Index

Symbols  A  B  C  D  E  F  G  H  I  M  N  O  P  R  S  T  V

 

Symbols

144–bit CAM entries    
example of IPv6 classifiers in a policy    
supported by CAM classifiers
288–bit CAM entries    
example of IPv6 classifiers in a policy    
supported by CAM classifiers
576–bit CAM entries    
example of IPv6 classifiers in a policy    
supported by CAM classifiers
 

A

access level    
mirror-enable command
packet mirroring
analyzer interfaces    
interface types    12
policies on
atm commands    
atm-cell-mode    12
attachment of IPv6 policies    
to an interface    
with CAM entries greater than 128 bits
audit logging, SNMP secure    12
 

B

bandwidth management
baseline commands    
baseline radius dynamic-request
 

C

CAM blocks    
containing equal-sized CAM entries
support for variable-sized entries    
1
utilization for CAM entries    
in an IPv4 policy, example
in an IPv6 policy, example
CAM device block size    
division to hold CAM entries    
example
CAM entries    
configured on line modules    
calculation of CAM bit size
division into blocks to store policies    
example for GE-2 LMs
number per allocation    
formula for scaling limits on GE-2 LMs
formula for scaling limits on GE-HDE LMs
obtaining length dynamically, three types    
between 128 and 272 bits
between 272 and 336 bits
less than 128 bits
using the optimum size    
for IPv6 policies
CAM hardware classifiers    
three types of CAM entries supported    
on line modules of E Series Broadband Services Routers
variables-sized entries    
for IPv6 policies
CAM resources    
and variable-sized CAM entries    
factors used to determine availability
classifier    
CAM hardware    123
consumption
FPGA hardware    123
hardware    12
line module support    123
policy consumption    12
software    123
classifier control list    
criteria defined
matching IP flags
matching IP fragmentation offset
matching TCP flags
multiple elements in
classifier groups    
classifier-specific statistics accounting
classifier-specific statistics accounting, configuring
creating
classifier-group commands    
aaa count enable    12
classifier-group
classifier-specific statistics accounting    
configuring
color-aware configuration
committed-action command
committed-burst command
conventions    
notice icons
text and syntax
customer support    1
contacting JTAC
 

D

default classifier    
allocation of CAM blocks    
determined by the CAM entry size
consumption of CAM blocks    
same as the size computed for the policy
documentation set    
comments on
 

E

E320 routers    
Ethernet interfaces
exceeded-action command
excess-burst command
exp-mask command
explicit packet coloring
external parent groups    1
monitoring
percentage-based hierarchy
rate-limit profile
 

F

forward command    12
forward interface command
forward next-hop command
FPGA Statistics    
detection of corruption and    
handling of sessions for AAA subscribers
line module redundancy
stateful line module switchover
detection of hardware corruption    12
system operations when    
corruption is detected
FPGA Statistics settings    
detection of corruption
detection of corruption and    
generation of SNMP traps
monitoring
fragment-based statistics collection    
for tunnel interfaces    
managed by the SRC client
setting    
preserved during high availability
fragmentation offsets, filtering
fragments-based statistics collection    
for output policies on tunnel interfaces    
monitoring
 

G

GE-2 line modules    
formula for scaling numbers of    
CAM entries
GE-HDE line modules    
formula for scaling limits    
CAM entries
 

H

hierarchical aggregation nodes
hierarchical policies    
aggregate rate limits
arbitrary interface groups
external parent groups
L2TP
nonvoice traffic
policy parameters
PPP interfaces
Profile configuration
RADIUS configuration
service rate-limit
user rate-limit
VLAN rate limit
hierarchical policing    
configuration
for interface groups
 

I

interface mirroring    
supported modules
IP auxiliary input policy    12
ip commands    
ip classifier-list
ipv6 classifier-list
IP fragmentation    
offset, matching in a policy
IP options, filtering
IP policies    
scalability improvement for    
using optimum CAM entry size
IPv4 classifier    
number of bits consumed    
for CAM entries
IPv6 classification    
144–bit CAM entries    
active classifiers in the example and size of each
example for a policy attachment
288–bit CAM entries    
active classifiers in the example and size of each
example for a policy attachment
576–bit CAM entries    
active classifiers in the example and size of each
example for a policy attachment
number of lookups to the CAM hardware
determination of fields in the classifier    
using policy definition
minimum and maximum entry sizes    
for IPv6 header CAM entries
support for traffic greater than 128 bits    
1
variable-sized CAM entries    
and available CAM resources
maximum policies supported with four classifier per policy
maximum policies supported with one classifier per policy
performance impact
IPv6 classifier     See IPv6 classification    
IPv6 policies    
with four classifiers per policy    
maximum supported with variable-sized CAM entries
with one classifier per policy    
maximum supported with variable-sized CAM entries
IPv6 policy definition    
sum of classification fields in the    
and variable-sized CAM entries
 

