# Index

Symbols A B C D E F G H I M N O P R S T V

Symbols

> 144–bit CAM entries
>   example of IPv6 classifiers in a policy
>     supported by CAM classifiers
> 288–bit CAM entries
>   example of IPv6 classifiers in a policy
>     supported by CAM classifiers
> 576–bit CAM entries
>   example of IPv6 classifiers in a policy
>     supported by CAM classifiers

A

> access level
>   mirror-enable command
>   packet mirroring
> analyzer interfaces
>   interface types 1, 2
>   policies on
> atm commands
>   atm-cell-mode 1, 2
> attachment of IPv6 policies
>   to an interface
>     with CAM entries greater than 128 bits
> audit logging, SNMP secure 1, 2

B

> bandwidth management
> baseline commands
>   baseline radius dynamic-request

C

> CAM blocks
>   containing equal-sized CAM entries
>   support for variable-sized entries
>     1
>   utilization for CAM entries
>     in an IPv4 policy, example
>     in an IPv6 policy, example
> CAM device block size
>   division to hold CAM entries
>     example
> CAM entries
>   configured on line moduels
>     calculation of CAM bit size
>   division into blocks to store policies
>     example for GE-2 LMs
>   number per allocation
>     formula for scaling limits on GE-2 LMs
>     formula for scaling limits on GE-HDE LMs
>   obtaining length dynamically, three types
>     between 128 and 272 bits
>     between 272 and 336 bits
>     less than 128 bits
>   using the optimum size
>     for IPv6 policies
> CAM hardware classifiers
>   three types of CAM entries supported
>     on line modules of E Series Broadband Services Routers
>   variables-sized entries
>     for IPv6 policies
> CAM resources
>   and variable-sized CAM entries
>     factors used to determine availability
> classifier
>   CAM hardware 1, 2, 3
>   consumption
>   FPGA hardware 1, 2, 3
>   hardware 1, 2
>   line module support 1, 2, 3
>   policy consumption 1, 2
>   software 1, 2, 3
> classifier control list
>   criteria defined
>   matching IP flags
>   matching IP fragmentation offset
>   matching TCP flags
>   multiple elements in
> classifier groups
>   creating
> classifier-group commands
>   classifier-group
> color-aware configuration
> committed-action command
> committed-burst command
> conventions
>   notice icons
>   text and syntax
> customer support 1
>   contacting JTAC

D

> default classifier
>   allocation of CAM blocks
>     determined by the CAM entry size
>   consumption of CAM blocks
>     same as the size computed for the policy
> documentation set
>   comments on

E

> E320 routers
>   Ethernet interfaces
> exceeded-action command
> excess-burst command
> exp-mask command
> explicit packet coloring
> external parent groups 1
>   monitoring
>   percentage-based hierarchy
>   rate-limit profile

F

> forward command 1, 2
> forward interface command
> forward next-hop command
> fragment-based statistics collection
>   for tunnel interfaces
>     managed by the SRC client
>   setting
>     preserved during high availability
> fragmentation offsets, filtering
> fragments-based statistics collection
>   for output policies on tunnel interfaces
>     monitoring

G

> GE-2 line modules
>   formula for scaling numbers of
>     CAM entries
> GE-HDE line modules
>   formula for scaling limits
>     CAM entries

H

> hierarchical aggregation nodes
> hierarchical policies
>   aggregate rate limits
>   arbitrary interface groups
>   external parent groups
>   L2TP
>   nonvoice traffic
>   policy parameters
>   PPP interfaces
>   Profile configuration
>   RADIUS configuration
>   service rate-limit
>   user rate-limit
>   VLAN rate limit
> hierarchical policing
>   configuration
>   for interface groups

I

> interface mirroring
>   supported modules
> IP auxiliary input policy 1, 2
> ip commands
>   ip classifier-list
>   ipv6 classifier-list
> IP fragmentation
>   offset, matching in a policy
> IP options, filtering
> IP policies
>   scalability improvement for
>     using optimum CAM entry size
> IPv4 classifier
>   number of bits consumed
>     for CAM entries
> IPv6 classification
>   144–bit CAM entries
>     active classifiers in the example and size of each
>     example for a policy attachment
>   288–bit CAM entries
>     active classifiers in the example and size of each
>     example for a policy attachment
>   576–bit CAM entries
>     active classifiers in the example and size of each
>     example for a policy attachment
>     number of lookups to the CAM hardware
>   determination of fields in the classifier
>     using policy definition
>   minimum and maximum entry sizes
>     for IPv6 header CAM entries
>   support for traffic greater than 128 bits
>     1
>   variable-sized CAM entries
>     and available CAM resources
>     maximum policies supported with four classifier per policy
>     maximum policies supported with one classifier per policy
>     performance impact
> IPv6 classifier See IPv6 classification
> IPv6 policies
>   with four classifiers per policy
>     maximum supported with variable-sized CAM entries
>   with one classifier per policy
>     maximum supported with variable-sized CAM entries
> IPv6 policy definition
>   sum of classification fields in the
>     and variable-sized CAM entries

