Table 10 describes the command modes available in the CLI.
Table 10: Command Mode Overview
 |
Note: Within any configuration mode, the commands that are available to the user include the commands defined for that configuration mode and all commands defined for Global Configuration mode. See Figure 21. For example, from Router Configuration mode, you could use the interface Global Configuration mode command without first explicitly going back to Global Configuration mode. |
There are two Exec modes: User Exec and Privileged Exec.
After you log in to the system, the CLI is in User Exec mode. By default, the commands you can execute from User Exec mode provide only user-level access; however, you should password protect it to prevent unauthorized use. The User Exec commands allow you to perform such functions as:
host1>?
clear Clear system information
default Set a command to its default(s)
dir Display a list of local files
disable Reduce the command privilege level
enable Enable access to privileged commands
erase Erase configuration settings
exit Exit from the current command mode
flash-disk Perform flash disk operations
help Describe the interactive help system
ip Configure IP attributes on an interface
ipv6 Configure IPv6 attributes
l2tp L2TP operations
macro Run a CLI macro
mpls Execute MPLS commands
mtrace Trace the path that packets will traverse from source to
destination for a given group
no Negate a command or set its default(s)
ping Send echo request to remote host
show Display system information
sleep Make the Command Interface pause for a specified duration
terminal Configure the terminal line settings
test Test the outcome of a command
traceroute Trace the path that packets traverse to their destinationPrivileged Exec mode provides privileged-level access and therefore should also be password protected to prevent unauthorized use. Privileged Exec commands allow you to perform such functions as:
If the system administrator has configured the system to have a password, the CLI prompts you to enter that password before you receive access to Privileged Exec mode. The password is case sensitive and appears as asterisks on the screen.
To access Privileged Exec mode:
|
Note: The > character in the command-line prompt changes to the # character. |
host1# ?
baseline Set a baseline for statistics
clear Clear a state
clock Set the system's clock
configure Enter Global Configuration mode
copy Copy files
debug Configure debugging functions
default Set a command to its default(s)
delete Delete a local file
dir Display a list of local files
disable Reduce the command privilege level
disconnect Disconnect remote CLI session
enable Enable access to privileged commands
exit Exit from the current command mode
flash-disk Perform flash disk operations
halt Halt the system in preparation for power down
help Describe the interactive help system
ip Configure IP attributes on an interface
ipv6 Configure IPv6 attributes
l2tp L2TP operations
log Configure logging settings
logout Logout PPP Subscribers
macro Run a CLI macro
more Display contents of a file
mpls Execute MPLS commands
mtrace Trace the path that packets will traverse from source to
destination for a given group
no Negate a command or set its default(s)
ping Send echo request to remote host
pppoe Set PPPoE information
profile-reassign Perform profile reassignment
redundancy Perform a redundancy action
reload Halt and perform a cold restart
rename Rename a local file
send Send a message to specified lines
show Display system information
sleep Make the Command Interface pause for a specified duration
srp Perform SRP operations
synchronize Manually synchronize redundant system controller file system
telnet Access a remote system via telnet
terminal Configure the terminal line settings
test Test the outcome of a command
traceroute Trace the path that packets traverse to their destination
undebug Disable debug logging functions
virtual-router Specify a virtual router
write Write the system's running configuration to a destination
In addition, you can execute a script file (.scr), which is simply a file containing a sequence of CLI commands, through the configure command.
Within Global Configuration mode, you can:
To access Global Configuration mode, you begin in Privileged Exec mode. Type configure terminal and press Enter.
The system is now in Global Configuration mode.
To execute a script file:
|
Note: The filename must end with an .scr extension, and the file must contain a series of valid CLI commands. The file can be a local file on the router or a remote file on a host system. |
For more information, see the section Managing Files in Managing the System .
From this mode, you can restrict or allow the use of domain names, translate an original domain name to a new domain name, or create domain name aliases.
From Global Configuration mode, type the aaa profile command and a profileName, and then press Enter.
host1(config)#aaa profile charlie host1(config-aaa-profile)#? allow Configure the authorization domain name default Set a command to its default(s) deny Configure the authorization domain name do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration translate Configure the translation map for domain name
From this mode, you can configure address family parameters for BGP VPN services or RIP VPN services.
From Global Configuration mode, type the router bgp command to enter Router Configuration mode for BGP. Type either the address-family ipv4 or address-family vpnv4 command, and then press Enter.
host1(config)#router bgp 100 host1(config-router)#address-family ? ipv4 Configure IPv4 address family vpnv4 Configure VPN-IPv4 address family
From Global Configuration mode, type the router rip command to enter Router Configuration mode for RIP. Type the address-family ipv4 command, and then press Enter.
host1(config)#router rip 100 host1(config-router)#address-family ? ipv4 Configure IPv4 address family
In this mode, you can configure individual attributes for an ATM data PVC. These attributes include the service category, encapsulation method, Inverse Address Resolution Protocol (Inverse ARP), and F5 Operation, Administration, and Management (OAM) parameters.
From Global Configuration mode, type the interface command and specify the ATM subinterface identifier to enter Subinterface Configuration mode. From Subinterface Configuration mode, type the pvc command and specify the virtual circuit descriptor (VCD), virtual path identifier (VPI) and virtual circuit identifier (VCI) values (in the format vpi/vci), and then press Enter.
host1(config)#interface atm 3/2.1
host1(config-subif)#pvc 100 0/100
host1(config-subif-atm-vc)#?
cbr Configure the Constant Bit Rate (CBR) service class
class-vc Assign a Virtual Circuit class to the Permanent Virtual
Circuit
default Set a command to its default(s)
do Run an exec mode command (alias command run)
encapsulation Configure the ATM encapsulation
exit Exit from the current command mode
help Describe the interactive help system
inarp Configure the Inverse Address Resolution Protocol (InARP)
protocol
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
oam Configure Operations, Administration, and Management (OAM)
oam-pvc Configure Operations, Administration, and Management (OAM) for
Permanent Virtual Circuit (PVC)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
ubr Configure the Unspecified Bit Rate (UBR) service class
vbr-nrt Configure the Variable Bit Rate Non-Real Time (VBR-nrt)
service class
vbr-rt Configure the Variable Bit Rate Real Time (VBR-rt) service
class
In this mode, you can configure a class of attributes for an ATM data PVC. The VC class can include attributes for the service category, encapsulation method, F5 OAM options, and Inverse ARP. You then apply the set of attributes as a group by assigning the VC class to an individual PVC, to all PVCs created on a specified ATM major interface, to all PVCs created on a specified ATM 1483 subinterface, or to a base profile from which bulk-configured VC ranges are dynamically created.
