip tcp adjust-mss
■
945
JUNOSe 11.0.x Command Reference Guide A to M
ip ttl
Syntax
ip ttl [ vrfName ] ttlValue
no ip ttl [ vrfName ]
Release Information
Description
Options
Mode
946
■
ip ttl
Command introduced before JUNOSe Release 7.1.0.
Sets the hop count specified by the TTL field in the IP header used by IP for all
operations unless overridden by another command. The no version restores the
default value, 127.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
ttlValue—Number in the range 1–255
Global Configuration
Chapter 10: I Commands
ip tunnel reassembly
Syntax
Release Information
Description
Mode
[ no ] ip tunnel reassembly
Command introduced before JUNOSe Release 7.1.0.
Enables the reassembly of fragmented IP tunnel packets that are received on the
current virtual router. The no version restores the default disabled condition.
Global Configuration
ip tunnel reassembly
■
947
JUNOSe 11.0.x Command Reference Guide A to M
ip unnumbered
Syntax
[ no ] ip unnumbered interfaceType interfaceSpecifier
Release Information
Command introduced before JUNOSe Release 7.1.0.
Description
Options
Mode
948
■
ip unnumbered
Enables IP processing on an interface without assigning an explicit IP address to the
interface. The no version disables IP processing on the interface.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Interface Configuration, Profile Configuration, Subinterface Configuration
Chapter 10: I Commands
ip unreachables
Syntax
Release Information
Description
Mode
[ no ] ip unreachables
Command introduced before JUNOSe Release 7.1.0.
Enables the generation of an ICMP unreachable message when a packet is received
that cannot be delivered by the router. The no version disables this function.
Interface Configuration, Subinterface Configuration
ip unreachables
■
949
JUNOSe 11.0.x Command Reference Guide A to M
ip use-framed-routes ip-subscriber
Syntax
Release Information
Description
Mode
950
■
[ no ] ip use-framed-routes ip-subscriber
Command introduced in JUNOSe Release 8.1.0.
Configures the router to enable a static primary IP interface to use the RADIUS
Framed-Route attribute [22]. The primary IP interface applies the framed routes as
source IP addresses when creating and configuring dynamic subscriber interfaces.
The no version disables the primary IP interface support of the Framed-Route RADIUS
attribute.
Interface Configuration
ip use-framed-routes ip-subscriber
Chapter 10: I Commands
ip virtual-router
Syntax
Release Information
Description
Options
Mode
[ no ] ip virtual-router vrName
Command introduced before JUNOSe Release 7.1.0.
Specifies a virtual router in an IP profile. Dynamic interfaces created with the profile
are assigned to this VR. The no version removes the VR from the profile; if a VR is
not specified via RADIUS, then any subsequent creation process for dynamic interfaces
using the profile fails.
■
vrName—Name of the virtual router; a string of 1–15 alphanumeric characters
Profile Configuration
ip virtual-router
■
951
JUNOSe 11.0.x Command Reference Guide A to M
ip vrf
Syntax
ip vrf vrfName
no ip vrf vrfName [ wait-for-completion [ waitSeconds ] ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Creates a VRF or accesses VRF Configuration mode to configure a VRF. The no version
deletes the VRF.
NOTE: After creating the VRF, you must configure a route distinguisher for it via the
rd command; otherwise, the VRF will not operate.
Options
Mode
952
■
ip vrf
■
vrfName—Name of the VRF; a string of 1–32 alphanumeric characters
■
wait-for-completion—Specifies (in the absence of waitSeconds) that the CLI waits
for completion of the no version operation before it returns a prompt, regardless
of how long that takes
■
waitSeconds—Number of seconds in the range 1–64000 that the CLI waits before
it returns a prompt, regardless of whether the no version operation has completed
Global Configuration
Chapter 10: I Commands
ip vrf forwarding
Syntax
Release Information
Description
[ no ] ip vrf forwarding vrfName [ fallback global ]
Command introduced before JUNOSe Release 7.1.0.
Assigns a VRF to an interface or subinterface. Optionally specifies secondary routing
table lookup on the parent (global) virtual router forwarding table if a lookup on the
initial VRF forwarding table does not yield any results. The no version removes the
assignment or discontinues the secondary routing table lookup option.
NOTE: The ip vrf forwarding command changes the prompt to indicate that the CLI
is now in Interface or Subinterface Configuration mode within the child VRF. This
condition persists only for as long as you are configuring attributes on the given
interface within the VRF. Entering a top-level command, such as interface, within
this VRF context takes the CLI out of the VRF context back to the parent VR context.
When you issue the ip vrf forwarding command from within the Interface
Configuration or Subinterface Configuration mode of the parent VR, the IP address
and other attributes of the interface are deleted from the interface. You must then
reconfigure the IP attributes in the context of the VRF after issuing the command.
Options
Mode
■
vrfName—Name of the VRF; a string of 1–32 alphanumeric characters
■
fallback global—Specifies secondary routing table lookup on the parent (global)
virtual router forwarding table, if an initial VRF forwarding table lookup does not
yield results.
Interface Configuration, Subinterface Configuration
ip vrf forwarding
■
953
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp
Syntax
Release Information
Description
Options
Mode
954
■
ip vrrp
[ no ] ip vrrp vrid
Command introduced before JUNOSe Release 7.1.0.
Creates a VRRP instance ID. The no version removes a VRID. The default is disabled.
■
vrid—VRID identifier; a number in the range 1–255
Interface Configuration
Chapter 10: I Commands
ip vrrp accept-data
Syntax
Release Information
Description
[ no ] ip vrrp vrid accept-data
Command introduced before JUNOSe Release 7.1.0.
Enables the backup router to process packets with an IP destination address equivalent
to the virtual addresses while the backup router is in the master state. The no version
restores the default value, disabled.
NOTE: When using this attribute and also restricting incoming packets to ICMP only,
you must use policy filters to accept only ICMP packets with the virtual address as
the destination address.
Options
Mode
■
vrid—VRID identifier; a number in the range 1–255
Interface Configuration
ip vrrp accept-data
■
955
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp advertise-interval
Syntax
ip vrrp vrid advertise-interval advertiseInterval [ seconds | milliseconds ]
no ip vrrp vrid advertise-interval
Release Information
Description
Options
Mode
956
■
Command introduced before JUNOSe Release 7.1.0.
Configures the VRRP advertisement interval time. You must use seconds to comply
with RFC 2338. Use milliseconds only if all VRRP instances peering for the given
VRID are composed of E Series routers. The no version restores the default value, 1
second.
■
vrid—VRID identifier; a number in the range 1–255
■
advertiseInterval—Advertisement period in seconds or milliseconds; in the range
1–255 seconds or 100–255000 milliseconds
■
seconds—Specifies interval in seconds
■
milliseconds—Specifies interval in milliseconds
Interface Configuration
ip vrrp advertise-interval
Chapter 10: I Commands
ip vrrp authentication-key
Syntax
ip vrrp vrid authentication-key key
no ip vrrp vrid authentication-key
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the authentication key. This command is only valid if the text keyword was
selected in the ip vrrp authentication-type command. The no version negates the
command or restores the default.
■
vrid—VRID identifier; a number in the range 1–255
■
key—String of 1–8 characters
Interface Configuration
ip vrrp authentication-key
■
957
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp authentication-type
Syntax
ip vrrp vrid authentication-type { none | text }
no ip vrrp vrid authentication-type
Release Information
Description
Options
Mode
958
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the VRRP authentication type. The no version restores the default value,
none.
■
vrid—VRID identifier; a number in the range 1–255
■
none—Disables authentication
■
text—Specifies simple text password
Interface Configuration
ip vrrp authentication-type
Chapter 10: I Commands
ip vrrp enable
Syntax
Release Information
Description
Options
Mode
[ no ] ip vrrp vrid [ enable ]
Command introduced before JUNOSe Release 7.1.0.
Enables a VRID. The no version disables a VRID. The default is disabled.
■
vrid—VRID identifier; a number in the range 1–255
Interface Configuration
ip vrrp enable
■
959
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp icr-partition
Syntax
Release Information
Description
Options
[ no ] ip vrrp vrid icr-partition partitionId
Command introduced in JUNOSe Release 10.3.0.
Creates an ICR partition that corresponds to the VRRP instance. The state of the ICR
partition depends on the state of the VRRP instance. If the VRRP instance is disabled,
the ICR partition is in the dormant state. If the VRRP instance is enabled, the ICR
partition follows the state of the VRRP instance. The no version deletes the partition
from the router.
■
vrid—VRID identifier; a number in the range 1–255
■
partitionId—Name that identifies the ICR partition; a string of up to 128
alphanumeric characters
NOTE: Use the ICR-Partition-Id VSA to determine the ICR partition on which
subscribers are logged in. You can configure the same ICR-Partition-Id string for an
active ICR partition and its corresponding backup partition. For more information
on ICR-PArtition-ID VSA, see Interaction with RADIUS for ICR.
Mode
Related Topics
960
■
Interface Configuration, Subinterface Configuration
■
Naming ICR Partitions
■
Configuring an ICR Partition
ip vrrp icr-partition
Chapter 10: I Commands
ip vrrp icr-partition group
Syntax
Release Information
Description
Options
Mode
Related Topics
ip vrrp vrid icr-partition group partitionGroupingType
Command introduced in JUNOSe Release 10.3.0.
Configures the ICR partition to use either S-VLAN-based grouping or VLAN-based
grouping for subscribers. If you specify VLAN as the grouping type or partition type,
the ICR partition consists of single-tagged VLAN-based subinterfaces. By default, the
ICR partition uses S-VLAN-based grouping. There is no no version.
■
vrid—VRID identifier; a number in the range 1–255
■
partitionGroupingType—One of the following partition types:
■
svlan—Configures the ICR partition to use double-tagged S-VLAN based
subinterfaces.
■
vlan—Configures the ICR partition to use single-tagged VLAN based
subinterfaces.
Interface Configuration, Subinterface Configuration
■
Grouping ICR Subscribers Based on S-VLAN IDs
■
Grouping ICR Subscribers Based on VLAN IDs
■
Configuring an ICR Partition
ip vrrp icr-partition group
■
961
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp icr-partition svlan-list
Syntax
ip vrrp vrid icr-partition svlan-list [ svlanIdValue ] *
[ use-default-mac ] [ control-interface ] [ advertise-mac ]
no ip vrrp vrid icr-partition svlan-list [ svlanIdValue ] *
Release Information
Description
Command introduced in JUNOSe Release 10.3.0.
Adds an S-VLAN to the ICR partition. You can assign only unique S-VLANs to the
partition. If you attempt to assign a previously assigned S-VLAN to the ICR partition,
the router displays an error message. You can assign S-VLANs only if you have
selected S-VLAN based grouping by using the ip vrrp icr-partition group command.
The no version deletes the S-VLAN from the ICR partition.
NOTE: You can use the listed optional parameters only when you add a S-VLAN to
the ICR partition. You cannot modify an existing subinterface using these parameters.
You can specify the optional parameters in any order.
Options
Mode
Related Topics
962
■
■
vrid—VRID identifier; a number in the range 1–255
■
svlanIdValue—S-VLAN identifier; a number in the range 0–4095
■
use-default-mac—Configures the S-VLAN to use the default MAC address. By
default, the router assigns the VRRP media access control (MAC) address to all
subinterfaces of the ICR partition.
■
control-interface—Controls traffic on a subinterface that is part of a backup
partition. When you use this option, the router changes the state of the
corresponding subinterface to Admindown. When the subinterface is in
Admindown state, the router blocks all traffic to the interface. However, the
router does not block advertisements as long as VRRP is running on a separate
subinterface. The router changes the state of the subinterface from Admindown
to Up when the state of the partition changes from backup to master.
■
advertise-mac—Enables the subinterface to transmit GARP advertisements when
the partition moves from backup state to master state. By default, GARP
advertisements are blocked on a subinterface.
Interface Configuration, Subinterface Configuration
■
Grouping ICR Subscribers Based on S-VLAN IDs
■
Configuring an ICR Partition
ip vrrp icr-partition svlan-list
Chapter 10: I Commands
ip vrrp icr-partition svlan-list explicit
Syntax
ip vrrp vrid icr-partition svlan-list-explicit [ svlanIdValue vlanIdValue ] *
[ use-default-mac ] [ control-interface ] [ advertise-mac ]
no ip vrrp vrid icr-partition svlan-list-explicit [ svlanIdValue vlanIdValue ] *
Release Information
Description
Command introduced in JUNOSe Release 10.3.0.
Adds an S-VLAN range and VLAN range to the ICR partition. You can assign only
unique S-VLAN range and VLAN range to the partition. If you attempt to assign a
previously assigned S-VLAN range and VLAN range to the ICR partition, the router
displays an error message. You can assign S-VLAN range and VLAN range only if you
have selected S-VLAN based grouping by using the ip vrrp icr-partition group
command. The no version deletes the S-VLAN range and VLAN range from the ICR
partition.
NOTE: You can use the listed optional parameters only when you add a S-VLAN,
VLAN pair to the ICR partition. You cannot modify an existing subinterface using
these parameters. You can specify the optional parameters in any order.
