[Contents] [Prev] [Next] [Index] [Report an Error]

[edit protocols] Hierarchy Level

The following statements can also be included at the [edit logical-systems logical-system-name] hierarchy level.



protocols {
}

BGP




bgp {

accept-remote-nexthop;

advertise-external <conditional>;

advertise-inactive;
(advertise-peer-as | noadvertise-peer-as)-;

authentication-algorithm algorithm;

authentication-key key;

authentication-key-chain key-chain;

cluster cluster-identifier;

damping;

description text-description;

disable;

export [ policy-names ];



family {


(iso-vpn | inet | inet6 | inet-vpn | inet6-vpn | l2-vpn)
{


(any | multicast | unicast | signaling) {



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}



rib-group group-name;
}





labeled-unicast {



aggregate-label {
community community-name;
}





explicit-null {
connected-only;
}





prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}



resolve-vpn;

rib inet.3;

rib-group group-name;
}


}





route-target {
advertise-default;
external-paths number;



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}


}




signaling {



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}


}


}





graceful-restart {

disable;
restart-time seconds;
stale-routes-time seconds;
}



hold-time seconds;

import [ policy-names ];

include-mp-next-hop;

ipsec-sa ipsec-sa;

keep (all | none);

local-address address;

local-as autonomous-system <private>;

local-preference local-preference;

log-updown;

metric-out (metric | minimum-igp <offset> | igp <offset>);



multihop {
<ttl-value>;
no-nexthop-change;
}



no-aggregator-id;

no-client-reflect;

out-delay seconds;

passive;



path-selection {
(cisco-non-deterministic | always-compare-med | external-router-id);


med-plus-igp {
igp-multiplier number;
med-multiplier number;
}


}



peer-as autonomous-system;

preference preference;

remove-private;
tcp-mss segment-size;



traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}



vpn-apply-export;



group group-name {

accept-remote-nexthop;

advertise-external <conditional>;

advertise-inactive;

advertise-peer-as;
[ network/mask-length ];

as-override;

authentication-algorithm algorithm;

authentication-key key;

authentication-key-chain key-chain;


bfd-liveness-detection {


detection-time {
threshold milliseconds;
}


holddown-interval milliseconds;
minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
no-adaptation;


transmit-interval {
threshold milliseconds;
minimum-interval milliseconds;
}


version (1 | automatic);
}



cluster cluster-identifier;

damping;

description text-description;

export [ policy-names ];



family {


(iso-vpn | inet | inet6 | inet-vpn | inet6-vpn | l2-vpn)
{


(any | multicast | unicast | signaling) {



explicit-null {
connected-only;
}





prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}



rib-group group-name;
}





flow {

no-validate policy-name;
}





labeled-unicast {



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}



resolve-vpn;

rib inet.3;

rib-group group-name;
}


}





route-target {
advertise-default;
external-paths number;



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}


}




signaling {



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}


}


}





graceful-restart {

disable;
restart-time seconds;
stale-routes-time seconds;
}



hold-time seconds;

import [ policy-names ];

ipsec-sa ipsec-sa;

keep (all | none);

local-address address;

local-as autonomous-system <private>;

local-preference local-preference;

log-updown;

metric-out (metric | minimum-igp <offset> | igp <offset>);

mtu-discovery;

multihop <ttl-value>;



multipath {
multiple-as;
}



no-advertise-peer-as;

no-aggregator-id;

no-client-reflect;

out-delay seconds;

passive;

peer-as autonomous-system;

preference preference;

remove-private;
tcp-mss segment-size;



traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}



type type;

vpn-apply-export;



neighbor address {

accept-remote-nexthop;

advertise-external <conditional>;

advertise-inactive;

advertise-peer-as;

as-override;

authentication-algorithm algorithm;

authentication-key key;

authentication-key-chain key-chain;


bfd-liveness-detection {


detection-time {
threshold milliseconds;
}


minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
no-adaptation;


transmit-interval {
threshold milliseconds;
minimum-interval milliseconds;
}


version (1 | automatic);
}



cluster cluster-identifier;

damping;

description text-description;

export [ policy-names ];



family {


(iso-vpn | inet | inet6 | inet-vpn | inet6-vpn | l2-vpn)
{


(any | multicast | unicast | signaling) {



explicit-null {
connected-only;
}





prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}



rib-group group-name;
}





flow {

no-validate policy-name;
}





labeled-unicast {



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}



resolve-vpn;

rib inet.3;

rib-group group-name;
}


}





route-target {
advertise-default;
external-paths number;



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}


}




signaling {



prefix-limit {
maximum number;
teardown <percentage> <idle-timeout
(forever | minutes)>;
}