M

manuals    
comments on
mark rule    
with rate-limit rule
mark-exp command    12
merged policy naming conventions
merging policies    1
configuration example
error conditions
naming conventions
persistent configuration differences
policy attachment rules
policy attachment sequence
reference counting
resolving conflicts
restrictions
rules for attachment
mirror-enable command    
access level
and TACACS+
Monitoring Policy Management    
monitoring the status of policy resources trap
monitoring the utilization of policy resources for interface attachments
MTU (maximum transmission unit)    
IP    12
multiple forwarding solutions
 

N

notice icons
 

O

one-rate rate-limit profile
overlapping classification    12
 

P

packet coloring, explicit
packet flow monitoring
packet mirroring    
access level
analyzer device
CLI-based    12
configuration conflicts
configuring traps
interface-specific
ip analyzer interface
mediation device
multiple configurations
RADIUS-based
secure audit logging    12
secure local logs
secure logging
secure SNMP traps
securing with TACACS+
SNMP secure traps
system resources
terms
trigger
triggers for CLI-based
user-specific
packet tagging
parent group merge algorithm
peak-burst command
peak-rate command
percent-based rates
platform considerations    
packet mirroring
policies    
analyzer interfaces
using RADIUS to create    
overview
policy attachment rules
policy list    
constructing a
creating or modifying
policy lists    
applying    
overview
policy management    
applications    
packet tagging
bandwidth management
baselining statistics
classifier groups, classifier-specific statistics accounting
classifier groups, creating
classifier resources
committed burst calculation    12
congestion management
creating a one-rate rate-limit profile
creating a two-rate rate-limit profile
explicit packet coloring
filtering fragmentation offsets
filtering IP options
matching IP flags in a CLACL
matching IP fragmentation offset in a CLACL
matching TCP flags in a CLACL
merging policies
modifying a one-rate rate-limit profile
modifying a two-rate rate-limit profile
monitoring packet flow    12
one-rate rate-limit profile
overview
packet logging
packet mirroring
packet tagging    123
policy actions and rate-limit profiles
policy routing
policy rules, creating
QoS classification and marking
RADIUS support
rate limiting traffic flows
rate-limit profile actions
rate-limit profile attributes
rate-limit profile calculations
rate-limit profile defaults    12
resources
security
policy management commands    
aaa count enable    12
policy-resource-exhaustion trap enable
show policy-resources slot
show policy-resources trap
policy management configuration tasks
policy parameter    
considerations
quick configuration
reference-rate
policy rule commands    
forward
forward interface
forward next-hop
policy rules    
creating
precedence
supported commands
preservation of statistics    
for output policies on tunnel interfaces    
as number of fragments
as number of packets
 

R

rate limiting    
aggregate traffic flows
for interfaces
hierarchical
individual traffic flows
rate-limit hierarchies    1
classifier groups
color-aware configuration
rate-limit actions
rate-limit profiles
rate-limit rules
rate-limit profiles    
attributes
burst size
calculations
configuration procedure
creating    12
default values    12
modifying    12
percent-based rates
policy actions
rates
rate-limit rule    
with mark rule
rate-limit-profile one-rate command
rate-limit-profile two-rate command
rate-limiting SRP traffic flows
resolving merge conflicts
 

S

secure audit logging for packet mirroring    12
secure policy-list command
Service Manager    
interface profiles
merging policies
show commands    
show aaa-corrupted-slots
show color-mark-profile
show control-plane policer
show frame-relay subinterface
show gre tunnel
show interfaces
show ipv6 interface
show parent-group    12345
show policy-parameter
show rate-limit-profile
show secure classifier-list
show vlan subinterfaces    12
show enable-frag-stats command
show ip commands    
show ip interface    12
show ip mirror interface
show mirror commands    
show mirror log    12
show mirror rules
show mirror subscribers
show radius commands    
show radius servers
show radius statistics
show secure policy-list command
show snmp commands    
show snmp secure-log
show snmp trap
single-rate rate limit profile
SNMP (Simple Network Management Protocol)    
secure audit logs    12
SNMP traps    1
secure logs
statistics collection    
enabling fragment-based counting    
for output policies on tunnel interfaces
enabling packet-based counting    
for output policies on tunnel interfaces
for output policies on tunnel interfaces    
based on fragments
based on packets
support, technical     See technical support    
 

T

TCP-friendly one-rate rate-limit profile
technical support    
contacting JTAC
text and syntax conventions
traffic-class command
traps, SNMP    
status information
tunnel interfaces    
output policy counters    
using fragments-based collection
using packets-based collection
two-rate rate-limit profile
 

V

variable length IPv6 classifiers    
examples of    
supported CAM entries
variable-sized CAM entries    
144–bit size    
active classifiers in the example policy
creation and attachment of an IPv6 policy, example
size of each classifier in the IPv6 policy example
288–bit size    
active classifiers in the example policy
creation and attachment of an IPv6 policy, example
size of each classifier in the IPv6 policy example
576–bit size    
active classifiers in the example policy
creation and attachment of an IPv6 policy, example
size of each classifier in the IPv6 policy example
factors to determine    
available CAM resources
for IPv6 classification    
supported bit sizes
maximum IPv6 policies supported    
with four classifiers per policy
with one classifier per policy
performance impact    
caused by CAM addressing