Options
Mode
Related Topics
■
vrid—VRID identifier; a number in the range 1–255
■
svlanIdValue—S-VLAN identifier; a number in the range 0–4095
■
vlanIdValue—VLAN identifier; a number in the range 0–4095
■
use-default-mac—Configures the S-VLAN range and VLAN range to use the
default MAC address. By default, the router assigns the VRRP media access
control (MAC) address to all subinterfaces of the ICR partition.
■
control-interface—Controls traffic on a subinterface that is part of a backup
partition. When you use this option, the router changes the state of the
corresponding subinterface to Admindown. When the subinterface is in
Admindown state, the router blocks all traffic to the interface. However, the
router does not block advertisements as long as VRRP is running on a separate
subinterface. The router changes the state of the subinterface from Admindown
to Up when the state of the partition changes from backup to master.
■
advertise-mac—Enables the subinterface to transmit GARP advertisements when
the partition moves from backup state to master state. By default, GARP
advertisements are blocked on a subinterface.
Interface Configuration, Subinterface Configuration
■
Grouping ICR Subscribers Based on S-VLAN IDs
■
Configuring an ICR Partition
ip vrrp icr-partition svlan-list explicit
■
963
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp icr-partition svlan-range
Syntax
ip vrrp vrid icr-partition svlan-range [ svlanIdStart svlanIdEnd ]
[ use-default-mac ] [ control-interface ] [ advertise-mac ]
no ip vrrp vrid icr-partition svlan-range [ svlanIdStart svlanIdEnd ]
Release Information
Description
Command introduced in JUNOSe Release 10.3.0.
Adds a range of S-VLANs to the ICR partition. You can only assign unique S-VLANs
to the partition. If you attempt to assign a previously assigned S-VLAN range to the
ICR partition, the router displays an error message. You can assign S-VLANs only if
you have selected S-VLAN based grouping by using the ip vrrp icr-partition group
command. The no version deletes the S-VLAN range from the ICR partition.
NOTE: You can use the listed optional parameters only when you add a S-VLAN or
a range of S-VLANs to the ICR partition. You cannot modify an existing subinterface
using these parameters. You can specify the optional parameters in any order.
Options
Mode
Related Topics
964
■
■
vrid—VRID identifier; a number in the range 1–255
■
svlanIdStart—Starting S-VLAN ID of the S-VLAN subrange you are configuring; a
number in the range 0–4095
■
svlanIdEnd—Ending S-VLAN ID of the S-VLAN subrange you are configuring; a
number in the range 0–4095
■
use-default-mac—Configures the S-VLAN range to use the default MAC address.
By default, the router assigns the VRRP MAC address to all subinterfaces of the
ICR partition.
■
control-interface—Controls traffic on a range of subinterfaces that are part of
a backup partition. When you use this option, the router changes the state of
the corresponding range of subinterfaces to Admindown. When the subinterfaces
are in Admindown state, the router blocks all traffic to the interfaces. However,
the router does not block advertisements as long as VRRP is running on a separate
subinterface. The router changes the state of the range of subinterfaces from
Admindown to Up when the state of the partition changes from backup to master.
■
advertise-mac—Enables subinterfaces to transmit GARP advertisements when
the partition moves from backup state to master state. By default, GARP
advertisements are blocked on subinterfaces.
Interface Configuration, Subinterface Configuration
■
Grouping ICR Subscribers Based on S-VLAN IDs
■
Configuring an ICR Partition
ip vrrp icr-partition svlan-range
Chapter 10: I Commands
ip vrrp icr-partition vlan-list
Syntax
ip vrrp vrid icr-partition vlan-list [ vlanIdValue ] *
[ use-default-mac ] [ control-interface ] [ advertise-mac ]
no ip vrrp vrid icr-partition vlan-list [ vlanIdValue ] *
Release Information
Description
Command introduced in JUNOSe Release 10.3.0.
Adds a VLAN to the ICR partition. You can assign only unique VLANs to the partition.
If you attempt to assign a previously assigned VLAN to the ICR partition, the router
displays an error message. You can assign VLANs only if you have selected VLAN
based grouping by using the ip vrrp icr-partition group command. The no version
deletes the VLAN from the ICR partition.
NOTE: You can use the listed optional parameters only when you add a VLAN to the
ICR partition. You cannot modify an existing subinterface using these parameters.
You can specify the optional parameters in any order.
Options
Mode
Related Topics
■
vrid—VRID identifier; a number in the range 1–255
■
vlanIdValue—VLAN identifier; a number in the range 0–4095
■
use-default-mac—Configures the VLAN to use the default MAC address. By
default, the router assigns the VRRP media access control (MAC) address to all
subinterfaces of the ICR partition.
■
control-interface—Controls traffic on a subinterface that is part of a backup
partition. When you use this option, the router changes the state of the
corresponding subinterface to Admindown. When the subinterface is in
Admindown state, the router blocks all traffic to the interface. However, the
router does not block advertisements as long as VRRP is running on a separate
subinterface. The router changes the state of the subinterface from Admindown
to Up when the state of the partition changes from backup to master.
■
advertise-mac—Enables the subinterface to transmit GARP advertisements when
the partition moves from backup state to master state. By default, GARP
advertisements are blocked on subinterfaces.
Interface Configuration, Subinterface Configuration
■
Grouping ICR Subscribers Based on VLAN IDs
■
Configuring an ICR Partition
ip vrrp icr-partition vlan-list
■
965
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp icr-partition vlan-range
Syntax
ip vrrp vrid icr-partition vlan-range [ vlanIdStart vlanIdEnd ]
[ use-default-mac ] [ control-interface ] [ advertise-mac ]
no ip vrrp vrid icr-partition vlan-range [ vlanIdStart vlanIdEnd ]
Release Information
Description
Command introduced in JUNOSe Release 10.3.0.
Adds a range of VLANs to the ICR partition. You can assign only unique VLANs to
the partition. If you attempt to assign a previously assigned VLAN range to the ICR
partition, the router displays an error message. You can assign VLANs only if you
have selected VLAN based grouping by using the ip vrrp icr-partition group
command. The no version deletes the VLAN range from the ICR partition.
NOTE: You can use the listed optional parameters only when you add a VLAN or a
range of VLANs to the ICR partition. You cannot modify an existing subinterface
using these parameters. You can specify the optional parameters in any order.
Options
Mode
Related Topics
966
■
■
vrid—VRID identifier; a number in the range 1–255
■
vlanIdStart—Starting VLAN ID of the VLAN subrange you are configuring; a
number in the range 0–4095
■
vlanIdEnd—Ending VLAN ID of the VLAN subrange you are configuring; a number
in the range 0–4095
■
use-default-mac—Configures the VLAN range to use the default MAC address.
By default, the router assigns the VRRP MAC address to all subinterfaces of the
ICR partition.
■
control-interface—Controls traffic on a range of subinterfaces that are part of
a backup partition. When you use this option, the router changes the state of
the corresponding range of subinterfaces to Admindown. When the subinterfaces
are in Admindown state, the router blocks all traffic to the interfaces. However,
the router does not block advertisements as long as VRRP is running on a separate
subinterface. The router changes the state of the range of subinterfaces from
Admindown to Up when the state of the partition changes from backup partition
to master.
■
advertise-mac—Enables subinterfaces to transmit GARP advertisments when
the partition moves from backup state to master state. By default, GARP
advertisements are blocked on subinterfaces.
Interface Configuration, Subinterface Configuration
■
Grouping ICR Subscribers Based on VLAN IDs
ip vrrp icr-partition vlan-range
Chapter 10: I Commands
■
Configuring an ICR Partition
ip vrrp icr-partition vlan-range
■
967
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp preempt
Syntax
Release Information
Description
Options
Mode
968
■
ip vrrp preempt
[ no ] ip vrrp vrid preempt
Command introduced before JUNOSe Release 7.1.0.
Enables VRRP preemption. The no version disables VRRP preemption. The default
is enabled.
■
vrid—VRID identifier; a number in the range 1–255
Interface Configuration
Chapter 10: I Commands
ip vrrp priority
Syntax
ip vrrp vrid priority priorityValue
no ip vrrp vrid priority
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Configures the priority of VRRP routers. The no version restores the default value,
100.
NOTE: If you configure VRRP on a virtual router and associate the IP address with
the VRRP instance ID (VRID) so that the virtual address becomes the interface address
of the router, the priority of the router automatically changes to 255 making it the
master router. This change of priority occurs in JUNOSe Software Releases 11.0.0
and higher-numbered releases and later to enable full compliance with RFC-Virtual
Router Redundancy Protocol (VRRP) (April 2004).
Also, you cannot configure the priority of the VRRP router as 255 by using the ip
vrrp priority command, unless you configured the router to automatically learn
associated addresses by using the auto keyword with the ip vrrp virtual-address
command. In addition, if you change the virtual address of the VRRP router, which
is operating as the IP address owner, to an IP address that is no longer the IP address
owner, the priority changes automatically to the default value of 100.
Options
Mode
■
vrid—VRID identifier; a number in the range 1–255
■
priorityValue—Priority value of the VRRP router; a number in the range 1–255;
default value is 100
Interface Configuration
ip vrrp priority
■
969
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp timers-learn
Syntax
Release Information
Description
Options
Mode
Related Topics
970
■
[ no ] ip vrrp vrid timers-learn
Command introduced in JUNOSe Release 10.3.0.
Configures the VRRP instance to learn the VRRP advertisement interval from the
master VRRP instance. This feature is useful only when you have configured different
advertisement intervals for the master VRRP instance and the backup VRRP instance.
This feature enables the unified ISSU operation to proceed successfully. The no
version disables the learning timer for the VRRP instance. If you have configured
different advertisement intervals for the VRRP master and VRRP backup instances,
the VRRP session breaks, and both instances behave like the master instance, and
the router displays an error message.
■
vrid—VRID identifier; a number in the range 1–255
Interface Configuration, Subinterface Configuration
■
ip vrrp timers-learn
Chapter 10: I Commands
ip vrrp track
Syntax
ip vrrp vrid track objectName [ decrement priorityValue ]
no ip vrrp vrid track objectName
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 7.2.0.
Tracks a specified object and changes the priority of that object when the state of
the object changes from an up state to a down state. The priority is decremented by
the specified value or by the default value (100; when no decrement value is specified).
The object priority is restored when the state of the object changes from a down
state to an up state. The no version disables any tracking for the object.
■
vrid—VRID identifier; a number in the range 1–255
■
objectName—Name of the object to track
■
priorityValue—Priority value of the VRRP router; a number in the range 1–255;
default value is 100
Interface Configuration
ip vrrp track
■
971
JUNOSe 11.0.x Command Reference Guide A to M
ip vrrp virtual-address
Syntax
ip vrrp vrid virtual-address { auto | ipAddress ipAddress [ ipAddress ipAddress ]* }
no ip vrrp vrid virtual-address [ ipAddress ipAddress ]*
Release Information
Description
Options
Mode
972
■
Command introduced before JUNOSe Release 7.1.0.
Associates an IP address with a VRID. The no version removes a list of IP addresses
associated with a VRID. The no version clears the auto flag, if auto addresses are
being used. There is no default.
■
vrid—VRID identifier; a number in the range 1–255
■
ipAddress—IP address
■
*—Indicates that one or more parameters can be repeated multiple times in a
list in the command line
Interface Configuration
ip vrrp virtual-address
Chapter 10: I Commands
ipsec ca authenticate
Syntax
Release Information
Description
Options
Mode
ipsec ca authenticate caName
Command introduced before JUNOSe Release 7.1.0.
Obtains the specified CA's public key (a self-signed certificate) during online digital
certificate configuration. The CA must be previously declared by the ipsec ca identity
command. There is no no version; however, to remove the CA certificate, issue the
no ipsec ca identity command for the specified CA or boot the router using the
factory defaults.
■
caName—Name of CA
Global Configuration
ipsec ca authenticate
■
973
JUNOSe 11.0.x Command Reference Guide A to M
ipsec ca enroll
Syntax
Release Information
Description
Options
Mode
974
■
ipsec ca enroll
ipsec ca enroll caName [ password ]
Command introduced before JUNOSe Release 7.1.0.
Generates a certificate request to the specified CA and retrieves the public key
certificate for the router during online digital certificate configuration. The CA must
be previously declared by the ipsec ca identity command. There is no no version.
■
caName—Name of CA
■
password —Challenge password to access the CA and enable enrollment
Global Configuration
Chapter 10: I Commands
ipsec ca identity
Syntax
Release Information
Description
Options
Mode
[ no ] ipsec ca identity name
Command introduced before JUNOSe Release 7.1.0.
Specifies the certificate authority (CA) that the router uses for certificate requests
and enters IPSec Identity Configuration mode during online digital certificate
configuration. The no version deletes the identity information and the certificates
associated with the specified CA.
■
name—Name of CA
Global Configuration
ipsec ca identity
■
975
JUNOSe 11.0.x Command Reference Guide A to M
ipsec certificate-database refresh
Syntax
Release Information
Description
Mode
976
■
ipsec certificate-database refresh
Command introduced before JUNOSe Release 7.1.0.
Informs the E Series router that a public key certificate has been copied to the router.
There is no no version.
Global Configuration
ipsec certificate-database refresh
Chapter 10: I Commands
ipsec certificate-request generate
Syntax
Release Information
Description
Options
Mode
ipsec certificate-request generate rsa fileName
Command introduced before JUNOSe Release 7.1.0.