}


}





graceful-restart {

disable;
restart-time seconds;
stale-routes-time seconds;
}



hold-time seconds;

import [ policy-names ];

ipsec-sa ipsec-sa;

keep (all | none);

local-address address;

local-as autonomous-system <private>;

local-interface interface-name;

local-preference local-preference;

log-updown;

metric-out (metric | minimum-igp <offset> | igp <offset>);

mtu-discovery;

multihop <ttl-value>;



multipath {
multiple-as;
}



no-advertise-peer-as;

no-aggregator-id;

no-client-reflect;

out-delay seconds;

passive;

peer-as autonomous-system;

preference preference;

remove-private;
tcp-mss segment-size;



traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}



vpn-apply-export;
}


}


}

ES-IS




esis {

disable;



graceful-restart {

disable;
restart-duration seconds;
}



preference preference;



interface (interface-name | all) {

disable;

hello-interval seconds;

end-system-configuration-timer seconds;
}





traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}


}

IS-IS




isis {

clns-routing;

disable;

export [ policy-names ];

ignore-attached-bit;



graceful-restart {

disable;
helper-disable;
restart-duration seconds;
}



label-switched-path name level level metric metric;



level level-number {

authentication-key key;

authentication-type authentication;

external-preference preference;

ipv6-multicast-metric number;

no-csnp-authentication;

no-hello-authentication;

no-psnp-authentication;

preference preference;

prefix-export-limit number;

wide-metrics-only;
}



loose-authentication-check;

lsp-lifetime seconds;

max-areas;

no-adjacency-holddown;

no-authentication-check;

no-ipv4-routing;

no-ipv6-routing;



overload {
advertise-high-metrics;
timeout seconds;
}



reference-bandwidth reference-bandwidth;



rib-group {
inet group--name;
inet6 group--name;
}





spf-options {
delay milliseconds;
holddown milliseconds;
rapid-runs number;
}





topologies {

ipv4-multicast;

ipv6-unicast;
}





traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}





traffic-engineering {

disable;



family inet {



shortcuts <ignore-lsp-metrics>
{

multicast-rpf-routes;
}


}





family inet6 {

shortcuts;
}


}





interface (all | interface-name) {

disable;



bfd-liveness-detection {


detection-time {
threshold milliseconds;
}


minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
no-adaptation;


transmit-interval {
threshold milliseconds;
minimum-interval milliseconds;
}


version (1 | automatic);
}



checksum;

csnp-interval (seconds | disable);

hello-padding (adaptive | loose | strict);



ldp-synchronization {

disable;

hold-time seconds;
}



lsp-interval milliseconds;

mesh-group (value | blocked);

no-ipv4-multicast;

no-ipv6-multicast;

no-ipv6-unicast;

no-unicast-topology;

passive;

point-to-point;



level level-number {

disable;

hello-authentication-key key;

hello-authentication-type authentication;

hello-interval seconds;

hold-time seconds;

ipv4-multicast-metric number;

ipv6-multicast-metric number;

ipv6-unicast-metric number;

metric metric;

passive;

priority number;

te-metric metric;
}


}


}

OSPF




ospf {

disable;

export [ policy-names ];

external-preference preference;



graceful-restart {

disable;
helper-disable;
notify-duration seconds;
restart-duration seconds;
}



import [ policy-names ];

no-nssa-abr;



overload {
timeout seconds;
}



preference preference;

reference-bandwidth reference-bandwidth;

rib-group group-name;



sham-link {
local address;
}





spf-options {
delay milliseconds;
holddown milliseconds;
rapid-runs milliseconds;
}





traffic-engineering {
accept-unnumbered-interfaces;
multicast-rpf-routes;
no-topology;



shortcuts {

ignore-lsp-metrics;

lsp-metric-into-summary;
}


}





traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}





area area-id {

area-range network/mask-length <restrict> <exact> <override-metric metric>;



interface interface-name {

demand-circuit;

disable;



bfd-liveness-detection {


detection-time {
threshold milliseconds;
}


minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
no-adaptation;


transmit-interval {
threshold milliseconds;
minimum-interval milliseconds;
}


version (1 | automatic);
}



ipsec-sa name;
}





authentication {



md5 key-id {
key [ key-values ];
}



simple-password key-id;
}



dead-interval seconds;

hello-interval seconds;

interface-type type;



ldp-synchronization {
disable;
hold-time seconds;
}



metric metric;

neighbor address <eligible>;

network-summary-export [ policy-names ];

network-summary-import [ policy-names ];

passive;

poll-interval seconds;

priority number;

retransmit-interval seconds;

te-metric metric;

transit-delay seconds;
}



label-switched-path name metric metric;



nssa {

area-range network/mask-length <restrict> <exact> <override-metric metric>;



default-lsa {

default-metric metric;

metric-type type;

type-7;
}


(no-summaries | summaries);
}





peer-interface interface-name {

disable;

dead-interval seconds;

hello-interval seconds;

retransmit-interval seconds;

transit-delay seconds;
}





sham-link-remote address {

ipsec-sa name;
}



demand-circuit;

metric metric;
}

stub <default-metric metric> <(no-summaries | summaries)>;

virtual-link neighbor-id router-id transit-area area-id {

disable;

ipsec-sa name;
}

authentication {

md5 key-id;

simple-password key-id;
}

dead-interval seconds;

hello-interval seconds;

retransmit-interval seconds;

transit-delay seconds;

