[edit protocols] Hierarchy Level
protocols {
BGP
bgp {
advertise-inactive;
authentication-key key;
cluster cluster-identifier;
damping;
description text-description;
disable;
export [ policy-names ];
family (inet | inet6 | inet-vpn | inet6-vpn | l2-vpn) {
(any | multicast | unicast) {
prefix-limit {
maximum number;
teardown <percentage> <idle-timeout (forever | minutes)>;
}
rib-group group-name;
}
labeled-unicast {
prefix-limit {
maximum number;
teardown <percentage> <idle-timeout (forever | minutes)>;
}
resolve-vpn;
rib-group group-name;
}
}
graceful-restart {
disable;
restart-time seconds;
stale-routes-time seconds;
}
hold-time seconds;
import [ policy-names ];
include-mp-next-hop;
ipsec-sa ipsec-sa;
keep (all | none);
local-address address;
local-as autonomous-system <private>;
local-preference local-preference;
log-updown;
metric-out (metric | minimum-igp <offset> | igp <offset>);
multihop <ttl-value>;
no-aggregator-id;
no-client-reflect;
out-delay seconds;
passive;
path-selection (cisco-non-deterministic | always-compare-med);
peer-as autonomous-system;
preference preference;
remove-private;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <flag-modifier> <disable>;
}
vpn-apply-export;
group group-name {
advertise-inactive;
allow [network/mask-length];
as-override;
authentication-key key;
cluster cluster-identifier;
damping;
description text-description;
export [ policy-names ];
family (inet | inet6 | inet-vpn | l2-vpn) {
(any | multicast | unicast) {
prefix-limit {
maximum number;
teardown <percentage> <idle-timeout (forever | minutes)>;
}
rib-group group-name;
}
labeled-unicast {
prefix-limit {
maximum number;
teardown <percentage> <idle-timeout (forever | minutes)>;
}
resolve-vpn;
rib-group group-name;
}
}
graceful-restart {
disable;
restart-time seconds;
stale-routes-time seconds;
}
hold-time seconds;
import [ policy-names ];
ipsec-sa ipsec-sa;
keep (all | none);
local-address address;
local-as autonomous-system <private>;
local-preference local-preference;
log-updown;
metric-out (metric | minimum-igp <offset> | igp <offset>);
multihop <ttl-value>;
multipath;
no-aggregator-id;
no-client-reflect;
out-delay seconds;
outbound-route-filtering {
extended-community {
accept;
no-accept;
vrf-filter;
}
}
passive;
peer-as autonomous-system;
preference preference;
protocol protocol;
remove-private;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <flag-modifier> <disable>;
}
type type;
vpn-apply-export;
neighbor address {
advertise-inactive;
as-override;
authentication-key key;
cluster cluster-identifier;
damping;
description text-description;
export [ policy-names ];
family (inet | inet6 | inet-vpn | l2-vpn) {
(any | multicast | unicast) {
prefix-limit {
maximum number;
teardown <percentage> <idle-timeout (forever | time-in-minutes)>;
}
rib-group group-name;
}
labeled-unicast {
prefix-limit {
maximum number;
teardown <percentage> <idle-timeout (forever | time-in-minutes)>;
}
resolve-vpn;
rib-group group-name;
}
}
graceful-restart {
disable;
restart-time seconds;
stale-routes-time seconds;
}
hold-time seconds;
import [ policy-names ];
ipsec-sa ipsec-sa;
keep (all | none);
local-address address;
local-as autonomous-system <private>;
local-interface interface-name;
local-preference local-preference;
log-updown;
metric-out (metric | minimum-igp <offset> | igp <offset>);
multihop <ttl-value>;
multipath;
no-aggregator-id;
no-client-reflect;
out-delay seconds;
outbound-route-filtering {
extended-community {
accept;
no-accept;
vrf-filter;
}
}
passive;
peer-as autonomous-system;
preference preference;
remove-private;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <flag-modifier> <disable>;
}
vpn-apply-export;
}
}
}
IS-IS
isis {
disable;
export [ policy-names ];
ignore-attached-bit;
graceful-restart {
disable;
helper-disable;
restart-duration seconds;
}
label-switched-path name level level metric metric;
level level-number {
authentication-key key;
authentication-type authentication;
external-preference preference;
no-csnp-authentication;
no-hello-authentication;
no-psnp-authentication;
preference preference;
prefix-export-limit number;
wide-metrics-only;
}
lsp-lifetime seconds;
multicast-topology;
no-authentication-check;
no-ipv4-routing;
no-ipv6-routing;
overload <timeout seconds>;
reference-bandwidth reference-bandwidth;
rib-group group--name;
spf-delay milliseconds;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <flag-modifier> <disable>;
}
traffic-engineering {
disable;
shortcuts;
}
interface interface-name {
disable;
checksum;
csnp-interval (seconds | disable);
lsp-interval milliseconds;
mesh-group (value | blocked);
passive;
point-to-point;
level level-number {