Generates a certificate request. There is no no version.
■
rsa—Specifies that the certificate request is issued for the RSA public key
■
fileName—Name of the certificate request file generated on the E Series router;
the filename must include a .crq extension
Global Configuration
ipsec certificate-request generate
■
977
JUNOSe 11.0.x Command Reference Guide A to M
ipsec clear sa
Syntax
Release Information
Description
Options
Mode
978
■
ipsec clear sa
ipsec clear sa { all [ state tunnelState ] | tunnel tunnelName } [ phase { 1 | 2 } ]
Command introduced before JUNOSe Release 7.1.0.
Refreshes ISAKMP/IKE or IPSec SAs. There is no no version.
■
all—Reinitializes all SAs
■
state—Reinitializes SAs on tunnels that are in a specific state
■
tunnelState—State of tunnel, up, down, not-present
■
tunnel—Specifies that an SA on a specific tunnel is to be reinitialized
■
tunnelName—Name of tunnel
■
phase—Specifies one of the following types of tunnel to be reinitialized:
■
1—ISAKMP/IKE tunnels
■
2—IPSec tunnels
Global Configuration
Chapter 10: I Commands
ipsec crl
Syntax
ipsec crl { ignored | optional | required }
no ipsec crl
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Controls how the router checks certificate revocation lists (CRLs) when determining
whether to accept a peer's certificates. The no version restores the default setting.
NOTE: This command is replacing the ike crl command. The ike crl command may
be removed completely in a future release.
Options
Mode
■
ignored—Specifies that the router will not try to find or use CRLs
■
optional—Specifies that the router will try to find a CRL. If a CRL is found, the
peer certificate must not appear in the CRL. If no CRL is found, the peer can still
authenticate; this is the default.
■
required—Specifies that the router must find a valid CRL; the CRL must be current,
and the peer certificate must not appear in the CRL
Global Configuration
ipsec crl
■
979
JUNOSe 11.0.x Command Reference Guide A to M
ipsec identity
Syntax
Release Information
Description
Mode
980
■
ipsec identity
[ no ] ipsec identity
Command introduced before JUNOSe Release 7.1.0.
Configures the identity that the router uses in certificate requests and during
negotiations with its peers. The no version removes the identity configuration.
Global Configuration
Chapter 10: I Commands
ipsec ike-policy-rule
Syntax
ipsec ike-policy-rule priority
no ipsec ike-policy-rule [ priority ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Defines and prioritizes an ISAKMP/IKE policy. ISAKMP/IKE policies define parameters
to be used during ISAKMP/IKE negotiation. You can have up to 10 ISAKMP/IKE policies
per router. The no version removes a policy. If you do not include a priority number
with the no version, the software removes all ISAKMP/IKE policies.
NOTE: This command is replacing the ipsec isakmp-policy-rule command. The ipsec
isakmp-policy-rule command may be removed completely in a future release.
Options
Mode
■
priority—Identifies and prioritizes the ISAKMP/IKE policy; in the range 1 to
10000, with 1 having the highest priority
Global Configuration
ipsec ike-policy-rule
■
981
JUNOSe 11.0.x Command Reference Guide A to M
ipsec isakmp-policy-rule
Syntax
ipsec isakmp-policy-rule priority
no ipsec isakmp-policy-rule [ priority ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Defines and prioritizes an ISAKMP/IKE policy. ISAKMP/IKE policies define parameters
to be used during ISAKMP/IKE negotiation. You can have up to 10 ISAKMP/IKE policies
per router. The no version removes a policy. If you do not include a priority number
with the no version, the software removes all ISAKMP/IKE policies.
NOTE: This command has been replaced by the ipsec ike-policy-rule command and
may be removed completely in a future release.
Options
Mode
982
■
■
priority—Identifies and prioritizes the ISAKMP/IKE policy; in the range 1–10000,
with 1 having the highest priority
Global Configuration
ipsec isakmp-policy-rule
Chapter 10: I Commands
ipsec key generate
Syntax
Release Information
Description
Mode
ipsec key generate rsa { 1024 | 2048 }
Command introduced before JUNOSe Release 7.1.0.
Generates RSA key pairs. Specify the length of the key in bits, either 1024 or 2048.
There is no no version. To remove a key pair, use the ipsec key zeroize command.
Global Configuration
ipsec key generate
■
983
JUNOSe 11.0.x Command Reference Guide A to M
ipsec key manual pre-share
Syntax
[ no ] ipsec key manual pre-share { ipAddress | ip address ipAddress | identity fqdn
| local-ip-address localIpAddress [ remote-ip-address remoteIpAddress ] }
Release Information
Command introduced before JUNOSe Release 7.1.0.
local-ip-address and remote-ip-address keywords added in JUNOSe Release 7.3.0.
localIpAddress and remoteIpAddress variables added in JUNOSe Release 7.3.0.
Description
Specifies a preshared key for a remote peer, indexed by remote IP or remote identity.
It can also specify a preshared key which is indexed by the local ip / remote IP pair
for use in specific pairings or in group preshared keys (remote is wildcard 0.0.0.0).
Manually configured keys are used during the tunnel establishment phase when the
ISAKMP/IKE policy specifies preshared key authentication.
You can identify the remote peer by either IP address or fully qualified domain name
(FQDN). The no version deletes a preshared key.
NOTE: You must enter this command in the virtual router context where the IP
address or FQDN of the peer is defined.
Options
Mode
984
■
■
ipAddress—Address of the peer for which the key can be used
■
fqdn—Fully qualified domain name of the peer for which the key can be used;
a maximum of 80 characters
■
localIpAddress—Address of the local peer for which the key can be used
■
remoteIpAddress—Address of the remote peer for which the key can be used
Global Configuration
ipsec key manual pre-share
Chapter 10: I Commands
ipsec key pubkey-chain rsa
Syntax
Release Information
Description
Options
Mode
[ no ] ipsec key pubkey-chain rsa { address ipAddress | name identityString }
Command introduced in JUNOSe Release 7.1.0.
Enables you to configure the public key for a remote peer with which you want to
establish IKE SAs. This command accesses IPSec Peer Public Key Configuration mode,
from which you can enter the peer public key data without the need for a digital
certificate. Public keys are used during the tunnel establishment phase when the
ISAKMP/IKE policy specifies RSA digital signature authentication. The no version
removes the peer public key from the router.
■
ipAddress—IP address of the peer for which the public key can be used, in 32-bit
dotted decimal format (for example, 192.168.32.2)
■
identityString—Identity of the remote peer for which the public key can be used,
either in fully qualified domain name (FQDN) format (for example,
group003.customer535.isp.net) or in FQDN format preceded by an optional
user@ specification (for example, [email protected]);
maximum of 80 characters
Global Configuration
ipsec key pubkey-chain rsa
■
985
JUNOSe 11.0.x Command Reference Guide A to M
ipsec key zeroize
Syntax
Release Information
Description
Options
Mode
986
■
ipsec key zeroize
ipsec key zeroize { rsa | pre-share | all }
Command introduced before JUNOSe Release 7.1.0.
Deletes RSA key pairs. There is no no version.
■
rsa—Removes the RSA key pair from the router
■
pre-share—Removes all preshared keys from the router
■
all—Removes all keys within the VR context from the router
Global Configuration
Chapter 10: I Commands
ipsec lifetime
Syntax
Release Information
Description
Options
Mode
[ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds }
Command introduced before JUNOSe Release 7.1.0.
Specifies the default lifetime in volume of traffic or seconds. The default lifetime
applies to secure tunnels that do not have a tunnel lifetime defined. When either the
volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA.
The no version restores the default values.
■
kilobytes—Volume of traffic in kilobytes that can pass between IPSec peers before
the SA expires; in the range 102400–4294967295; default value is 4294967295
kilobytes; a setting of zero turns off the kilobyte lifetime
■
seconds—Number of seconds an SA lives before expiring; in the range
7200–4294967295; default value is 28800 seconds (8 hours)
Global Configuration
ipsec lifetime
■
987
JUNOSe 11.0.x Command Reference Guide A to M
ipsec local-endpoint
Syntax
Release Information
Description
Options
Mode
988
■
[ no ] ipsec local-endpoint ipAddress transport-virtual-router transportVRName
Command introduced before JUNOSe Release 7.1.0.
Defines a default local endpoint used for ISAKMP/IKE negotiations and all IPSec
tunnels for a transport virtual router. The no version restores the default settings of
the local endpoint.
■
ipAddress—IP address to use as the local endpoint
■
transportVRName—Name of transport virtual router in which the IP address is
defined
Global Configuration
ipsec local-endpoint
Chapter 10: I Commands
ipsec option dpd
Syntax
Release Information
Description
Mode
[ no ] ipsec option dpd
Command introduced before JUNOSe Release 7.1.0.
Enables IPSec dead peer detection (DPD) for the current virtual router. With DPD
enabled, the router detects when connectivity between the router and an IPSec peer
has been terminated. The router then sets the status for the tunnel and the upper
layer interfaces to down, which enables routing protocols to take alternate routes.
Also, administrators can then take corrective action. The no version restores the
default DPD setting, disabled.
Global Configuration
ipsec option dpd
■
989
JUNOSe 11.0.x Command Reference Guide A to M
ipsec option nat-t
Syntax
Release Information
Description
Mode
990
■
ipsec option nat-t
[ no | default ] ipsec option nat-t
Command introduced before JUNOSe Release 7.1.0.
Enables IPSec Network Address Translation Traversal (NAT-T) for the current virtual
router. With NAT-T enabled, IPSec traffic flows transparently through a NAT device,
thereby allowing one or more remote hosts located behind the NAT device to use
secure L2TP/IPSec tunnels to access the router. The ipsec option nat-t command
affects only IKE SAs negotiated on this virtual router after the command is issued; it
has no effect on previously negotiated IKE SAs. The no version disables NAT-T for
the current virtual router. The default version restores the default NAT-T setting,
enabled.
Global Configuration
Chapter 10: I Commands
ipsec option tx-invalid-cookie
Syntax
Release Information
Description
Mode
[ no ] ipsec option tx-invalid-cookie
Command introduced in JUNOSe Release 8.1.0.
Enables transmission of invalid cookie notification for the current virtual router
(transport VR). With invalid cookie notification enabled, the router signals to an
ISAKMP peer when it does not recognize an IKE phase 1 message received from the
peer. The no version restores the default setting, disabled.
Global Configuration
ipsec option tx-invalid-cookie
■
991
JUNOSe 11.0.x Command Reference Guide A to M
ipsec transform-set
Syntax
ipsec transform-set transformSetName transform0
[ transform1 [ transform2 [ transform3 [ transform4 [ transform5 ] ] ] ] ]
no ipsec transform-set transformSetName
Release Information
Description
Options
Mode
992
■
Command introduced before JUNOSe Release 7.1.0.
Creates a transform set. Transform sets used for manually configured tunnels can
have only one transform. Transform sets used for signaled tunnels can have up to
six transforms. Transforms are numbered in a priority sequence in the order in which
you enter them. Each transform provides a different combination of data
authentication and confidentiality. The no version deletes the transform set.
■
transformSetName—Name of the transform set
■
transform0 through transform5—AH or ESP transform; use the online Help to
view available transforms
Global Configuration
ipsec transform-set
Chapter 10: I Commands
ipsec transport profile
Syntax
[ no ] ipsec transport profile { profileName [ [ virtual-router vrName ]
ip address ipAddress ] | [ virtual-router vrName ] ip address ipAddress }
no ipsec transport profile { profileName
| [ virtual-router vrName ] ip address ipAddress }
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Creates or configures a transport profile for IPSec and accesses the IPSec Transport
Profile Configuration mode. The no version deletes the transport profile.
■
profileName—Name of the transport profile
■
vrName—Name of the VR on which you want to create the profile. If you do not
specify a virtual router, the current virtual router context is used
■
ipAddress—Remote endpoint for the IPSec transport connection. You can enter
a single IP address or the wildcard address of 0.0.0.0. If you use the wildcard
address, the profile accepts any remote client connection, which is a typical
scenario for secure remote access.
Global Configuration
ipsec transport profile
■
993
JUNOSe 11.0.x Command Reference Guide A to M
ipsec tunnel profile
Syntax
ipsec tunnel profile profileName [ virtual-router vrName ]
no ipsec tunnel profile profileName
Release Information
Description
Options
Mode
994
■
Command introduced in JUNOSe Release 7.3.0.
Creates or configures a tunnel profile for IPSec and accesses the IPSec Tunnel Profile
Configuration mode (config-ipsec-tunnel-profile). The no version deletes the tunnel
profile.
■
profileName—Name of the tunnel profile
■
vrName—Name of the VR on which you want to create the profile. If you do not
specify a virtual router, the current virtual router context is used
Global Configuration
ipsec tunnel profile
Chapter 10: I Commands
ipv6
Syntax
Release Information
Description
[ no ] ipv6
Command introduced before JUNOSe Release 7.1.0.
Enables an IPv6 instance on a router that does not already have an explicit IPv6
address. Normally, performing any IPv6 configuration automatically enables IPv6
on the interface. The no version disables IPv6 on the router.