From Global Configuration mode, type the vc-class atm command followed by an alphanumeric VC class name of up to 32 characters, and press Enter.
host1(config)#vc-class atm premium-subscriber-class
host1(config-vc-class)#?
cbr Configure the Constant Bit Rate (CBR) service class
default Set a command to its default(s)
do Run an exec mode command (alias command run)
encapsulation Configure the ATM encapsulation
exit Exit from the current command mode
help Describe the interactive help system
inarp Configure the Inverse Address Resolution Protocol (InARP)
protocol
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
oam Configure Operations, Administration, and Management (OAM)
oam-pvc Configure Operations, Administration, and Management (OAM) for
Permanent Virtual Circuit (PVC)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
ubr Configure the Unspecified Bit Rate (UBR) service class
vbr-nrt Configure the Variable Bit Rate Non-Real Time (VBR-nrt)
service class
vbr-rt Configure the Variable Bit Rate Real Time (VBR-rt) service
class
In this mode, you can configure the set of rules for a classification group in a policy list that you can attach to an interface.
From Policy List Configuration mode, type the classifier-group command and its attributes, and then press Enter.
host1(config-policy-list)#classifier-group ipCLACL10 precedence 75 host1(config-policy-list-classifier-group)#? color Create a color policy default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode filter Create a filter policy forward Create a forward policy help Describe the interactive help system log Configure logging settings macro Run a CLI macro mark Create a set TOS byte policy next-hop Create a next-hop policy next-interface Create a next-interface policy no Negate a command or set its default(s) rate-limit-profile Create a rate-limit policy run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration suspend Suspend a policy rule traffic-class Create a traffic class policy user-packet-class Create a user packet class policy
In this mode, you can configure translation for a color to a type-dependent mark for TOS or EXP for an IP, IPv6 or MPLS interface.
From Rate Limit Profile Configuration mode, type the color-mark-profile command and specify a profileName, and then press Enter.
host1(config-rate-limit-profile)# mpls color-mark-profile myprofile
host1(config-color-mark-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
green-mark Apply TOS mark to IP packets classified Green by the rate limit
hierarchy
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mask-value Mask for all TOS values applied by the color-mark profile
no Negate a command or set its default(s)
red-mark Apply TOS mark to IP packets classified Red by the rate limit
hierarchy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
yellow-mark Apply TOS mark to IP packets classified Yellow by the rate limit
hierarchy
In this mode, you can configure policing for a specific protocol.
From Global Configuration mode, type the control-plane command and press Enter.
host1(config)#control-plane host1(config-control-plane)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) policer Configure policing run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
You can configure physical interfaces such as a T3 in Controller Configuration mode.
From Global Configuration mode, type the appropriate controller command and its attributes, and then press Enter.
host1(config)#controller t3 9/1 host1(config-controll)#
host1(config)#controller ? e1 Configure a channelized E1 controller e3 Configure a E3 controller sonet Configure a Sonet controller t1 Configure a channelized T1 controller t3 Configure a T3 controller
In this mode, you can configure DHCP local pools. For example, you can specify a DNS or NetBIOS server.
From Global Configuration mode, type the command ip dhcp-local pool and a poolName, and then press Enter.
host1(config)#ip dhcp-local pool charlie
host1(config-dhcp-local)#?
default Set a command to its default(s)
default-router The default-router to use for this pool
dns-server The dns-server to use for this pool
do Run an exec mode command (alias command run)
domain-name The domain name for the pool
exit Exit from the current command mode
grace-period The grace period to be applied to leases
help Describe the interactive help system
lease The lease time for addresses from this pool
link Link to another DHCP Pool
log Configure logging settings
macro Run a CLI macro
netbios-name-server The netbios-name-server to use for this pool
netbios-node-type The netbios-node-type to use for this pool
network The network specified for this pool
no Negate a command or set its default(s)
reserve Reserve an ip address for a specific Mac Address
run Run an exec mode command (alias command do)
server-address The DHCP Server address to send to clients
sleep Make the Command Interface pause for a specified
duration
snmpTrap Enable snmp pool utilization traps
use-release-grace-period Apply the grace period to released leases
warning Configure utilization warningsIn this mode, you can map a user domain name to a virtual router and loopback interface.
From Global Configuration mode, type the aaa domain-map command and the domain name value as found in the client’s login name. Then press Enter.
host1(config)#aaa domain-map charlie76
host1(config-domain-map)#?
address-pool-name Configure the address-pool-name for the domain name
atm Configure ATM parameters
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip-hint Configure the IP hint feature for the domain
local-interface Configure the local interface value for remote clients
log Configure logging settings
loopback Configure the loopback interface to use when RX has an
unnumbered interface to the PPP client
macro Run a CLI macro
no Negate a command or set its default(s)
override-user Configure the username and password values to use instead
of the values from the remote client
padn Configure pppoe active discovery network parameters for
the domain name
router-name Configure the virtual-router for the domain name
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
strip-domain Configure the domain name stripping feature for the domain
tunnel Configure tunnel tag
virtual-router Configure the virtual-router for the domain name
In this mode, you can configure tunnel parameters such as the tunnel’s endpoint.