OSPFv3




ospf3 {

disable;

export [ policy-names ];

external-preference preference;

import [ policy-names ];



overload {
timeout seconds;
}



preference preference;

reference-bandwidth reference-bandwidth;

rib-group group-name;



spf-options {
delay milliseconds;
holddown milliseconds;
rapid-runs number;
}





traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}





area area-id {

area-range network/mask-length <restrict> <exact> <override-metric metric>;



interface interface-name {

disable;

dead-interval seconds;

hello-interval seconds;

ipsec-sa name;

metric metric;

neighbor address <eligible>;

passive;

priority number;

retransmit-interval seconds;

transit-delay seconds;
}



inter-area-prefix-export [policy-names ];

inter-area-prefix-import [ policy-names ];



nssa {

area-range network/mask-length <restrict> <exact> <override-metric metric>;



default-lsa {

default-metric metric;

metric-type type;

type-7;
}


(no-summaries | summaries);
}



stub <default-metric metric> <(no-summaries | summaries)>;



virtual-link neighbor-id router-id transit-area area-id {

disable;

dead-interval seconds;

hello-interval seconds;

ipsec-sa name;

retransmit-interval seconds;

transit-delay seconds;
}


}


}

RIP




rip {

any-sender;

authentication-key password;

authentication-type type;
(check-zero | no-check-zero);



graceful-restart {
disable;
restart-time seconds;
}



holddown seconds;

import [ policy-names ];

message-size number;

metric-in metric;

receive receive-options;

rib-group group-name;

route-timeout seconds;

send send-options;

update-interval seconds;



traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}





group group-name {



bfd-liveness-detection {


detection-time {
threshold milliseconds;
}


minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
no-adaptation;


transmit-interval {
threshold milliseconds;
minimum-interval milliseconds;
}


version (0 | 1 | automatic);
}



export [ policy-names ];

metric-out metric;

preference preference;

route-timeout seconds;

update-interval seconds;



neighbor neighbor-name {

authentication-key password;

authentication-type type;



bfd-liveness-detection {


detection-time {
threshold milliseconds;
}


minimum-interval milliseconds;
minimum-receive-interval milliseconds;


transmit-interval {

threshold milliseconds;

minimum-interval milliseconds;
}


multiplier number;
version (1 | automatic);
}


(check-zero | no-check-zero);

import [ policy-names ];

message-size number;

metric-in metric;

receive receive-options;

route-timeout seconds;

send send-options;

update-interval seconds;
}


}


}

RIPng




ripng {



graceful-restart {
disable;
restart-time seconds;
}



holddown seconds;

import [ policy-names ];

metric-in metric;

receive <none>;

route-timeout seconds;

send <none>;

update-interval seconds;



traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <flag-modifier> <disable>;
}





group group-name {

export [ policy-names ];

metric-out metric;

preference number;

route-timeout seconds;

update-interval seconds;



neighbor neighbor-name {

import [ policy-names ];

metric-in metric;

receive <none>;

route-timeout seconds;

send <none>;

update-interval seconds;
}


}


}

Router Advertisement




router-advertisement {



interface interface-name {

current-hop-limit number;

default-lifetime seconds;
(managed-configuration | no-managed-configuration);

max-advertisement-interval seconds;

min-advertisement-interval seconds;
(other-stateful-configuration | no-other-stateful-configuration);



prefix prefix {
(autonomous | no-autonomous);
(on-link | no-on-link);

preferred-lifetime seconds;

valid-lifetime seconds;
}



reachable-time milliseconds;

retransmit-timer milliseconds;



traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <detail> <disable>;
}


}


}

Router Discovery




router-discovery {

disable;



traceoptions {
file filename <files number> <size size> <world-readable |
no-world-readable>;
flag flag <detail> <disable>;
}





interface interface-name {

min-advertisement-interval seconds;

max-advertisement-interval seconds;

lifetime seconds;
}





address address {
(advertise | ignore);
(broadcast | multicast);
(priority number | ineligible);
}


}

Secure Neighbor Discovery




neighbor-discovery {



secure {



security-level {
(default | secure-messages-only);
}





cryptographic-address {

key-length number;

key-pair pathname;
}





timestamp {
clock-drift number;
known-peer-window seconds;
new-peer-window seconds;
}





traceoptions {
file filename <files number> <match regular-expression> <size size> <world-readable |
no-world-readable>;
flag flag;
no-remote-trace;
}


}


}

[Contents] [Prev] [Next] [Index] [Report an Error]