NOTE: Disabling IPv6 on the router disables all IPv6 unicast routing protocols.
Mode
Global Configuration
ipv6
■
995
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 access-list
Syntax
Extended IPv6 access list:
ipv6 access-list accessListName { permit | deny } { srcIPv6Prefix |
host srcIPHost | any } { dstIPv6Prefix | host dstIPHost | any } [ log ]
no ipv6 access-list accessListName [ { permit | deny } { srcIPv6Prefix |
host srcIPv6Host | any } { dstIPv6Prefix | host dstIPv6Host | any } [ log ] ]
Release Information
Description
Options
Mode
996
■
ipv6 access-list
Command introduced before JUNOSe Release 7.1.0.
Defines an IPv6 access list. The extended access list enables you to specify a
destination address or host, precedence, and type of service. Imposes an implicit
last rule of “ deny ip any any” to deny all routes that do not match previous rules in
the access list. The no version removes the IPv6 access list, the specified entry in an
access list, or the log for a specified entry.
■
accessListName—String of up to 32 alphanumeric characters
■
permit—Permits access if the conditions are matched
■
deny—Denies access if the conditions are matched
■
srcIPv6Prefix—Source IPv6 address and mask length from which the packet is
being sent
■
srcIPv6Host—Source host IPv6 address; assumes a mask length of 128
■
any—Creates an address of :: with a mask length of 0
■
dstIPv6Prefix—Destination IP address and mask length
■
dstIPv6Host—Destination host IPv6 address to which the packet is being sent
■
log—Logs an Info event into the ipAccessList log whenever the access-list rule is
matched
Global Configuration
Chapter 10: I Commands
ipv6 access-route table-map
Syntax
ipv6 access-route [ vrf vrfName ] table-map mapName
no ipv6 access-route [ vrf vrfName ] table-map [ mapName ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
vrf keyword and vrfName variable added in JUNOSe Release 7.2.0.
Filters access routes before an access list adds them to the routing table. The no
version deletes the table map.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
mapName—Name of the table map that you want the router to use
Global Configuration
ipv6 access-route table-map
■
997
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 address
Syntax
[ no ] ipv6 address ipv6Prefix [ eui-64 ]
[ no ] ipv6 address [ ipv6Address maskLength [ eui-64 ] ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Assigns an IPv6 address (or network) to an interface and enables IPv6 processing
on that interface. The no version deletes the association from the interface.
NOTE: The link-local address for an interface is automatically configured when IPv6
is enabled on the interface.
Options
Mode
998
■
ipv6 address
■
ipv6Prefix—Prefix that defines the IPv6 interface or network in the format
ipv6Address / length, where
■
ipv6Address—Base IPv6 address of the network route that you want to filter
(for example, ::ffff:a:b:c:d)
■
length—Length of the network prefix; number of bits masking base address
to produce address to be matched
■
ipv6Address—Base IPv6 address of the network route that you want to filter (for
example, ::ffff:a:b:c:d); the ipv6Address must appear in hexadecimal format using
16-bit values between colons. Refer to RFC 2373—IP Version 6 Addressing
Architecture (July 1998) for details.
■
maskLength—Length of the IPv6 mask. A decimal value that indicates how many
of the high-order contiguous bits of the address comprise the prefix (the network
portion of the address).
■
eui-64—Specifies the use of the eui-64 interface identifier
Interface Configuration, Profile Configuration
Chapter 10: I Commands
ipv6 address-pool local
Syntax
Release Information
Description
[ no ] ipv6 address-pool local
Command introduced in JUNOSe Release 10.1.0.
Enables the IPv6 local address pool functionality to allow configuration of IPv6 local
address pools to assign prefixes to DHCPv6 clients. The no version disables the IPv6
local address functionality.
NOTE: If you attempt to configure an IPv6 local address pool without enabling the
IPv6 local pool feature, an error message is displayed.
Mode
Global Configuration
ipv6 address-pool local
■
999
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 block-multicast-sources
Syntax
Release Information
Description
Mode
1000
■
[ no ] ipv6 block-multicast-sources
Command introduced before JUNOSe Release 7.1.0.
Prevents mroute creation by blocking multicast traffic that has a scope larger than
link-local (for example, global). The no version restores the default behavior of creating
mroutes upon receiving multicast packets.
Global Configuration
ipv6 block-multicast-sources
Chapter 10: I Commands
ipv6 classifier-list
Syntax
ipv6 classifier-list classifierName [ traffic-class trafficClassName ]
[ color { green | yellow | red } ] [ user-packet-class userPacketClassValue ]
[ source-route-class routeClassValue ] [ destination-route-class routeClassValue ]
[ local { true | false } ]
[ source-address ipv6Prefix | source-host ipv6Address ]
[ destination-address ipv6Prefix | destination-host ipv6Address ]
[ precedence precNum | dsfield dsFieldNum | tcfield tcFieldNum ]
[ protocol [ protocolQualifier ] ]
no ipv6 classifier-list classifierName [ classifierNumber ]
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Creates or modifies an IPv6 classifier control list. The no version removes the classifier
control list.
■
classifierName—Name of the classifier control list entry
■
trafficClassName—Name of the traffic class to match
■
green—Matches packet color to green, indicating a low drop preference
■
yellow—Matches packet color to yellow, indicating a medium drop preference
■
red—Matches packet color to red, indicating a high drop preference
■
userPacketClassValue—User packet value to match
■
routeClassValue—Value of the source or destination route-class; in the range
0–255
■
local—Specifies traffic destined for this interface
■
true—Matches packets that are locally destined
■
false—Matches packets that are not locally destined
■
ipv6Prefix—Prefix that defines the IPv6 interface or network
■
ipv6Address—Base IPv6 address of the network route
■
precNum—Upper three bits of the traffic class byte; in the range 0–7
■
dsFieldNum—Upper six bits of the traffic class byte; in the range 0–63
■
tcFieldNum—Whole eight bits of the traffic class byte; in the range 0–255
■
protocol—Protocol type to match; tcp, udp, icmpv6, or protocol number in the
range 0–255
■
protocolQualifier—Specifies the following protocol-specific parameters:
For TCP and UDP:
■
source-port or destination-port—Specifies that a source or destination port
is matched
ipv6 classifier-list
■
1001
JUNOSe 11.0.x Command Reference Guide A to M
■
■
portOperator—One of the following classifier parameters. See Creating or
Modifying Classifier Control Lists for IPv6 Policy Lists for details.
■
lt—Less than
■
gt—Greater than
■
eq—Equal to
■
ne—Not equal
■
range—Range of port numbers
portNumber—Port number of the source or destination port
For TCP only:
■
tcpFlag; a logic equation that specifies flag bit values; ! means logical NOT
and & means logical AND; use any of the following flag names:
■
ack—0x10
■
fin—0x01
■
psh—0x08
■
rst—0x04
■
syn—0x02
■
urg—0x20
For ICMPv6:
■
■
icmpType—ICMP message type
■
icmpCode—ICMP message code
classifierNumber—Index of the classifier control list entry to be deleted
NOTE: The local-input keyword for the ipv6 policy command is deprecated, and
may be completely removed in a future release. The keyword should be removed
from scripts.
You should recreate any local input policies using the ipv6 classifier-list local true
command and attaching the policies using the ipv6 policy secondary-input
command.
Mode
Related Topics
1002
■
Global Configuration
■
ipv6 classifier-list
Creating or Modifying Classifier Control Lists for IPv6 Policy Lists
Chapter 10: I Commands
ipv6 description
Syntax
ipv6 description name
no ipv6 description
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Assigns a text description or an alias to an IPv6 interface or subinterface. Use the
show ipv6 interface command to display the text description. The no version
removes the description or alias.
■
name—Name for the IP interface; string of up to 256 characters
Interface Configuration, Subinterface Configuration
ipv6 description
■
1003
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 dhcpv6-local delegated-prefix
Syntax
ipv6 dhcpv6-local delegated-prefix ipv6Prefix
[ lifetime { days [ hours [ minutes [ seconds ] ] ] | infinite } ]
no ipv6 dhcpv6-local delegated-prefix
Release Information
Description
Options
Mode
1004
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the IPv6 prefix and lifetime that is to be delegated, when requested, to the
DHCPv6 client on this interface by the DHCPv6 local server. This lifetime overrides
the default lifetime that is set in Global Configuration mode. If no lifetime is specified,
the default lifetime is used. The no version removes the IPv6 prefix from the interface.
■
ipv6Prefix—Prefix that defines the IPv6 interface
■
days—Number of days in the lifetime; in the range 0–32768
■
hours—Number of hours in the lifetime; in the range 0–24
■
minutes—Number of minutes in the lifetime; in the range 0–60
■
seconds—Number of seconds in the lifetime; in the range 0–60
■
infinite—Assigns a lifetime that does not expire
Interface Configuration
ipv6 dhcpv6-local delegated-prefix
Chapter 10: I Commands
ipv6 dhcpv6-local dns-domain-search
Syntax
Release Information
Description
Options
Mode
[ no ] ipv6 dhcpv6-local dns-domain-search dnsDomainName
Command introduced before JUNOSe Release 7.1.0.
Adds the specified DNS domain name to the domain search list. The no version
removes the specified domain name from the search list.
■
dnsDomainName—Name of DNS domain name
Global Configuration
ipv6 dhcpv6-local dns-domain-search
■
1005
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 dhcpv6-local dns-server
Syntax
Release Information
Description
Options
Mode
1006
■
[ no ] ipv6 dhcpv6-local dns-server ipv6Address
Command introduced before JUNOSe Release 7.1.0.
Assigns the specified DNS server to all DHCPv6 clients in the current virtual router.
The no version removes the specified DNS server.
■
ipv6Address—IPv6 address of the DNS server
Global Configuration
ipv6 dhcpv6-local dns-server
Chapter 10: I Commands
ipv6 dhcpv6-local prefix-lifetime
Syntax
ipv6 dhcpv6-local prefix-lifetime { days [ hours [ minutes [ seconds ] ] ] | infinite }
no ipv6 dhcpv6-local prefix-lifetime
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the default lifetime for which a prefix delegated by this DHCPv6 local server is
valid. This default is overridden by the interface-specific lifetime. The no version
restores the default lifetime to 1 day.
■
days—Number of days in the lifetime; in the range 0–32768
■
hours—Number of hours in the lifetime; in the range 0–24
■
minutes—Number of minutes in the lifetime; in the range 0–60
■
seconds—Number of seconds in the lifetime; in the range 0–60
■
infinite—Assigns a lifetime that does not expire
Global Configuration
ipv6 dhcpv6-local prefix-lifetime
■
1007
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 dos-protection-group
Syntax
ipv6 dos-protection-group groupName
no ipv6 dos-protection-group
Release Information
Description
Options
Mode
1008
■
Command introduced in JUNOSe Release 8.1.0.
Attaches an IPv6 denial of service (DoS) protection group to an interface. The no
version removes the attachment of the DoS protection group from the interface.
■
groupName—Name of the DoS protection group; string of up to 31 alphanumeric
characters
Interface Configuration
ipv6 dos-protection-group
Chapter 10: I Commands
ipv6 enable
Syntax
Release Information
Description
Mode
[ no ] ipv6 enable
Command introduced before JUNOSe Release 7.1.0.
Enables IPv6 processing on an interface that does not already have an explicit IPv6
address. The no version disables IPv6 processing on the interface.
Interface Configuration
ipv6 enable
■
1009
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 hop-limit
Syntax
ipv6 hop-limit [ vrf vrfName ] hopLimit
no ipv6 hop-limit [ vrf vrfName ]
Release Information
Description
Options
Mode
1010
■
ipv6 hop-limit
Command introduced before JUNOSe Release 7.1.0.
vrf keyword and vrfName variable added in JUNOSe Release 7.2.0.
Specifies the maximum number of hops that the router can use in router
advertisements and all IPv6 packets. The no version sets the hop limit for IPv6 packets
to 255 hops and router advertisements to zero [0] hops (or “ unspecified” ).
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
hopLimit—Maximum number of hops (from 1 to 255) that the router can use in
router advertisements and in all IPv6 packets; the original default value is 64
hops
Global Configuration
Chapter 10: I Commands
ipv6 http
Syntax
Release Information
Description
Mode
Related Topics
[ no ] ipv6 http
Command introduced in JUNOSe Release 10.1.0.
Creates the HTTP local server for IPv6. The no version deletes the HTTP local server.
Global Configuration
■
Configuring the HTTP Server to Support Guided Entrance in the JUNOSe Broadband
Access Configuration Guide
ipv6 http
■
1011
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 http port
Syntax
ipv6 http port portNumber
no ipv6 http port
Release Information
Description
Command introduced in JUNOSe Release 10.1.0.
Specifies the port on which the HTTP local server receives connection attempts for
IPv6. The no version restores the default port number.
NOTE: Port numbers from 1 to 1024 are known as reserved ports. We recommend
that you specify a port number that does not belong to this range.
Options
Mode
Related Topics
1012
■
ipv6 http port
■
portNumber—Number of the port, in the range 0–65535; the default is port 80
Global Configuration
■
Configuring the HTTP Server to Support Guided Entrance in the JUNOSe Broadband
Access Configuration Guide
Chapter 10: I Commands
ipv6 http redirectUrl
Syntax
ipv6 http redirectUrl url
no ipv6 http redirectUrl
Release Information
Description
Options
Mode
Related Topics
Command introduced in JUNOSe Release 10.1.0.