From Domain-Map Configuration mode, type tunnel and a tunnelNumber, and press Enter.
host1(config-domain-map)#tunnel 17 host1(config-domain-map-tunnel)#? address Configure tunnel endpoint address client-name Configure the client hostname of the tunnel default Set a command to its default(s) exit Exit from the current command mode do Run an exec mode command (alias command run) help Describe the interactive help system hostname Configure the client hostname of the tunnel identification Configure tunnel identification log Configure logging settings macro Run a CLI macro max-sessions Configure maximum sessions for this tunnel medium Configure tunnel medium no Negate a command or set its default(s) password Configure tunnel password preference Configure tunnel preference run Run an exec mode command (alias command do) server-name Configure the remote hostname for the tunnel sleep Make the Command Interface pause for a specified duration source-address Configure tunnel source address type Configure tunnel type
In this mode, you can configure parameters for Denial of Service (DoS) protection groups.
From Global Configuration mode, type the dos-protection-group command and press Enter.
host1(config)#dos-protection-group host1(config-dos-protection)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) priority Specify the priority protocol Specify the protocol run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration use Configure usagehost1(config-dos-protection-group)#?
In this mode, you can configure drop profiles for QoS. Drop profiles control RED dropping behavior.
From Global Configuration mode, type the drop-profile command, and press Enter.
host1(config)#drop profile
host1(config-drop-profile)#?
average-length-exponent Select TAQL coefficient
committed-threshold Specify committed queue thresholds and maximum drop
probability
conformed-threshold Specify conformed queue thresholds and maximum drop
probability
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exceeded-threshold Specify exceeded queue thresholds and maximum drop
probability
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
From this mode, you can name and configure an explicit path within MPLS.
From Global Configuration mode, type mpls explicit-path name and the explicitPathName, and press Enter.
host1(config)#mpls explicit-path name xyz host1(config-expl-path)#? append-after Add an entry after a specified index default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system index Specify the index of the entry to be added or edited list List part or all of the entries in current explicit path log Configure logging settings macro Run a CLI macro next-address Configure an IP address at the last hop of the explicit path no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can configure parameters for the aggregation cache.
From Global Configuration mode, type the ip flow-aggregation cache command and press Enter.
host1(config)#ip flow-aggregation cache host1(config-flow-cache)#? cache Configure Flow Stats cache parameters default Set a command to its default(s) do Run an exec mode command (alias command run) enabled Start flow cache operation exit Exit from the current command mode export Configure Flow-Cache export parameters help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
From Interface Configuration mode, you can enable many system features for each interface you create. Interface Configuration commands allow you to:
From Global Configuration mode, type interface and identify the interface you want to configure and press Enter.
The CLI is now in Interface Configuration mode.
host1(config)#interface ? atm ATM interface fastEthernet IEEE 802.3 fastEthernet interface gigabitEthernet IEEE 802.3 gigabitEthernet interface hssi High Speed Serial interface ip Ip shared interface ipv6 Ipv6 shared interface lag Link Aggregation interface loopback Loopback interface mlframe-relay Multilink frame-relay interface mlppp Multilink PPP interface null Null interface pos Packet over SONET interface serial Serial interface tunnel Tunnel interface
Some Interface Configuration commands can affect general interface parameters, such as bandwidth and clock rate. For interface-specific commands, such as commands for ATM interfaces, see the appropriate chapter in this documentation set.
|
Note: Although it appears in the list of configurable interfaces, you cannot configure any values on a null interface. For information about using the null interface, see JUNOSe IP Services Configuration Guide. |
In this mode, you can specify the information that the system uses in creating IP Network Address Translation (NAT) pools. From Global Configuration mode, type ip nat pool multiplerange prefix-length and press Enter.
host1(config)#ip nat pool multiplerange prefix-length 30 host1(config-ipnat-pool)#? address Configure address ranges default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can specify parameters for data MDTs.
From Global Configuration mode, type ip pim data-mdt, and press Enter:
host1:pe1:pe13(config)#ip pim data-mdt host1:western:eastern(config-ip-pim-data-mdt)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro mdt-data-delay Configure MDT_DATA_DELAY timeout mdt-data-holdown Configure MDT_DATA_HOLDOWN timeout mdt-data-timeout Configure MDT_DATA_TIMEOUT mdt-interval Configure MDT_INTERVAL timer no Negate a command or set its default(s) route-map Configure route-map run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration tunnel Configure tunnel parameters
In this mode, you can specify the information that the system uses in creating IP service profiles.
From Global Configuration mode, type ip service-profile and the service profile name, and press Enter.
host1(config)#ip service-profile radius host1(config-service-profile)#? default Set a command to its default(s) do Run an exec mode command (alias command run) domain Configure a username domain exit Exit from the current command mode help Describe the interactive help system include Configure an attribute to be included in a username log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) password Configure a user password run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration user-name Configure a user name user-prefix Configure a username prefix
In this mode, you can specify the information that the system uses in online certificate requests and during negotiations with its peers.
From Global Configuration mode, type ipsec ca identity, and press Enter.
host1(config)#ipsec ca identity host1(config-ca-identity)#? crl Certificate Revocation List checking default Set a command to its default(s) do Run an exec mode command (alias command run) enrollment Configure enrollment parameters exit Exit from the current command mode help Describe the interactive help system issuer-identifier issuer identifier log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) root Specify root proxy run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified
In this mode, you can specify the information that the system uses in offline certificate requests and during negotiations with its peers.
From Global Configuration mode, type ipsec identity, and press Enter.
host1(config)#ipsec identity host1(config-ipsec-identity)#? common-name Common Name country Country name default Set a command to its default(s) do Run an exec mode command (alias command run) domain-name Domain name exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) organization Organization name sleep Make the Command Interface pause for a specified duration
In this mode, you can create an IKE policy, which is used during IKE phase 1 negotiation.
From the Global Configuration mode, type ipsec ike-policy-rule and the policyNumber, and press Enter.
host1(config)#ipsec ike-policy-rule 10 host1(config-ike-policy)#? aggressive-mode Allows aggressive mode negotiation for the tunnel authentication Configure the authentication method default Set a command to its default(s) do Run an exec mode command (alias command run) encryption Configure the encryption algorithm within an IKE policy exit Exit from the current command mode group Configure the Diffie-Hellman group identifier hash Configure the hash algorithm within an IKE policy help Describe the interactive help system lifetime Configure the time an SA will live before expiration log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can enter the manual key that a peer uses for authentication during the tunnel establishment phase.