disable;
hello-authentication-key key;
hello-authentication-type authentication;
hello-interval seconds;
hold-time seconds;
metric metric;
passive;
priority number;
te-metric metric;
}
}
}
OSPF
ospf {
disable;
export [ policy-names ];
external-preference preference;
graceful-restart {
disable;
helper-disable;
notify-duration seconds;
restart-duration seconds;
}
overload {
<timeout seconds>;
}
preference preference;
reference-bandwidth reference-bandwidth;
rib-group group-name;
spf-delay;
traffic-engineering {
no-topology;
shortcuts {
lsp-metric-into-summary;
}
}
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <flag-modifier> <disable>;
}
area area-id {
area-range network/mask-length <restrict>;
authentication-type authentication;
interface interface-name {
disable;
authentication-key key <key-id identifier>;
dead-interval seconds;
hello-interval seconds;
interface-type type;
metric metric;
neighbor address <eligible>;
passive;
poll-interval seconds;
priority number;
retransmit-interval seconds;
transit-delay seconds;
}
label-switched-path name metric metric;
nssa {
area-range network/mask-length <restrict>;
default-lsa {
default-metric metric;
metric-type type;
type-7;
}
(no-summaries | summaries);
}
peer-interface interface-name {
disable;
dead-interval seconds;
hello-interval seconds;
retransmit-interval seconds;
transit-delay seconds;
}
stub <default-metric metric> <(no-summaries | summaries)>;
virtual-link neighbor-id router-id transit-area area-id {
disable;
authentication-key key <key-id identifier>;
dead-interval seconds;
hello-interval seconds;
retransmit-interval seconds;
transit-delay seconds;
}
}
}
OSPFv3
ospf3 {
disable;
export [ policy-names ];
external-preference preference;
overload {
<timeout seconds>;
}
preference preference;
reference-bandwidth reference-bandwidth;
rib-group group-name;
spf-delay;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <flag-modifier> <disable>;
}
area area-id {
area-range network/mask-length <restrict>;
interface interface-name {
disable;
dead-interval seconds;
hello-interval seconds;
metric metric;
neighbor address <eligible>;
passive;
priority number;
retransmit-interval seconds;
transit-delay seconds;
}
nssa {
area-range network/mask-length <restrict>;
default-lsa {
default-metric metric;
metric-type type;
type-7;
}
(no-summaries | summaries)
}
stub <default-metric metric> <(no-summaries | summaries)>;
virtual-link neighbor-id router-id transit-area area-id {
disable;
dead-interval seconds;
hello-interval seconds;
retransmit-interval seconds;
transit-delay seconds;
}
}
}
RIP
rip {
authentication-key password;
authentication-type type;
(check-zero | no-check-zero);
graceful-restart {
disable;
restart-time seconds;
}
holddown seconds;
import [ policy-names ];
message-size number;
metric-in metric;
receive receive-options;
rib-group group-name;
send send-options;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <flag-modifier> <disable>;
}
group group-name {
export [ policy-names ];
metric-out metric;
preference preference;
neighbor neighbor-name {
authentication-key password;
authentication-type type;
(check-zero | no-check-zero);
import [ policy-names ];
message-size number;
metric-in metric;
receive receive-options;
send send-options;
}
}
}
RIPng
ripng {
graceful-restart {
disable;
restart-time seconds;
}
holddown seconds;
import [ policy-names ];
metric-in metric;
receive <none>;
send <none>;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <flag-modifier> <disable>;
}
group group-name {
export [ policy-names ];
metric-out metric;
preference number;
neighbor neighbor-name {
import [ policy-names ];
metric-in metric;
receive <none>;
send <none>;
}
}
}
Router Advertisement
router-advertisement {
interface interface-name {
current-hop-limit number;
default-lifetime seconds;
(managed-configuration | no-managed-configuration);
max-advertisement-interval seconds;
min-advertisement-interval seconds;
(other-stateful-configuration | no-other-stateful-configuration);
prefix prefix {
(autonomous | no-autonomous);
(on-link | no-on-link);
preferred-lifetime seconds;
valid-lifetime seconds;
}
reachable-time milliseconds;
retransmit-timer milliseconds;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <detail> <disable>;
}
}
}
Router Discovery
router-discovery {
disable;
traceoptions {
file name <replace> <size size> <files number> <no-stamp>
<(world-readable | no-world-readable)>;
flag flag <detail> <disable>;
}
interface interface-name {
min-advertisement-interval seconds;
max-advertisement-interval seconds;
lifetime seconds;
}
address address {
(advertise | ignore);
(broadcast | multicast);
(priority number | ineligible);
}
}