Profile Configuration mode added in JUNOSe Release 11.0.0.
Specifies the URL to which a subscriber's initial Web browser session is redirected,
enabling initial provisioning and service selection for the subscriber. The no version
removes the redirection action.
■
url—Name of the URL; 64 characters maximum
Interface Configuration, Subinterface Configuration, Profile Configuration
■
Configuring the HTTP Server to Support Guided Entrance in the JUNOSe Broadband
Access Configuration Guide
ipv6 http redirectUrl
■
1013
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 http server
Syntax
Release Information
Description
Mode
Related Topics
1014
■
ipv6 http server
[ no ] ipv6 http server
Command introduced in JUNOSe Release 10.1.0.
Enables the HTTP local server to listen for and process IPv6 exception packets. The
no version disables the HTTP local server.
Global Configuration
■
Configuring the HTTP Server to Support Guided Entrance in the JUNOSe Broadband
Access Configuration Guide
Chapter 10: I Commands
ipv6 initial-sequence-preference
Syntax
ipv6 initial-sequence-preference preference
no ipv6 initial-sequence-preference
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 9.3.0.
Configures the warm restart replay preference for an IPv6 interface after a high
availability switchover. The no version restores the default value.
■
preference—Preference value, 0 or 1; 1 indicates highest preference; default value
is 0
Subinterface Configuration
ipv6 initial-sequence-preference
■
1015
JUNOSe 11.0.x Command Reference Guide A to M
ipv6-local-interface
Syntax
ipv6-local-interface { loopback interfaceSpecifier | ipv6Prefix }
no ipv6-local-interface
Release Information
Description
Options
Mode
1016
■
Command introduced before JUNOSe Release 7.1.0.
Maps a domain name to a loopback interface. The no version deletes the mapping
to the user domain name.
■
interfaceSpecifier—Particular loopback interface
■
ipv6Prefix—Prefix that defines the IPv6 interface in the format ipv6Address /
length, where
■
ipv6Address—Base IPv6 address of the loopback interface (for example,
::ffff:a:b:c:d)
■
length—Length of the network prefix; number of bits masking base address
to produce address to be matched
Domain Map Configuration
ipv6-local-interface
Chapter 10: I Commands
ipv6 local pool
Syntax
ipv6 local pool poolName
no ipv6 local pool poolName [ force ]
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 10.1.0.
Accesses IPv6 Local Pool Configuration mode. Specifies the IPv6 local address pool
from which prefixes are allocated to the requesting router in networks that use
DHCPv6. The no version removes the IPv6 local pool.
■
poolName—Name of the IPv6 local address pool to be used to delegate prefixes
to the requesting routers or DHCPv6 clients; string of up to 16 alphanumeric
characters
■
force—Forcibly deletes an IPv6 local address pool from which prefixes have
been allocated. When a pool from which prefixes have been assigned to DHCPv6
clients is deleted, the corresponding DHCPv6 bindings are also deleted.
Global Configuration
ipv6 local pool
■
1017
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld
Syntax
Release Information
Description
Mode
1018
■
ipv6 mld
[ no ] ipv6 mld
Command introduced before JUNOSe Release 7.1.0.
Enables MLD on an interface, and sets the MLD version to MLDv2. The no version
disables MLD on an interface.
Interface Configuration, Profile Configuration
Chapter 10: I Commands
ipv6 mld access-group
Syntax
ipv6 mld access-group accessListName
no ipv6 mld access-group
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Restricts hosts on this subnet to joining multicast groups on the specified IPv6 access
list. The no version removes the association with the specified access list and allows
hosts on the subnetwork to join any multicast group.
■
accessListName—Name of the access list; a string of up to 32 characters
Interface Configuration, Profile Configuration
ipv6 mld access-group
■
1019
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld access-source-group
Syntax
ipv6 mld access-source-group accessListName
no ipv6 mld access-source-group
Release Information
Description
Options
Mode
1020
■
Command introduced before JUNOSe Release 7.1.0.
Restricts hosts on this subnetwork to membership in those source groups (also known
as “ channels” ) permitted by the specified IPv6 access list. The no version removes
any access list restriction.
■
accessListName—Name of the access list; a string of up to 32 characters
Interface Configuration, Profile Configuration
ipv6 mld access-source-group
Chapter 10: I Commands
ipv6 mld apply-oif-map
Syntax
ipv6 mld apply-oif-map mapName
no ipv6 mld apply-oif-map
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Applies the specified outgoing interface (OIF) map to the current interface. The no
version removes the outgoing interface map from the interface.
■
mapName—Name of the OIF map
Interface Configuration, Profile Configuration
ipv6 mld apply-oif-map
■
1021
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld explicit-tracking
Syntax
Release Information
Description
Options
Mode
1022
■
[ no ] ipv6 mld explicit-tracking [ disable-if-mld-v1-detected ]
Command introduced in JUNOSe Release 8.2.0.
Enables explicit host tracking for IPv6 MLD interfaces. The no version disables explicit
host tracking on the interface or with the disable-if-mld-v1-detected keyword
reverts to the default explicit host tracking.
■
disable-if-mld-v1-detected—Disables explicit host tracking if MLD V1 hosts
detected on MLD V2 interfaces
Interface Configuration, Profile Configuration
ipv6 mld explicit-tracking
Chapter 10: I Commands
ipv6 mld group limit
Syntax
ipv6 mld group limit groupLimit
no ipv6 mld group limit
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Limits the number of MLD groups that an interface can accept. The no version restores
the default situation, in which there is no limit to the number of MLD groups that
the interface accepts.
■
groupLimit—Maximum number of MLD groups that an interface can accept, in
the range 0–64,000
Interface Configuration, Profile Configuration
ipv6 mld group limit
■
1023
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld immediate-leave
Syntax
Release Information
Description
[ no ] ipv6 mld immediate-leave
Command introduced before JUNOSe Release 7.1.0.
Removes an interface immediately when the router receives a leave group
membership message from the host associated with this interface. The no version
restores the default situation, in which the router issues query messages to multicast
groups and removes an interface if the associated host does not return a group
membership report within a certain length of time.
CAUTION: Issue this command only on MLDv1 interfaces to which one MLD client
is connected. Do not issue this command to interfaces to which more than one MLD
client is connected.
Mode
1024
■
Interface Configuration, Profile Configuration
ipv6 mld immediate-leave
Chapter 10: I Commands
ipv6 mld last-member-query-interval
Syntax
ipv6 mld last-member-query-interval tenthsOfaSecond
no ipv6 mld last-member-query-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies in tenths of a second the maximum time the router waits for a response
after sending a last member query. The router sends a last member query when it
receives an MLDv1 leave message or an MLDv2 state change report. The no version
restores the default value, 10 tenths of a second (1 second).
■
tenthsOfaSecond—Time interval to wait after sending out of a last member query
in the range 1–254 tenths of a second. Using a lower value allows members to
leave groups more quickly.
Interface Configuration, Profile Configuration
ipv6 mld last-member-query-interval
■
1025
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld oif-map
Syntax
Release Information
Description
Options
Mode
1026
■
[ no ] ipv6 mld oif-map mapName { interfaceType interfaceSpecifier | self }
[ groupPrefix [ sourcePrefix ] ]
Command introduced before JUNOSe Release 7.1.0.
Creates an outgoing interface (OIF) map. The no version removes an outgoing
interface map attribute or the entire outgoing interface map.
■
mapName—Name of the OIF map
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
self—Specifies that the multicast outgoing interface is the same as IGMP join
interface
■
groupPrefix—Group prefix in the form ipv6Address/maskLength
■
sourcePrefix—Source prefix in the form ipv6Address/maskLength
Global Configuration
ipv6 mld oif-map
Chapter 10: I Commands
ipv6 mld-proxy
Syntax
Release Information
Description
Mode
[ no ] ipv6 mld-proxy
Command introduced before JUNOSe Release 7.1.0.
Enables MLD proxy on an interface and specifies the version. Version 2 is enabled
by default. The no version disables MLD proxy for an interface.
Interface Configuration
ipv6 mld-proxy
■
1027
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld-proxy unsolicited-report-interval
Syntax
ipv6 mld-proxy unsolicited-report-interval tenths-of-a-second
no ipv6 mld-proxy unsolicited-report-interval
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
Specifies how often the upstream interface should transmit unsolicited reports. This
command has no effect on interfaces other than the upstream value. The no version
transmits unsolicited reports using the default value, 100-tenths of a second (10
seconds).
NOTE: Issue this command only on the upstream interface. Otherwise, this command
will have no effect.
Options
Mode
1028
■
■
tenths-of-a-seconds—Time interval at which the interface transmits unsolicited
reports
Interface Configuration
ipv6 mld-proxy unsolicited-report-interval
Chapter 10: I Commands
ipv6 mld-proxy version
Syntax
ipv6 mld-proxy version { 1 | 2 }
no ipv6 mld-proxy version
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the MLD proxy version for the interface. The no version restores the default
value, MLDv2.
■
1—Sets MLD version 1
■
2—Sets MLD version 2
Interface Configuration
ipv6 mld-proxy version
■
1029
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld querier-timeout
Syntax
ipv6 mld querier-timeout seconds
no ipv6 mld querier-timeout
Release Information
Description
Options
Mode
1030
■
Command introduced before JUNOSe Release 7.1.0.
Sets the time that the interface waits before declaring itself as the querier. The no
version restores the default value, twice the query interval.
■
seconds—Time interval between the last query from the previous router and the
first query from this interface
Interface Configuration, Profile Configuration
ipv6 mld querier-timeout
Chapter 10: I Commands
ipv6 mld query-interval
Syntax
ipv6 mld query-interval seconds
no ipv6 mld query-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets how often the router sends MLD host-query packets from this interface. The no
version restores the default value, 125 seconds.
■
seconds—Polling interval in the range 0–65535 seconds
Interface Configuration, Profile Configuration
ipv6 mld query-interval
■
1031
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld query-max-response-time
Syntax
ipv6 mld query-max-response-time tenthsOfaSecond
no ipv6 mld query-max-response-time
Release Information
Description
Options
Mode
1032
■
Command introduced before JUNOSe Release 7.1.0.
Specifies the period in tenths of a second during which the host is expected to respond
to an MLD query. MLD version 1 includes this value in MLD query messages sent
out on the interface. The no version restores the default value, 100 tenths of a second
(10 seconds).
■
tenthsOfaSecond—Time interval between receipt of an MLD query and the
response; in the range 1–254 tenths of a second.
Interface Configuration, Profile Configuration
ipv6 mld query-max-response-time
Chapter 10: I Commands
ipv6 mld robustness
Syntax
ipv6 mld robustness numberOfMessages
no ipv6 mld robustness
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the number of times that the router sends MLD group-specific queries before
declaring a group to no longer have any members on an interface. The no version
restores the default value, 2.
■
numberOfMessages—Number of times that the router sends MLD group-specific
queries in the range 1–4
Interface Configuration, Profile Configuration
ipv6 mld robustness
■
1033
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld ssm-map enable
Syntax
Release Information
Description
[ no ] ipv6 mld ssm-map enable
Command introduced before JUNOSe Release 7.1.0.
Enables SSM mapping on the router. SSM mapping statically assigns sources to
MLDv1 groups. You must use SSM mapping for MLDv1 hosts to interoperate with
PIM SSM. SSM mapping allows the router to use a statically configured list to translate
<*,G> memberships to <S,G> memberships. The no version disables the SSM
map.
NOTE: To operate correctly, the static source addresses configured with the ipv6
mld ssm-map static command must fall within the configured PIM SSM range.
Mode
1034
■
Privileged Exec, User Exec
ipv6 mld ssm-map enable
Chapter 10: I Commands
ipv6 mld ssm-map static
Syntax
Release Information
Description
[ no ] ipv6 mld ssm-map static accessListName sourceAddress
Command introduced before JUNOSe Release 7.1.0.
Specifies an access list and source address for use in SSM mapping. SSM mapping
statically assigns sources to MLDv1 groups. You must use SSM mapping for MLDv1
hosts to interoperate with PIM SSM. SSM mapping allows the router to use a statically
configured list to translate <*,G> memberships to <S,G> memberships. The no
version removes the SSM map association.
NOTE: To operate correctly, the static source addresses configured with the ipv6
mld ssm-map static command must fall within the configured PIM SSM range.
Options
Mode
■
accessListName—Name of the access control list
■
sourceAddress—Address of the source
Privileged Exec, User Exec
ipv6 mld ssm-map static
■
1035
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld static-exclude
Syntax
Release Information
Description
Options
Mode
1036
■
[ no ] ipv6 mld static-exclude sourceAddress groupAddress
Command introduced before JUNOSe Release 7.1.0.
Specifies that an interface not handle multicast traffic for one or more (S,G)
combinations. The no version removes the (S,G) exclusion from the interface.
■
sourceAddress—Address of the source
■
groupAddress—Address of the group
Interface Configuration, Profile Configuration
ipv6 mld static-exclude
Chapter 10: I Commands
ipv6 mld static-group
Syntax
Release Information
Description
Options
Mode
[ no ] ipv6 mld static-group groupAddress
Command introduced before JUNOSe Release 7.1.0.