From the Global Configuration mode, type ipsec key manual pre-share and the peerIPaddress, and press Enter.
host1(config)#ipsec key manual pre-share 10.10.1.1 host1(config-manual-key)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system key Manually specify a key log Configure logging settings macro Run a CLI macro masked-key Enter a masked key (not for manual entry, show config generates) no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can configure the ISAKMP/IKE public key that a remote peer uses for RSA authentication during the tunnel establishment phase without the need for a digital certificate.
From Global Configuration mode, type ipsec key pubkey-chain rsa and either the IP address or fully qualified domain name of the remote peer, and press Enter.
host1(config)#ipsec key pubkey-chain rsa address 192.168.50.5 host1(config-peer-public-key)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system key-string Enter key string log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can configure an IP Security (IPSec) transport profile, which is used for Layer 2 Tunneling Protocol (L2TP) over IPSec connections.
From the Global Configuration mode, type ipsec transport profile, the profileName, virtual-router vrName, ip address ipAddress, and press Enter.
host1(config)#ipsec transport profile secureL2tp virtual-router default ip address 0.0.0.0 host1(config-ipsec-transport-profile)#? application Configure the application type that is protected by the l2tp default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system lifetime Configure the renegotiation time local Configure local endpoint of the transport connection log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) pfs Configure perfect forward secrecy run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration transform-set Configure the transform set used by ipsec transport profile
In this mode, you can configure a profile of an IPSec tunnel.
From Global Configuration mode, type ipsec tunnel profile and the profileName, and press Enter.
host1(config)#ipsec tunnel profile profile1
host1(config-ipsec-tunnel-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
domain-suffix Configure a domain suffix to be appended to users on
this profile
exit Exit from the current command mode
extended-authentication Configure extended authentication parameters
help Describe the interactive help system
ike Configure IKE characteristics
ip Configure local IP characteristics
lifetime Configure the phase 2 life parameters
local Configure local characteristics
log Configure logging settings
macro Run a CLI macro
max-interfaces Configure the maximum allowed dynamic interface
instantiations
no Negate a command or set its default(s)
peer Configure peer characteristics
pfs Configure the phase 2 perfect forward secrecy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
transform Configure the phase 2 transforms allowed on this
IPSEC tunnel profile
tunnel Configure tunnel parameters
In this mode, you can specify parameters for GRE or DVMRP dynamic tunnels.
From Global Configuration mode, type gre destination profile or dvmrp destination profile and the destination profile name, and press Enter.
host1(config)#gre destination profile global host1(config-dest-profile)#? default Set a command to its default(s) do Run an exec mode command (alias command run) enable Enable a tunnel parameter exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) profile Assign a profile run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration tunnel Configure a tunnel parameter
host1(config)#dvmrp destination profile global host1(config-dest-profile)#? default Set a command to its default(s) do Run an exec mode command (alias command run) enable Enable a tunnel parameter exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) profile Assign a profile run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration tunnel Configure a tunnel parameter
In this mode, you can specify the IPv6 local address pool from which prefixes are allocated to the requesting router in networks that use DHCPv6. From Global Configuration mode, type ipv6 local pool poolName and press Enter.
host1(config)#ipv6 local pool dhcpv6pd_pool host1(config-v6–locall)#? default Set a command to its default(s) dns-domain-search Specify a search domain dns-server Specify the IPv6 DNS server address do Run an exec mode command (alias command run) exclude-prefix Specify prefix(es) to be excluded from allocation exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) prefix Specify the IPv6 prefix range run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
|
Note: You must enable the IPv6 local address pool feature to be able to configure IPv6 local address pools. |
In this mode, you can specify a member subinterface for a Martini layer 2 circuit that is associated with a load-balancing group.
From Global Configuration mode, type mpls l2transport load-balancing-group, specify a group number and a Martini circuit, and press Enter.
host1(config)#mpls l2transport load-balancing-group 100 mpls-relay 10.1.1.1 30 host1(config-l2transport-load-balancing-circuit)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro member Configure members of a l2transport load-balancing circuit no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can create the destination profile that defines the location of an L2TP Access Concentrator (LAC) and define the attributes used when an L2TP Network Server (LNS) communicates with an LAC. The destination is necessary to enable an LAC to connect to the LNS.
From Global Configuration mode, type l2tp destination profile, the profileName, an ipAddress, and press Enter.
host1(config)#l2tp destination profile augusta ip address 123.45.76.16 host1(config-l2tp-dest-profile)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) remote Configure L2TP remote parameters run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can set and modify L2TP host profile attributes, such as the proxy Link Control Protocol (LCP), the local hostname, the local IP address, or the interface profile.
From Global Configuration mode, enter L2TP Destination Profile mode (see above), and type remote host and a hostName, and press Enter.
host1(config-l2tp-dest-profile)#remote host george host1(config-l2tp-dest-profile-host)#? default Set a command to its default(s) disable Disable L2TP parameter for remote host do Run an exec mode command (alias command run) enable Enable L2TP parameter for remote host exit Exit from the current command mode help Describe the interactive help system local Configure L2TP local parameters for remote host log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) profile Assign a profile for remote host run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration tunnel Configure L2TP tunnel parameters for remote host
In this mode, you can create an L2TP tunnel switch profile, which configures the L2TP tunnel switching behavior for the interfaces to which this profile is assigned. Issue the avp command from this mode to define the L2TP tunnel switching behavior for a specified L2TP attribute-value pair (AVP) type.
From Global Configuration mode, type the l2tp switch-profile command followed by an alphanumeric profile name of up to 64 characters, and press Enter.
host1(config)#l2tp switch-profile concord host1(config-l2tp-tunnel-switch-profile)#? avp Configure AVP behavior default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can define session timeout values and access the L2C Neighbor Configuration mode to specify the L2C neighbor.