Assigns an interface to handle all multicast traffic for a group. The interface sets no
timers for this group. The no version removes the group from the interface.
■
groupAddress—Address of the group
Interface Configuration, Profile Configuration
ipv6 mld static-group
■
1037
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mld static-include
Syntax
Release Information
Description
Options
Mode
1038
■
[ no ] ipv6 mld static-include sourceAddress groupAddress
Command introduced before JUNOSe Release 7.1.0.
Assigns an interface to handle multicast traffic for one or more (S,G) combinations.
The no version removes the (S,G) association from the interface.
■
sourceAddress—Address of the source
■
groupAddress—Address of the group
Interface Configuration, Profile Configuration
ipv6 mld static-include
Chapter 10: I Commands
ipv6 mld version
Syntax
ipv6 mld version { 1 | 2 | passive }
no ipv6 mld version
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the MLD version for the interface. The no version restores the default value,
MLDv1.
■
1—Sets MLD version 1
■
2—Sets MLD version 2
■
passive—Configures a mapped OIF as a passive interface with only
multicast-data-forwarding capability
Interface Configuration, Profile Configuration
ipv6 mld version
■
1039
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 mtu
Syntax
ipv6 mtu [ mtuSize ]
no ipv6 mtu
Release Information
Description
Options
Mode
1040
■
ipv6 mtu
Command introduced before JUNOSe Release 7.1.0.
Sets the maximum transmission unit size of IPv6 packets sent on an interface. The
no version restores the default value.
■
mtuSize—Maximum number of packet transmissions permitted on an interface;
in the range 160–10240; default value is 0, which means that the router takes
the value from a lower protocol layer
Interface Configuration, Profile Configuration, Subinterface Configuration
Chapter 10: I Commands
ipv6 multicast admission-bandwidth-limit
Syntax
Release Information
Description
Options
Mode
[ no ] ipv6 multicast admission-bandwidth-limit limitValue
Command introduced in JUNOSe Release 7.1.0.
Specifies multicast admission bandwidth (in kilobits per second) for a given interface.
The no version removes the admission bandwidth limit.
■
limitValue—Maximum admission bandwidth (in kilobits per second) permitted
on an interface; default value is 0, which disables the limit
Interface Configuration, Profile Configuration
ipv6 multicast admission-bandwidth-limit
■
1041
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 multicast ioa-packet-replication
Syntax
ipv6 multicast ioa-packet-replication interfaceType interfaceSpecifier
no ipv6 multicast ioa-packet-replication
Release Information
Description
Options
Mode
1042
■
Command introduced in JUNOSe Release 7.3.0.
Enables IPv6 hardware multicast packet replication on port 8 of a high-density
Ethernet I/O module or IOA. The no version disables hardware multicast packet
replication.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
Interface Configuration
ipv6 multicast ioa-packet-replication
Chapter 10: I Commands
ipv6 multicast-routing
Syntax
Release Information
Description
Mode
[ no ] ipv6 multicast-routing
Command introduced before JUNOSe Release 7.1.0.
Enables IPv6 multicast routing on the router. The no version disables IPv6 multicast
routing on the router.
Global Configuration
ipv6 multicast-routing
■
1043
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 multicast-routing bandwidth-map
Syntax
ipv6 multicast-routing bandwidth-map routeMapName
no ipv6 multicast-routing bandwidth-map
Release Information
Description
Options
Mode
1044
■
Command introduced in JUNOSe Release 7.1.0.
Enables the QoS adjust function on the router. The no version disables the QoS adjust
function on the router.
■
routeMapName—Name of the route map you want to use for the bandwidth map
Global Configuration
ipv6 multicast-routing bandwidth-map
Chapter 10: I Commands
ipv6 multicast-routing disable-rpf-check
Syntax
ipv6 multicast-routing disable-rpf-check accessListName
no ipv6 multicast-routing disable-rpf-check
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Disables RPF checks for the (S,G) pairs in the specified access list. The no version
restores the default situation, in which the router performs RPF checks for all (S,G)
pairs.
■
accessListName—Name of the IPv6 access list that specifies the (S,G) pairs
Global Configuration
ipv6 multicast-routing disable-rpf-check
■
1045
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 multicast-routing permanent-mroute
Syntax
ipv6 multicast-routing permanent-mroute accessListName
no ipv6 multicast-routing permanent-mroute
Release Information
Description
Options
Mode
1046
■
Command introduced before JUNOSe Release 7.1.0.
Specifies that newly created mroutes that match the specified access-list do not get
timed out. The no version of this command prevents any new mroutes from becoming
permanent. However, it does not remove any existing permanent mroutes. To remove
existing permanent mroutes, use the clear ipv6 mroute command.
■
accessListName—Name of the IPv6 access list that specifies the mroutes
Global Configuration
ipv6 multicast-routing permanent-mroute
Chapter 10: I Commands
ipv6 nd
Syntax
Release Information
Description
Mode
[ no ] ipv6 nd
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 9.0.0.
Enables the IPv6 Neighbor Discovery process on an interface. The no version disables
the Neighbor Discovery process.
Interface Configuration, Profile Configuration
ipv6 nd
■
1047
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 nd active-solicitations
Syntax
Release Information
Description
Mode
1048
■
[ no ] ipv6 nd active-solicitations
Command introduced before JUNOSe Release 7.1.0.
Specifies that the router can actively solicit neighbors that become stale (inactive).
The no version disables the ability to actively solicit neighbors that become stale.
Interface Configuration
ipv6 nd active-solicitations
Chapter 10: I Commands
ipv6 nd dad attempts
Syntax
ipv6 nd dad attempts numberOfAttempts
no ipv6 nd dad attempts
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the number of consecutive neighbor solicitation messages that an interface
sends while the router performs duplicate address detection (DAD) on the unicast
IPv6 addresses of the interface. The no version returns the number of neighbor
solicitation messages to its default value (one message without any follow-up
messages).
■
numberOfAttempts—Number of neighbor solicitation messages that you want
the router to transmit
Interface Configuration
ipv6 nd dad attempts
■
1049
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 nd managed-config-flag
Syntax
Release Information
Description
Mode
1050
■
[ no ] ipv6 nd managed-config-flag
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 9.0.0.
Sets the “managed address configuration” flag in IPv6 router advertisements. The
no version clears the flag from IPv6 router advertisements.
Interface Configuration, Profile Configuration
ipv6 nd managed-config-flag
Chapter 10: I Commands
ipv6 nd ns-interval
Syntax
ipv6 nd ns-interval milliseconds
no ipv6 nd ns-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the interval between IPv6 neighbor solicitation retransmissions on an
interface. The no version returns the interval between neighbor solicitation
retransmission to its default value (zero [0] milliseconds for router advertisements
and 1000 milliseconds for Neighbor Discovery activity of the E Series router).
■
milliseconds—Interval between IPv6 neighbor solicit transmissions
Interface Configuration
ipv6 nd ns-interval
■
1051
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 nd other-config-flag
Syntax
Release Information
Description
Mode
1052
■
[ no ] ipv6 nd other-config-flag
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 9.0.0.
Sets the “other stateful configuration” flag in IPv6 router advertisements. The no
version clears the flag from IPv6 router advertisements.
Interface Configuration, Profile Configuration
ipv6 nd other-config-flag
Chapter 10: I Commands
ipv6 nd prefix-advertisement
Syntax
ipv6 nd prefix-advertisement ipv6Prefix/ipv6PrefixLength validLifetime preferredLifetime
[ onlink ] [ autoconfig ]
[ no ] ipv6 nd prefix-advertisement [ ipv6Prefix/ipv6PrefixLength ]
Release Information
Description
Options
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 9.0.0.
Specifies which IPv6 prefixes the router includes in IPv6 router advertisements. In
Profile Configuration mode, you can configure a single prefix. The no version removes
any prefixes from the IPv6 routing advertisements.
■
ipv6Prefix—IPv6 network number to include in router advertisements
■
ipv6PrefixLength—Length of the IPv6 prefix; a decimal value that indicates how
many of the higher-order contiguous bits of the IPv6 address comprise the prefix
(the network portion of the IPv6 address). A slash (/) must precede this value.
NOTE: When used in an IPv6 profile, the ipv6PrefixLength must be set to a length of
64.
Mode
■
validLifetime—Amount of time in seconds that the router can advertise the
specified IPv6 prefix as valid; in the range 0–4294967295
■
preferredLifetime—Amount of time in seconds that the router can advertise the
specified IPv6 prefix as preferred; in the range 0–4294967295
■
onlink—Indicates that the specified prefix is assigned to the link
■
autoconfig—Indicates that local host links can use the specified prefix for IPv6
autoconfiguration
Interface Configuration, Profile Configuration
ipv6 nd prefix-advertisement
■
1053
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 nd proxy
Syntax
Release Information
Description
Mode
1054
■
ipv6 nd proxy
[ no ] ipv6 nd proxy
Command introduced before JUNOSe Release 7.1.0.
Enables IPv6 Neighbor Discovery proxy. The no version disables IPv6 Neighbor
Discovery proxy.
Global Configuration
Chapter 10: I Commands
ipv6 nd ra-interval
Syntax
ipv6 nd ra-interval seconds
no ipv6 nd ra-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 9.0.0.
Specifies the interval between IPv6 router advertisement retransmissions on an
interface. The no version restores the default interval, 200 seconds.
■
seconds—Number of seconds between IPv6 advertisement retransmissions; in
the range 3–1800
Interface Configuration, Profile Configuration
ipv6 nd ra-interval
■
1055
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 nd ra-lifetime
Syntax
ipv6 nd ra-lifetime seconds
no ipv6 nd ra-lifetime
Release Information
Description
Options
Mode
1056
■
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 9.0.0.
Specifies the router lifetime value in IPv6 router advertisements on an interface. The
router lifetime value is the amount of time the router is considered the default router
on this interface. The no version restores the default router lifetime value, 1800
seconds.
■
seconds—Number of seconds this router is considered the default router on this
interface; in the range 0–1800. A value of zero (0) indicates that this router is
not a default router on this interface. Nonzero values indicate that the router is
a default router on this interface. Nonzero values should not be less than the
router advertisement interval.
Interface Configuration, Profile Configuration
ipv6 nd ra-lifetime
Chapter 10: I Commands
ipv6 nd reachable-time
Syntax
ipv6 nd reachable-time { milliseconds | hours minutes seconds }
no ipv6 nd reachable-time
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 9.0.0.
Specifies the amount of time that the E Series router can reach a remote IPv6 node
after some reachability confirmation event has occurred. The no version restores
the default value 0 milliseconds for router advertisements and 3,600,000 milliseconds
(1 hour) for Neighbor Discovery activity of the E Series router.
■
milliseconds—Amount of time, in the range 0–21600000 milliseconds, that the
E Series router can reach a remote node after some reachability confirmation
event has occurred
■
hours minutes seconds—Amount of time, in the range 0 hours 0 minutes
0 seconds – 6 hours 0 minutes 0 seconds, that the E Series router can reach a
remote node after some reachability confirmation event has occurred; this
specification is not supported in Profile Configuration mode
Interface Configuration, Profile Configuration
ipv6 nd reachable-time
■
1057
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 nd suppress-ra
Syntax
Release Information
Description
Mode
1058
■
[ no ] ipv6 nd suppress-ra
Command introduced before JUNOSe Release 7.1.0.
Profile Configuration mode added in JUNOSe Release 9.0.0.
Suppresses IPv6 router advertisement transmissions on a local area network (Ethernet)
interface. The no version reenables the sending of IPv6 router advertisement
transmissions on the LAN (Ethernet) interface.
Interface Configuration, Profile Configuration
ipv6 nd suppress-ra
Chapter 10: I Commands
ipv6 nd suppress-ra-source-link-layer
Syntax
Release Information
Description
Mode
[ no ] ipv6 nd suppress-ra-source-link-layer
Command introduced before JUNOSe Release 7.1.0.
Suppresses the source link-layer option in IPv6 router advertisement transmissions.
This action forces neighbors to solicit the router link layer explicitly, and may prove
necessary when enabling inbound load sharing across multiple link-layer addresses.
The no version reenables the sending of the source link-layer option in IPv6 router
advertisement transmissions.
Interface Configuration
ipv6 nd suppress-ra-source-link-layer
■
1059
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 neighbor
Syntax
ipv6 neighbor [ vrf vrfName ] ipv6Address interfaceType interfaceSpecifier
hardwareAddress
no ipv6 neighbor [ vrf vrfName ] ipv6Address interfaceType interfaceSpecifier
Release Information
Description
Options
Mode
1060
■
ipv6 neighbor
Command introduced before JUNOSe Release 7.1.0.
vrf keyword and vrfName variable added in JUNOSe Release 7.2.0.
Specifies a static entry in the IPv6 Neighbor Discovery cache. The no version removes
the static entry from the IPv6 Neighbor Discovery cache.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
ipv6Address—IPv6 address that corresponds to the local data-link address
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
hardwareAddress—Local, 48-bit data-link address
Global Configuration
Chapter 10: I Commands
ipv6 ospf area
Syntax
[ no ] ip ospf [ processId ] area { areaId | areaIdInt }
Release Information
Command introduced before JUNOSe Release 7.1.0.
Description
Options
Mode
Creates an OSPFv3 interface under the specified area ID or moves an OSPFv3
interface from its current area to a specified area. The no version removes the
interface from the specified area.
■
processId—Integer in the range 1–65535
■
areaId—OSPF area ID in IP address format
■
areaIdInt—OSPF area ID as a decimal value 0–4294967295
Interface Configuration, Subinterface Configuration
ipv6 ospf area
■
1061
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 ospf bfd-liveness-detection
Syntax
ipv6 ospf bfd-liveness-detection [ minimum-interval minInterval |
[ minimum-receive-interval minRecInterval ]
[ minimum-transmit-interval minTransInterval ] ] [ multiplier multValue ]
no ipv6 ospf bfd-liveness-detection
Release Information
Description
Command introduced in JUNOSe Release 7.1.0.
Enables BFD (bidirectional forwarding detection) on an interface running OSPFv3
and defines BFD values to be negotiated between OSPFv3 neighbors for detection
of IPv6 data path failures. The no version disables BFD on the OSPFv3 interface.
NOTE: BFD sessions might not be maintained when the multiplier value is 1 and
configured intervals are very short. We recommend that you do not use a multiplier
value of 1 with very short intervals.
Options
Mode
1062
■
■
minInterval—Minimum proposed transmit interval and required receive interval
for BFD control packets; has the same effect as configuring the minimum receive
interval and the minimum transmit interval to the same value; number in the
range 100–65535 milliseconds—for ES2 4G LM only, the range is 10–65535
milliseconds; default value is 300 milliseconds
■
minRecInterval—Minimum interval at which the local peer must receive BFD
control packets sent by the remote peer; number in the range 100–65535
milliseconds—for ES2 4G LM only, the range is 10–65535 milliseconds; default
value is 300 milliseconds
■
minTransInterval—Minimum proposed interval between BFD control packets
sent by the local peer; number in the range 100–65535 milliseconds—for ES2
4G LM only, the range is 10–65535 milliseconds; default value is 300 milliseconds
■
multValue—Detection multiplier value that the remote peer router multiplies by
the local peer's negotiated transmit interval to determine the remote peer's BFD
liveness detection interval; equal to the number of BFD packets that can be
missed before the BFD session is declared down; number in the range 1–255;
default value is 3
Interface Configuration, Subinterface Configuration
ipv6 ospf bfd-liveness-detection
Chapter 10: I Commands
ipv6 ospf cost
Syntax
ipv6 ospf [ processId ] cost intfCost
no ipv6 ospf [ processId ] cost
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies a cost metric for an interface. Used in the calculation of the SPF routing
table. The no version resets the path cost to the default.
■
processId—Integer in the range 1–65535
■
intfCost—Link-state metric cost; number in the range 0–65535; default value
is 10
Interface Configuration, Subinterface Configuration
ipv6 ospf cost
■
1063
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 ospf dead-interval
Syntax
ipv6 ospf [ processId ] dead-interval deadInterval
no ipv6 ospf [ processId ] dead-interval
Release Information
Description
Options
Mode
1064
■
Command introduced before JUNOSe Release 7.1.0.
Sets the time period during which the router's neighbors do not see hello packets
before they declare the router to be down. The no version resets the dead interval
to its default.
■
processId—Integer in the range 1–65535
■
deadInterval—Number in the range 0–2147483647 seconds; default value is 40
seconds
Interface Configuration, Subinterface Configuration
ipv6 ospf dead-interval
Chapter 10: I Commands
ipv6 ospf hello-interval
Syntax
ipv6 ospf [ processId ] hello-interval helloInterval
no ipv6 ospf [ processId ] hello-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the interval between hello packets that the router sends on the interface.
The no version resets the hello interval to its default.
■
processId—Integer in the range 1–65535
■
helloInterval—Number in the range 1–65535 seconds; default value is 10 seconds
Interface Configuration, Subinterface Configuration
ipv6 ospf hello-interval
■
1065
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 ospf mtu-ignore
Syntax
Release Information
Description
Options
Mode
1066
■
[ no ] ipv6 ospf [ processId ] mtu-ignore
Command introduced before JUNOSe Release 7.1.0.
Specifies that the interface ignore the MTU size contained in the DBD packet. The
interface accepts data description packets from its neighbor even if it has a different
a MTU size. However, the MTU size must be less than 18000. The no version resets
the default; that the neighbor MTU size must match the MTU size of the OSPFv3
interface from which the packet is received.
■
processId—Integer in the range 1–65535
Interface Configuration, Subinterface Configuration
ipv6 ospf mtu-ignore
Chapter 10: I Commands
ipv6 ospf network
Syntax
ipv6 ospf [ processId ] network { broadcast | point-to-point }
no ipv6 ospf [ processId ] network
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies a network type (broadcast or point-to-point) for an interface. The no version
resets the path cost to the default.
■
processId—Integer in the range 1–65535
Interface Configuration, Subinterface Configuration
ipv6 ospf network
■
1067
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 ospf priority
Syntax
ipv6 ospf [ processId ] priority intfPriority
no ipv6 ospf [ processId ] priority
Release Information
Description
Options
Mode
1068
■
Command introduced before JUNOSe Release 7.1.0.
Sets the router priority. Used in determining the designated router for the particular
network. This designation applies only to multiaccess networks. Every broadcast and
nonbroadcast multiaccess network has a designated router. The no version restores
the default value.
■
processId—Integer in the range 1–65535
■
intfPriority—Priority value, an 8-bit number in the range 1–255; default value
is 1
Interface Configuration, Subinterface Configuration
ipv6 ospf priority
Chapter 10: I Commands
ipv6 ospf retransmit-interval
Syntax
ipv6 ospf [ processId ] retransmit-interval retransInterval
no ipv6 ospf [ processId ] retransmit-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies the time between LSA retransmissions for the interface when an
acknowledgment for the LSA is not received. The no version restores the default
value.
■
processId—Integer in the range 1–65535
■
retransInterval—Number in the range 0–3600 seconds; default value is 5 seconds
Interface Configuration, Subinterface Configuration
ipv6 ospf retransmit-interval
■
1069
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 ospf shutdown
Syntax
Release Information
Description
Options
Mode
1070
■
[ no ] ipv6 [ processId ] ospf shutdown
Command introduced before JUNOSe Release 7.1.0.
Disables OSPF on an interface. The no version enables OSPF on the interface.
■
processId—Integer in the range 1–65535
Interface Configuration, Subinterface Configuration
ipv6 ospf shutdown
Chapter 10: I Commands
ipv6 ospf transmit-delay
Syntax
ipv6 ospf [ processId ] transmit-delay transmDelay
no ipv6 ospf [ processId ] transmit-delay
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Sets the estimated time it takes to transmit a link-state update packet on the interface.
The no version restores the default value.
■
processId—Integer in the range 1–65535
■
transmDelay—Link-state transmit delay, a number in the range 0–3600 seconds;
default value is 1 second
Interface Configuration, Subinterface Configuration
ipv6 ospf transmit-delay
■
1071
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 pim bfd-liveness-detection
Syntax
ipv6 pim bfd-liveness-detection [ minimum-interval minInterval |
[ minimum-receive-interval minRecInterval ]
[ minimum-transmit-interval minTransInterval ] ] [ multiplier multValue ]
no ipv6 pim bfd-liveness-detection
Release Information
Description
Command introduced in JUNOSe Release 8.0.0.
Enables BFD (bidirectional forwarding detection) on an interface running PIM and
defines BFD values to be negotiated between PIM neighbors for detection of IPv6
data path failures. The no version disables BFD on the PIM interface.
NOTE: BFD sessions might not be maintained when the multiplier value is 1 and
configured intervals are very short. We recommend that you do not use a multiplier
value of 1 with very short intervals.
Options
Mode
1072
■
■
minInterval—Minimum proposed transmit interval and required receive interval
for BFD control packets; has the same effect as configuring the minimum receive
interval and the minimum transmit interval to the same value; number in the
range 100–65535 milliseconds—for ES2 4G LM only, the range is 10–65535
milliseconds; default value is 300 milliseconds
■
minRecInterval—Minimum interval at which the local peer must receive BFD
control packets sent by the remote peer; number in the range 100–65535
milliseconds—for ES2 4G LM only, the range is 10–65535 milliseconds; default
value is 300 milliseconds
■
minTransInterval—Minimum proposed interval between BFD control packets
sent by the local peer; number in the range 100–65535 milliseconds—for ES2
4G LM only, the range is 10–65535 milliseconds; default value is 300 milliseconds
■
multValue—Detection multiplier value that the remote neighbor multiplies by
the local router's negotiated transmit interval to determine the remote neighbor's
BFD liveness detection interval; equal to the number of BFD packets that can be
missed before the BFD session is declared down; number in the range 1–255;
default value is 3
Interface Configuration
ipv6 pim bfd-liveness-detection
Chapter 10: I Commands
ipv6 pim bsr-candidate
Syntax
ipv6 pim bsr-candidate interfaceType interfaceSpecifier
[ hashMaskLen [ priority ] ] [ period bootstrapPeriod ]
no ipv6 pim bsr-candidate
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Defines a router as a bootstrap router (BSR) candidate. The no version disables the
router BSR candidacy.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see “Interface Types and Specifiers” on page 5. The autoRP announcement
messages will contain the IP address for this interface.
■
hashMaskLen—Length in the range 1–128 bits of the hash mask length field sent
in BSMs that the router originates; default value is 126 bits
■
priority—Value in the range 0–255 of the BSR-Priority field of BSMs that the
router originates; default value is 0
■
bootstrapPeriod—Interval in the range 1–65535 seconds at which the BSR sends
bootstrap messages; default value is 60 seconds
Global Configuration
ipv6 pim bsr-candidate
■
1073
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 pim dr-priority
Syntax
ipv6 pim dr-priority priority
no ipv6 pim dr-priority
Release Information
Description
Command introduced in JUNOSe Release 10.0.0.
Assigns a priority for the interface to be selected as the designated router. An interface
with a higher priority value is preferred as a designated router over an interface with
a lower priority value. In Interface Configuration mode, the no version restores the
value that is specified in Router Configuration mode. If the designated router priority
is not specified in Router Configuration mode, then the default value of one is restored.
NOTE: You cannot configure the designated router priority on PIM dense mode
interfaces.
Options
Mode
1074
■
■
priority—Value in the range 1–254; default value is 1.
Interface Configuration, Router Configuration
ipv6 pim dr-priority
Chapter 10: I Commands
ipv6 pim join-filter
Syntax
ipv6 pim join-filter accessListName
no ipv6 pim join-filter
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies an extended access list that you want this PIM router or PIM interface to
use as a join filter. If an interface-level filter exists, it takes precedence over the
global-level filter. The no version removes the filter association.
■
accessListName—Name of the access list that you want this interface to use as
a PIM join filter; a string of up to 32 alphanumeric characters
Global Configuration, Interface Configuration
ipv6 pim join-filter
■
1075
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 pim join-prune-interval
Syntax
ipv6 pim join-prune-interval interval
no ipv6 pim join-prune-interval
Release Information
Description
Command introduced in JUNOSe Release 10.0.0.
Specifies the time interval at which the router sends the PIM join/prune message to
the upstream RPF neighbor. In Interface Configuration mode, the no version restores
the value that is specified in Router Configuration mode. If the message interval is
not specified in Router Configuration mode, then the default value of 60 seconds is
restored.
NOTE: You cannot configure the designated router priority on PIM dense mode
interfaces.
Options
Mode
1076
■
■
interval—Interval in the range 10–210 seconds at which the router sends the
PIM join/prune message; the default value is 60 seconds.
Interface Configuration, Router Configuration
ipv6 pim join-prune-interval
Chapter 10: I Commands
ipv6 pim query-interval
Syntax
ipv6 pim query-interval queryTime
no ipv6 pim query-interval
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Specifies how often the router sends PIM router query messages from this interface.
The no version specifies the default time interval, 30 seconds.
■
queryTime—Interval in the range 0–210 seconds at which the router sends PIM
router query messages from this interface
Interface Configuration
ipv6 pim query-interval
■
1077
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 pim rp-address
Syntax
Release Information
Description
Options
Mode
1078
■
[ no ] ipv6 pim rp-address ipv6Address [ ipv6AccessList ] [ override ]
Command introduced before JUNOSe Release 7.1.0.
Specifies a static PIM group–to–RP mapping. The no version clears the mapping
from this interface.
■
ipv6Address—IPv6 address of the router you want to designate as an RP router
■
ipv6AccessList—Name of the IPv6 access list that specifies which multicast groups
use this RP
■
override—Specifies that this static RP mapping has priority over group-to-RP
mappings learned by auto-RP
Global Configuration
ipv6 pim rp-address
Chapter 10: I Commands
ipv6 pim rp-candidate
Syntax
ipv6 pim rp-candidate interfaceType interfaceSpecifier [ group-list accessListName ]
[ hold-time holdTime ] [ priority priority ] [ interval interval ]
no ipv6 pim rp-candidate interfaceType interfaceSpecifier
[ group-list accessListName ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Defines a router as a rendezvous point (RP) router candidate. The no version stops
the router from being an RP candidate.