From Global Configuration mode, type l2C and press Enter.
host1(config)#l2c host1(config-l2c)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro neighbor Configure l2c neighbor parameters no Negate a command or set its default(s) run Run an exec mode command (alias command do) session-timeout Configure the l2c time-out attribute sleep Make the Command Interface pause for a specified duration
In this mode, you can specify a neighbor ID and the maximum number of branches that the neighbor can have.
From Global Configuration mode, type neighbor and press Enter.
host1(config-l2c)#neighbor host1(config-l2c-neighbor)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system id Configure neighbor-id associated with neighbor log Configure logging settings macro Run a CLI macro max-branches Configure max number of branches for neighbor no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can create and configure MPLS Label Distribution Protocol (LDP) profile parameters.
From Global Configuation mode, type mpls ldp interface profile and the profileName, and press Enter.
host1(config)#mpls ldp interface profile shell host1(config-ldp)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode hello Configure hello parameters help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can modify the operation of a virtual terminal (vty) line.
From Global Configuration mode, type the line vty command and either the lineNumber or the rangeOfLineNumbers you want to configure, and press Enter.
|
Note: The factory default is 5 vty lines. However, you can increase the number of vty lines available by typing the start number and end number of the vty line range. Once you execute the line vty command, you will have access to line numbers up to the ending line number. |
host1(config)#line vty 0 29 host1(config-line)#? access-class Restrict or permit telnet access based on an access list data-character-bits Set the number of bits per character used by the display default Set a command to its default(s) do Run an exec mode command (alias command run) exec-banner Enable the exec banner exec-timeout Set the inactivity timeout exit Exit from the current command mode help Describe the interactive help system log Configure logging settings login Require the use of passwords for vty logins macro Run a CLI macro motd-banner Enable the message of the day banner no Negate a command or set its default(s) password Configure the password for line access run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration timeout Specify the login timeout value for the selected line(s)
|
Note: The privilege command is available in Line Configuration mode when the user is logged in at privilege level 15. For more information, see Privileged-Level Access and CLI Command Privileges . |
In this mode, you can configure preshared IKE keys for IPSec transport profiles.
From the IPSec Transport Profile Configuration mode, type local ip address and the ipAddress, and press Enter.
host1(config-ipsec-transport-profile)#local ip address 10.10.1.1
host1(config-ipsec-transport-profile-local)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
pre-share Specify pre-shared group key based on local ip address
pre-share-masked A pre-encrypted key, generated by show config rather than
interactive
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
In this mode, you can configure parameters for user entries in local user databases.
From the Global Configuration mode, type either aaa local username and the userName and databaseName or aaa local database and the databaseName. Then press Enter.
host1(config)#aaa local username curt38 database westLocal12
host1(config-local-user)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip-address Specify an IP address for the user
ip-address-pool Specify an IP address pool for the user
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
operational-virtual-router Specify an operational virtual router for the
user
password Configure the password
run Run an exec mode command (alias command do)
secret Configure the secret
sleep Make the Command Interface pause for a specified
duration
support Enter Support mode
In this mode, you can specify Frame Relay End-to-End fragmentation and reassembly for a map class. Optionally, you can specify the maximum payload size of a fragment or specify fragmentation only or reassembly only.
From Global Configuration mode, type the map-class frame-relay command and the mapClassName you want to configure, and press Enter.
host1(config)#map-class frame-relay testmapclass host1(config-map-class)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode frame-relay Configure frame relay parameters help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can configure map list parameters. In Map List Configuration mode, commands such as map-list and ip atm-vc are used to configure ATM NBMA interfaces.
From Global Configuration mode, type map-list and a mapListName, and press Enter.
host1(config)#map-list mjt3330 host1(config-map-list)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system ip Add IP address to the map log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can configure a parent group in a hierarchy.
From Global Configuration mode, type the parent-group command and specify a parentGroupName, and press Enter.
host1(config)#parent-group group1 host1(config-parent-group)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro next-parent Specify the next parent group to call in hierarchy no Negate a command or set its default(s) rate-limit-profile Specify a hierarchical rate limit profile run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified
In this mode, you can configure a policy list—that is, a set of rules—that you can attach to an interface. You can modify a policy list and update it wherever the policy list is used in the configuration.
To create a policy list, from Global Configuration mode type policy-list command preceded by the type of policy and press Enter. For example,
host1(config)#l2tp policy-list routeL2tp100
|
Note: If you do not include the type of policy, the system creates an IP policy list. |
host1(config)#ip policy-list routeForABBCCorp
host1(config-policy-list)#?
classifier-group Specify the classifier list
color Create a color policy
default Set a command to its default(s)
do Run an exec mode command
exit Exit from the current command mode
filter Create a filter policy
forward Create a forward policy
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mark Create a set TOS byte policy
next-hop Create a next-hop policy
next-interface Create a next-interface policy
no Negate a command or set its default(s)
rate-limit-profile Create a rate-limit policy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
suspend Suspend a policy rule
traffic-class Create a traffic class policy
traffic-shape-profile Create a traffic-shape policy
user-packet-class Create a user packet class policy In this mode, you can configure a parent group in a hierarchy.
From Policy List Configuration Mode, type the parent-group command and specify a parentGroupName, and press Enter.
host1(config)#policy-list grouppol1 host1(config-policy-list)#parent-group group1 host1(config-policy-list-parent-group)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) rate-limit-profile Specify the hierarchical rate limit profile run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified
In this mode, you can configure a policy parameter.
From Global Configuration mode, type the policy-parameter command and specify a policyParameterType, the hierarchical keyword, and press Enter.
host1(config)#policy-parameter param1 hierarchical host1(config-policy-parameter)#? aggregation-node Configure the aggregation node value default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified time
In this mode, you can configure entries for a PPPoE service name table. PPPoE clients use these entries to request that an access concentrator (AC), such as an E Series router, support certain services. Issue the service command from this mode to configure a specific service name entry, or to specify that the AC should ignore (drop), rather than respond to (terminate, the default action), a PPPoE Active Discovery Initiation (PADI) request from a client containing the empty service name tag.
From Global Configuration mode, type the pppoe-service-name-table command followed by an alphanumeric table name of up to 32 characters, and press Enter.
host1(config)#pppoe-service-name-table serviceTable1 host1(config-pppoe-service-name-table)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) service Configure service-name table entries sleep Make the Command Interface pause for a specified duration
In this mode, you can configure a profile to subsequently configure dynamic IP interfaces.
From Global Configuration mode, type the profile command followed by a profile name of up to 80 characters, and press Enter.
host1(config)#profile germany78 host1(config-profile)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system ip Configure IP characteristics l2tp Configure L2TP characteristics log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) ppp Configure PPP parameters pppoe Pppoe information run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can can configure QoS interface sets.
From Global Configuration mode, type the qos-interface-set command followed by an interfaceSetName, and press Enter.
host1(config)#qos-interface-set video
host1(config-interface-set)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
member-interface-type Define the member interface type of the interface set
no Negate a command or set its default(s)
qos-interface-parent Select a QoS interface super set as the parent of this
interface.
qos-parameter Instantiate a QoS parameter for this interface
qos-profile Attach/Detach a qos-profile
restricted Define restricted interface
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration In this mode, you can configure QoS interface supersets.
From Global Configuration mode, type the qos-interface-superset command followed by an interfaceSupersetName, and press Enter.
host1(config)#qos-interface-superset voice
host1(config-interface-set)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
qos-interface-parent Define parent of the interface set
qos-parameter Instantiate a QoS parameter for this interface
qos-profile Attach/Detach a qos-profile
restricted Define restricted interface
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration In this mode, you can configure QoS parameter definitions.
From Global Configuration mode, type the qos-parameter-define command followed by a QosParameterDefinitionName, and press Enter.
host1(config)#qos-parameter-define vpSharedShaper1
host1(config-qos-parameter-define)#?
controlled-interface-type Configure the valid interface types controlled by
this parameter
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
instance-interface-type Configure the interface types upon which
parameters can be instantiated
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
range Set the valid range of a QoS parameter
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
subscriber-interface-type Configure interface types representing subscriber
interfaces
In this mode, you can specify queue profiles and scheduler profiles in combination with interface types.
From Global Configuration mode, type the qos-profile command followed by a QosProfileName, and press Enter.
host1(config)#qos-profile testabc host1(config-qos-profile)#? atm ATM interface atm-vc ATM-VC interface bridge Bridge interface default Set a command to its default(s) do Run an exec mode command (alias command run) ethernet Ethernet interface exit Exit from the current command mode fr-vc Frame Relay subinterface help Describe the interactive help system ip IP interface ip-tunnel IP FROM-tunnel interface l2tp-tunnel L2tp FROM-tunnel interface log Configure logging settings lsp Lsp (MPLS) interface macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) serial Serial interface server-port Server Port interface sleep Make the Command Interface pause for a specified duration svlan Stacked VLAN subinterface vlan VLAN subinterface
In this mode, you can configure variables within the simple shared shaper algorithm to control the minimum dynamic rate for all simple shared shapers on the router.
From Global Configuration mode, type the qos-shared-shaper-control command and press Enter.
host1(config)#qos-shared-shaper-control
host1(config-qos-shared-shaper-control)#?
convergence-factor Configure how quickly the simple shared shaper
converges to a calculated rate
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
maximum-voql Configure the simple shared shaper's maximum
virtual output queue length
minimum-dynamic-rate-percent Configure the minimum dynamic rate for a simple
shared shaper as a percentage of the
shared-shaping-rate
no Negate a command or set its default(s)
reaction-factor Configure how the simple shared shaper reacts
to changes in measured rate
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a
specified duration
In this mode, you can configure queue profiles and various queue profile parameters, such as constraints on queue lengths or queue buffer weights.
From Global Configuration mode, type the queue-profile command followed by a queueProfileName, and press Enter.
host1(config)#queue-profile testabcd1234 host1(config-queue)#? buffer-weight Set drop threshold in proportion to this weight committed-length Set min and max constraints for committed threshold conformed-fraction Set conformed threshold as a percentage of committed conformed-length Set min and max constraints for conformed threshold default Set a command to its default(s) do Run an exec mode command (alias command run) exceeded-fraction Set exceeded threshold as a percentage of committed exceeded-length Set min and max constraints for exceeded threshold exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can configure various parameters of your RADIUS authentication, accounting, and dynamic-request servers.
From Global Configuration mode, type either the radius authentication server, radius accounting server, or radius dynamic-request server command with the server ipAddress, and press Enter.
host1(config)#radius authentication server 1.2.1.3
host1(config-radius)#?
deadtime Configure the amount of time a timed-out server is dropped for usage
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
key Configure the secret used in RADIUS client to server exchange
log Configure logging settings
macro Run a CLI macro
max-sessions Configure the number of outstanding requests allowed to the server
no Negate a command or set its default(s)
retransmit Configure the number of times to retransmit RADIUS request
before failing
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
timeout Configure the number of seconds to wait for a RADIUS response
before retransmitting
udp-port Configure the RADIUS server's UDP port
In this mode, you can configure various parameters of your RADIUS relay authentication and accounting servers.
From Global Configuration mode, type either the radius relay authentication server or radius relay accounting server command, and press Enter.
host1(config)#radius authentication server radius authentication serverhost1(config-radius-relay)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system key Configure the secret used in RADIUS client to relay server exchange log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration udp-port Configure the RADIUS relay server's udp port
In this mode, you can set parameters for an IP or L2TP rate-limit profile, which is a set of bandwidth attributes and associated actions that become part of a policy list. The policy list is then applied to the ingress or egress of an interface.
To create a hierarchical rate-limit-profile for an IP interface, from Global Configuration mode type rate-limit-profile and a profileName, and add the keyword hierarchical, and press Enter.
To create an IP rate-limit profile, from Global Configuration mode type ip rate-limit-profile and a profileName, and press Enter.