■
interfaceType—Interface type; see Interface Types and Specifiers on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see “Interface Types and Specifiers” on page 5. The autoRP announcement
messages will contain the IP address for this interface.
■
accessListName—Access-list containing the set of group prefixes supported by
this C-RP. If no group-list is specified, the default value is the entire multicast
address range.
■
holdTime—Amount of time in the range 1–65535 seconds that the BSR keeps
an RP in its C-RP list if the BSR does not receive a C-RP advertisement message;
default value is 150 seconds
■
priority—Priority field value in the range 0– 255 that the C-RP sends to the BSR
in C-RP advertisement messages; default value is 192. In the RP election process,
the RP with the lower priority value is preferred.
■
interval—Interval in the range 1–65535 seconds at which the C-RP sends
advertisement messages to the BSR; default value is 60 seconds
Global Configuration
ipv6 pim rp-candidate
■
1079
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 pim sparse-mode
Syntax
Release Information
Description
Mode
1080
■
[ no ] ipv6 pim sparse-mode
Command introduced before JUNOSe Release 7.1.0.
Enables PIM in sparse mode on an interface. The no version disables PIM in sparse
mode on an interface.
Interface Configuration
ipv6 pim sparse-mode
Chapter 10: I Commands
ipv6 pim sparse-mode graceful-restart-duration
Syntax
ipv6 pim sparse-mode graceful-restart-duration seconds
no ipv6 pim sparse-mode graceful-restart-duration
Release Information
Description
Options
Mode
Command introduced in JUNOSe Release 10.0.0.
Sets duration time for PIM sparse-mode graceful restart. The no version resets the
duration to the default.
■
seconds—Restart duration in seconds; default value is 30 seconds
Global Configuration
ipv6 pim sparse-mode graceful-restart-duration
■
1081
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 pim spt-threshold
Syntax
Release Information
Description
Options
Mode
1082
■
[ no ] ipv6 pim spt-threshold { 0 | nonZeroInteger | infinity }
[ group-list ipv6AccessList ]
Command introduced before JUNOSe Release 7.1.0.
Specifies the network configuration that PIM sparse mode uses when a source starts
sending multicast messages. The no version restores the default value, 0.
■
0—Configures PIM sparse mode to switch to an SPT when a source begins to
send multicast messages
■
nonZeroInteger—Integer in the range 1–4294967294; prevents PIM sparse mode
from switching from a shared tree to an SPT
■
infinity—Prevents PIM sparse mode from switching from a shared tree to an
SPT
■
ipv6AccessList—Name of the IPv6 access list that specifies the groups to which
the threshold applies
Global Configuration
ipv6 pim spt-threshold
Chapter 10: I Commands
ipv6 pim ssm
Syntax
ipv6 pim ssm { default | range ipv6AccessList }
no ipv6 pim ssm
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Enables SSM and defines the SSM range of IPv6 multicast addresses. The no version
disables SSM on the router.
■
default—Specifies that SSM use the IANA-specified range of 232/8
■
ipv6AccessList—Name of the IPv6 access list that specifies the range of multicast
addresses you want SSM to use
Global Configuration
ipv6 pim ssm
■
1083
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 policy
Syntax
ipv6 policy { input | output } policyName
[ statistics { enabled [ baseline { enabled | disabled } ] [ preserve | merge ] |
disabled [ merge ] } | merge ]
no ipv6 policy { input | output | secondary-input } [ policyName ]
For policy lists in Profile Configuration mode:
ipv6 policy { input | output } policyName
[ statistics { enabled | disabled } ] [ merge ]
no ipv6 policy { input | output | secondary-input } [ policyName ]
Release Information
Description
Command introduced before JUNOSe Release 7.1.0.
merge keyword added in JUNOSe Release 7.2.0.
Profile Configuration mode added in JUNOSe Release 7.2.0.
In Interface Configuration mode, assigns a policy list to the ingress or egress of an
interface. If you enter the ipv6 policy command and the policy list does not exist,
the router creates a policy list with no rules, the default. When a policy list does not
have rules, the router inserts a default filter rule. Attaching this policy list to an
interface filters all packets on that interface. You must specify the input or output
keyword to assign the policy list to the ingress or egress of the interface.
In Profile Configuration mode, assigns the policy list to a profile, which then assigns
the policy to an interface.
The no version removes the association between a policy list and an interface. In
Profile Configuration mode, the no version removes policy reference from the profile.
Options
1084
■
ipv6 policy
■
input—Applies policy to data arriving at this interface before a route lookup
■
output—Applies policy to data leaving this interface
■
secondary-input—Applies policy to data that arrives at this interface after a route
lookup
■
policyName—Name of the policy; a maximum of 40 characters
■
statistics—Enables or disables collection of policy routing statistics
■
enabled—Enable collection of policy routing statistics
■
baseline enabled—Enables baselining of policy routing statistics (Interface
Configuration mode only)
■
baseline disabled—Disables baselining of policy routing statistics (Interface
Configuration mode only)
Chapter 10: I Commands
■
■
preserve—Preserves existing statistics for any classifier-list that is the same
for both the new and old policy attachments when you attach a new policy
to an interface
■
disabled—Disable collection of policy routing statistics
merge—Enables merging of multiple policies to form a single policy
NOTE: The local-input keyword for the ipv6 policy command is deprecated, and
may be completely removed in a future release. The keyword should be removed
from scripts.
You should recreate any local input policies using the ipv6 classifier-list local true
command and attaching the policies using the ipv6 policy secondary-input
command.
Mode
Related Topics
Interface Configuration, Profile Configuration
■
Setting a Statistics Baseline for Policies
ipv6 policy
■
1085
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 policy-list
Syntax
Release Information
Description
Options
Mode
Related Topics
1086
■
ipv6 policy-list
[ no ] ipv6 policy-list policyName
Command introduced before JUNOSe Release 7.1.0.
Creates or modifies an IPv6 policy list. If you execute an ipv6 policy-list command
and type exit, the router creates a policy list with no rules, the default. When a policy
list does not have rules, the router inserts a default filter rule. Attaching this policy
list to an interface filters all packets on that interface. The no version removes a
policy list.
■
policyName—Name of the policy list
Global Configuration
■
Creating Policy Lists for IPv6
Chapter 10: I Commands
ipv6 policy-parameter hierarchical
Syntax
ipv6 policy-parameter hierarchical parameterName { nodeValue | atm | atm-vc |
atm-vp vpValue | ethernet | fr-vc | forwarding |
ppp-interface | svlan svlanValue | vlan }
no ipv6 policy-parameter parameterName
Release Information
Description
Options
Mode
Related Topics
Command introduced in JUNOSe Release 8.0.0.
ppp-interface keyword added in JUNOSe Release 10.3.0.
Specifies a parameter value for IPv6 interfaces. The no version removes the policy
parameter and its contents.
■
parameterName—Name of policy parameter
■
nodeValue— Aggregation node number in the range 1–65535
■
vpValue—ATM VPI number in the range 0–255
■
svlanValue—S-VLAN ID number in the range 0–4095
Interface Configuration, Profile Configuration
■
Creating a Classifier Group for a Policy List
ipv6 policy-parameter hierarchical
■
1087
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 policy-parameter reference-rate
Syntax
In Interface Configuration mode:
ipv6 policy-parameter reference-rate parameterName [ increase ] value
no ipv6 policy-parameter reference-rate parameterName [ increase value ]
In Profile Configuration mode:
ipv6 policy-parameter reference-rate parameterName [ increase ] value
no ipv6 policy-parameter reference-rate parameterName
Release Information
Description
Options
Mode
Related Topics
1088
■
Command introduced in JUNOSe Release 8.1.0.
Creates an IPv6 policy parameter for a reference rate; creates a global parameter if
it does not exist. The no version removes the policy parameter and its contents; if
used with the increase keyword, decreases the value.
■
parameterName—Name of policy parameter up to 40 characters
■
increase—Increments the existing reference rate value
■
value—Value of the reference rate parameter, in the range 0–4292967295
Interface Configuration, Profile Configuration
■
Creating a Classifier Group for a Policy List
ipv6 policy-parameter reference-rate
Chapter 10: I Commands
ipv6 prefix-list
Syntax
ipv6 prefix-list listName { description desc | { [ seq sequence ] { permit | deny }
ipv6Prefix [ ge geNumber ] [ le leNumber ] } }
no ipv6 prefix-list listName [ description | [ seq sequence ] [ { permit | deny }
ipv6Prefix [ ge geNumber ] [ le leNumber ] ] ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
Creates an IPv6 prefix list for route filtering; specifies a list entry—a permit or deny
clause for a network address. The no version removes the specified prefix list or the
specified list entry.
■
listName—Name of the IPv6 prefix list; a string of up to 32 characters
■
desc—Description of the prefix list
■
sequence—Number in the range 0–65535 that indicates the position the prefix
list entry has in the already existing list of entries for the prefix list; if you do not
specify a sequence, the command uses the value of the last sequence number +
5
■
permit—When specified, the router redistributes any prefix that matches the
filtered route based on the set actions
■
deny—When specified, the router drops any prefix that matches the filtered
route
■
ipv6Prefix—Network route that you want to filter, in the format ipv6Address /
length, where
■
ipv6Address—Base IPv6 address of the network route that you want to filter
(for example, ::ffff:a:b:c:d)
■
length—Length of the network prefix; number of bits masking base address
to produce address to be matched
■
geNumber—Route being filtered matches if its prefix is within the range specified:
greater than or equal to geNumber and less than or equal to 32
■
leNumber—Route being filtered matches if its prefix is within the range specified:
greater than or equal to length and less than or equal to leNumber
Global Configuration
ipv6 prefix-list
■
1089
JUNOSe 11.0.x Command Reference Guide A to M
ipv6-prefix-pool-name
Syntax
ipv6-prefix-pool-name poolName
no ipv6-prefix-pool-name
Release Information
Description
Options
Mode
1090
■
Command introduced in JUNOSe Release 10.1.0.
Specifies the IPv6 local prefix pool name to be used to delegate prefixes to the
requesting router, when the RADIUS server does not return a pool name using the
Framed-IPv6-Pool attribute. The no version removes the IPv6 local pool from the
AAA domain map.
■
poolName—Name of the IPv6 local prefix pool to associate with the domain
name; string of up to 16 alphanumeric characters
Domain Map Configuration
ipv6-prefix-pool-name
Chapter 10: I Commands
ipv6 route
Syntax
ipv6 route [ vrf vrfName ] prefix { nextHop | interfaceType interfaceSpecifier }
[ distance ]
no ipv6 route [ vrf vrfName ] prefix [ nextHop | interfaceType interfaceSpecifier ]
[ distance ]
Release Information
Description
Options
Mode
Command introduced before JUNOSe Release 7.1.0.
vrf keyword and vrfName variable added in JUNOSe Release 7.2.0.
Configures a static IPv6 prefix route. The no version removes a static IPv6 prefix
route.
■
vrfName—Name of the VRF; string of 1–32 alphanumeric characters
■
prefix—Combination of both a prefix and prefix length (mask) value. The prefix
(IP address or network) defines the IPv6 interface or network. The prefix (mask)
length of the IPv6 prefix is a decimal value that indicates how many of the
high-order contiguous bits of the address comprise the prefix (the network portion
of the address). A slash mark must precede the decimal value. An example of a
prefix would be “ 7fff::0/16” , “ 7fff::0/32” , “ 7fff:2:3::0/24” , or “ 7fff::1/128” .
■
nextHop—IPv6 address of the next-hop to reach the destination prefix (network).
The next-hop address need not be directly connected; recursion locates the
physical next-hop.
■
interfaceType—Interface type; see “Interface Types and Specifiers” on page 5
■
interfaceSpecifier—Particular interface; format varies according to interface type;
see Interface Types and Specifiers on page 5
■
distance—Preference value for the IPv6 route. A default value of 1 gives static
routes precedence over any other type of route (with the exception of connected
routes).
Global Configuration
ipv6 route
■
1091
JUNOSe 11.0.x Command Reference Guide A to M
ipv6 router isis
Syntax
Release Information
Description
Options
Mode
1092
■
ipv6 router isis
[ no ] ipv6 router isis [ tag ]
Command introduced in JUNOSe Release 8.2.0.
Enables the IS-IS routing protocol on an interface and specifies an IS-IS process for
IPv6. The no version disables IS-IS routing.
■
tag—Meaningful name for a routing process; name must be unique among all
IP router processes for a given router; if not specified, a null tag is assumed, and
the process is referenced with a null tag
Interface Configuration
Chapter 10: I Commands
ipv6 router mld
Syntax
Release Information
Description
[ no ] ipv6 router mld
Command introduced before JUNOSe Release 7.1.0.
Creates and enables MLD on a virtual router; accesses MLD router configuration
mode. The no version disables MLD on a virtual router.
NOTE: This command is identical to the router mld command.
Mode
Global Configuration
ipv6 router mld
■
1093
JUNOSe 11.0.x Command Reference Guide A to M
ipv6-router-name
Syntax
ipv6-router-name vrName
no ipv6-router-name [ vrName ]
Release Information
Description
Options
Mode
1094
■
Command intr">