To create an L2TP rate limit profile, from Global Configuration mode type l2tp rate-limit-profile and a profileName, and press Enter.
|
Note: If you do not include either the ip or l2tp keywords, the system creates an IP rate limit profile. |
host1(config)#ip rate-limit-profile fm78930 host1(config-rate-limit-profile)#? committed-action Set the committed access rate action committed-burst Set the committed access rate burst size in Bytes committed-rate Set the committed access rate value in bits per second conformed-action Set the conformed access rate action default Set a command to its default(s) do Run an exec mode command (alias command run) exceeded-action Set the exceeded action exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro mask-val Set mask to be applied with mark values no Negate a command or set its default(s) peak-burst Set the peak burst size in Bytes peak-rate Set the peak access rate in bits per second run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can activate high availability (SRP switchover) by issuing the mode high-availability command.
From Global Configuration mode, type the redundancy command and press Enter.
host1(config-router)#redundancy host1(config-redundancy)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro mode Configure redundancy mode no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can configure remote neighbor parameters for Routing Information Protocol (RIP), Protocol Independent Multicast (PIM), and Open Shortest Path First (OSPF).
From Global Configuration mode, type either router rip, router pim, or router ospf and the processID. Press Enter. You are now in Router Configuration mode.
From Router Configuration mode, type the remote-neighbor command and the appropriate attributes, and press Enter.
host1(config-router)#remote-neighbor 10.13.5.61
host1(config-router-rn)#?
authentication Configure authentication
default Set a command to its default(s)
distribute-list Specify an access list to be a distribute list
do Run an exec mode command (alias command run)
exit Exit from the current command mode
exit-remote-neighbor Exit the remote-neighbor configuration mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
receive Set reception characteristics
route-map Specify a route map to apply to outgoing routes
run Run an exec mode command (alias command do)
send Set transmit characteristics
sleep Make the Command Interface pause for a specified
duration
split-horizon Enable Split-horizon
time-to-live Configure ttl used to send to this neighbor
update-source Source address to be used for transmitIn this mode, you can create and modify route maps.
From Global Configuration mode, type the route-map command and the appropriate routeMapNumber, and press Enter.
host1(config)#route-map unis889 host1(config-route-map)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro match Identify this entry as requiring an attribute match match-set Identify this entry to match and set attributes no Negate a command or set its default(s) run Run an exec mode command (alias command do) set Configure this entry to set attributes sleep Make the Command Interface pause for a specified duration
In this mode, you can configure a routing protocol using router commands.
From Global Configuration mode, type the router command and the appropriate router attributes, and press Enter.
host1(config)#router bgp 2378
host1(config-router)#?
address-family Enter address family configuration mode
aggregate-address Create an aggregate entry in BGP routing table
auto-summary Automatic summarization of redistributed routes
to their natural network masks
bgp Configure BGP
default Set a command to its default(s)
default-fields Set default fields for show commands
default-information Configure the distribution of default routing
information
disable-dynamic-redistribute disable dynamic importing of routing
information with the latest policy
distance Configure administrative distances for routes
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip Configure the type of route to be contributed
by this BGP address family
limits Configure limits on internal BGP tables
log Configure logging settings
macro Run a CLI macro
maximum-paths Configure the maximum number of equal-cost paths
neighbor Specify neighbor properties
network Identify a network for BGP to announce
no Negate a command or set its defaults
overload Configure BGP behaviour when reaching overload
state (no more resources available)
redistribute Configure the redistribution of routing
information from another protocol
rib-out Configure rib-out storage for all BGP peers
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a
specified duration
synchronization Enable synchronization with the IGP
table-map Specify a table map to map external entry
attributes into routing table
timers Configure the keep-alive interval and the hold-time
In this mode, you can create and configure MPLS Resource Reservation Protocol (RSVP) parameters.
From Global Configuration mode, type mpls rsvp interface profile and the profileName, and press Enter.
host1(config)#mpls rsvp interface profile sprint
host1(config-rsvp)#?
cleanup-timeout-factor Configure the timeout factor
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
refresh-period Configure refresh period
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
In this mode, you can configure Response Time Reporter (RTR) parameters. The RTR feature allows you to monitor your network’s performance and its resources by measuring response times and the availability of your network devices.
From Global Configuration mode, type rtr and the mapNumber, and press Enter.
host1(config)#rtr 784078348 host1(config-rtr)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode frequency Specify the frequency interval help Describe the interactive help system hops-of-statistics-kept Specify the hops capture log Configure logging settings macro Run a CLI macro max-response-failure Specify the maximum number of consecutive failures no Negate a command or set its default(s) operations-per-hop Specify a number of operations per hop owner Specify the owner of entry request-data-size Specify the request payload size run Run an exec mode command (alias command do) samples-of-history-kept Specify the maximum history samples sleep Make the Command Interface pause for a specified duration tag Specify the user defined tag timeout Specify the operation timeout tos Specify a value for the ToS byte type Specify the type of the entry
In this mode, you can configure a scheduler profile. You can then set the shaping rate value, enable the strict-priority scheduling for the scheduler node, or set the weighted-round-robin (WRR) value of the scheduler node or queue.
From Global Configuration mode, type scheduler-profile and the scheduleProfileName that you want to create or configure, and press Enter.
host1(config)#scheduler-profile A990 host1(config-scheduler-profile)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) shaping-rate Shape the node or queue to the specified rate sleep Make the Command Interface pause for a specified duration strict-priority Dequeue strict priority packets ahead of other packets weight Set the relative weight of the node or queue
In this mode, you can set and modify Service Manager service session profile attributes, such as time, volume, and statistics.
From Global Configuration mode, type the service-management service-session-profile command and the profileName, and then press Enter.
host1(confi)#service-management service-session-profile vodISP1 host1(config-service-session-profile)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration statistics Configure statistics time Configure time volume Configure volume
In this mode, you can configure certain SNMP triggers for events, what occurs when an event is triggered, resource limits for triggers, and some trap notification options.
From Global Configuration mode, type the snmp-server management-event command and then press Enter.
host1(config)#snmp-server management-event host1(config-mgmtevent)#? default Set a command to its default(s) do Run an exec mode command (alias command run) event Specify what happens when an event is triggered exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) resource Specify the resource limits run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration trigger Specify the conditions that lead to events
In this mode, you can configure a statistics profile. You can then set the rate period during which statistics are gathered, enable statistics gathering, and enable the counting of drop and forwarding events.
From Global Configuration mode, type statistics-profile and the statisticsProfileName that you want to create or configure, and press Enter.
host1(config)#statistics-profile statpro-1
host1(config-statistics-profile)#?
committed-drop-threshold Set threshold for logging a committed-drop event
conformed-drop-threshold Set threshold for logging a conformed-drop event
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exceeded-drop-threshold Set threshold for logging an exceeded-drop event
exit Exit from the current command mode
forwarding-rate-threshold Set threshold for logging a forwarding-rate event
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
rate-period Set the time period for calculating queue rates
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
In this mode, you can configure one or more virtual interfaces, called subinterfaces, on a single physical interface. The system supports this feature with ATM and Frame Relay.
Both ATM and Frame Relay provide permanent virtual circuits (PVCs) that can be grouped under separate subinterfaces configured on a single physical interface. Subinterfaces allow multiple encapsulations for a protocol on a single interface.
From Interface Configuration mode, indicate a subinterface by typing the interface command and an interfaceSpecifier in slot/port.subinterface format, and then press Enter. For example:
In this mode, you can configure a policy (a set of forwarding and filtering rules) that defines how a subscriber (client) bridge group interface should handle various packet types. After you define the policy, use the bridge subscriber-policy command (from Global Configuration mode) to associate the policy with a bridge group interface.
From Global Configuration mode, type the subscriber-policy command followed by an alphanumeric policy name of any character length, and press Enter.
host1(config)#subscriber-policy client1
host1(config-policy)#?
arp Modify arp policy
broadcast Modify broadcast policy
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip Modify ip policy
log Configure logging settings
macro Run a CLI macro
mpls Modify mpls policy
multicast Modify multicast policy
no Negate a command or set its default(s)
pppoe Modify PPPoE policy
relearn Modify relearn policy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
unicast Modify user-to-user (Unicast) policy
unknown-destination Modify unknown destination policy
unknown-protocol Modify unknown protocol policyIn this mode, you can create a traffic class and configure the level of service to packets assigned to the traffic class.
From Global Configuration mode, type the traffic-class command followed by a trafficClassName, and then press Enter.
host1(config)#traffic-class test123
host1(config-traffic-class)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
fabric-strict-priority Allow packets in this class to be dequeued out of the
fabric ahead of other traffic classes
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
In this mode, you can create and configure traffic-class groups, which can contain multiple traffic classes.
From Global Configuration mode, type the traffic-class-group command and a trafficClassGroupName, and press Enter.
host1(config)#traffic-class-group trafclasnameabcd host1(config-traffic-class-group)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration traffic-class Set the traffic class belong to this group
In this mode, you can define up to 31 tunnels for a tunnel group.
From Global Configuration mode, type aaa tunnel-group and the groupName, and press Enter.
host1(config)#aaa tunnel-group storm host1(config-tunnel-group)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration tunnel Configure tunnel tag
In this mode, you can configure attributes for a tunnel group tunnel.
From Tunnel Group Configuration mode, type tunnel and the tag number (in the range 1–31) for the tunnel, and press Enter.
host1(config-tunnel-group)#tunnel 1 host1(config-tunnel-group-tunnel)#? address Configure tunnel endpoint address client-name Configure the client hostname of the tunnel default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system identification Configure tunnel identification log Configure logging settings macro Run a CLI macro max-sessions Configure maximum sessions for this tunnel medium Configure tunnel medium no Negate a command or set its default(s) password Configure tunnel password preference Configure tunnel preference receive-window Configure the receive window size for this tunnel router-name Configure the virtual-router for the domain name run Run an exec mode command (alias command do) server-name Configure the remote hostname for the tunnel sleep Make the Command Interface pause for a specified duration source-address Configure tunnel source address type Configure tunnel type
In this mode, you can create and configure MPLS tunnel profiles.
From Global Configuration mode, type mpls tunnels profile and the profileName, and press Enter.
host1(config)#mpls tunnels profile storm host1(config-tunnelprofile)#? default Set a command to its default(s) do Run an exec mode command (alias command run) exit Exit from the current command mode help Describe the interactive help system log Configure logging settings macro Run a CLI macro no Negate a command or set its default(s) run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration tunnel Configure tunnel interface parameters
In this mode, you can configure (provision) the maximum number of tunnel-service interfaces to be used on a dynamic tunnel-server port.
From Global Configuration mode, type tunnel-server and the slot number and port number of the dynamic tunnel-server port, and press Enter.
host1(config)#tunnel-server 2/2
host1(config-tunnel-server)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
max-interfaces Configure maximum number of tunnel-server interfaces for
dynamic server port
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified durationIn this mode, you can create and configure VRF parameters for BGP/MPLS VPNs.
From Global Configuration mode, type ip vrf and the vrfName, and press Enter. Confirm the new VRF by pressing Enter.
host1(config)#ip vrf yankee Proceed with new vrf creation? [confirm] host1(config-vrf)#? default Set a command to its default(s) description Configure VRF specific description do Run an exec mode command (alias command run) exit Exit from the current command mode export Specify VRF export characteristics help Describe the interactive help system import Specify VRF import characteristics ip Configure IP characteristics log Configure logging settings macro Run a CLI macro maximum Specify a maximum limit no Negate a command or set its default(s) rd Specify route distinguisher route-target Specify VPN extended community Target run Run an exec mode command (alias command do) sleep Make the Command Interface pause for a specified duration
In this mode, you can add up to four virtual routers to the virtual router group. The accounting servers of the virtual routers in the group can receive AAA broadcast accounting records.
From Global Configuation mode, type aaa accounting vr-group and the vrGroupName, and press Enter.
host1(config)#aaa accounting vr-group westVrGroup38
host1(config-vr-group)#?
aaa Configure authentication, authorization, and accounting
characteristics
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
support Enter Support mode