M

> manuals
>   comments on
> mark rule
>   with rate-limit rule
> mark-exp command 1, 2
> merged policy naming conventions
> merging policies 1
>   configuration example
>   error conditions
>   naming conventions
>   persistent configuration differences
>   policy attachment rules
>   policy attachment sequence
>   reference counting
>   resolving conflicts
>   restrictions
>   rules for attachment
> mirror-enable command
>   access level
>   and TACACS+
> MTU (maximum transmission unit)
>   IP 1, 2
> multiple forwarding solutions

N

> notice icons

O

> one-rate rate-limit profile
> overlapping classification 1, 2

P

> packet coloring, explicit
> packet flow monitoring
> packet mirroring
>   access level
>   analyzer device
>   CLI-based 1, 2
>   configuration conflicts
>   configuring traps
>   interface-specific
>   ip analyzer interface
>   mediation device
>   multiple configurations
>   RADIUS-based
>   secure audit logging 1, 2
>   secure local logs
>   secure logging
>   secure SNMP traps
>   securing with TACACS+
>   SNMP secure traps
>   system resources
>   terms
>   trigger
>   triggers for CLI-based
>   user-specific
> packet tagging
> parent group merge algorithm
> peak-burst command
> peak-rate command
> percent-based rates
> platform considerations
>   packet mirroring
> policies
>   analyzer interfaces
>   using RADIUS to create
>     overview
> policy attachment rules
> policy list
>   constructing a
>   creating or modifying
> policy lists
>   applying
>     overview
> policy management
>   applications
>     packet tagging
>   bandwidth management
>   baselining statistics
>   classifier groups, creating
>   classifier resources
>   committed burst calculation 1, 2
>   congestion management
>   creating a one-rate rate-limit profile
>   creating a two-rate rate-limit profile
>   explicit packet coloring
>   filtering fragmentation offsets
>   filtering IP options
>   matching IP flags in a CLACL
>   matching IP fragmentation offset in a CLACL
>   matching TCP flags in a CLACL
>   merging policies
>   modifying a one-rate rate-limit profile
>   modifying a two-rate rate-limit profile
>   monitoring packet flow 1, 2
>   one-rate rate-limit profile
>   overview
>   packet logging
>   packet mirroring
>   packet tagging 1, 2, 3
>   policy actions and rate-limit profiles
>   policy routing
>   policy rules, creating
>   QoS classification and marking
>   RADIUS support
>   rate limiting traffic flows
>   rate-limit profile actions
>   rate-limit profile attributes
>   rate-limit profile calculations
>   rate-limit profile defaults 1, 2
>   resources
>   security
> policy management configuration tasks
> policy parameter
>   considerations
>   quick configuration
>   reference-rate
> policy rule commands
>   forward
>   forward interface
>   forward next-hop
> policy rules
>   creating
>   precedence
>   supported commands
> preservation of statistics
>   for output policies on tunnel interfaces
>     as number of fragments
>     as number of packets

R

> rate limiting
>   aggregate traffic flows
>   for interfaces
>   hierarchical
>   individual traffic flows
> rate-limit hierarchies 1
>   classifier groups
>   color-aware configuration
>   rate-limit actions
>   rate-limit profiles
>   rate-limit rules
> rate-limit profiles
>   attributes
>   burst size
>   calculations
>   configuration procedure
>   creating 1, 2
>   default values 1, 2
>   modifying 1, 2
>   percent-based rates
>   policy actions
>   rates
> rate-limit rule
>   with mark rule
> rate-limit-profile one-rate command
> rate-limit-profile two-rate command
> rate-limiting SRP traffic flows
> resolving merge conflicts

S

> secure audit logging for packet mirroring 1, 2
> secure policy-list command
> Service Manager
>   interface profiles
>   merging policies
> show commands
>   show color-mark-profile
>   show control-plane policer
>   show frame-relay subinterface
>   show gre tunnel
>   show interfaces
>   show ipv6 interface
>   show parent-group 1, 2, 3, 4, 5
>   show policy-parameter
>   show rate-limit-profile
>   show secure classifier-list
>   show vlan subinterfaces 1, 2
> show enable-frag-stats command
> show ip commands
>   show ip interface 1, 2
>   show ip mirror interface
> show mirror commands
>   show mirror log 1, 2
>   show mirror rules
>   show mirror subscribers
> show radius commands
>   show radius servers
>   show radius statistics
> show secure policy-list command
> show snmp commands
>   show snmp secure-log
>   show snmp trap
> single-rate rate limit profile
> SNMP (Simple Network Management Protocol)
>   secure audit logs 1, 2
> SNMP traps 1
>   secure logs
> statistics collection
>   enabling fragment-based counting
>     for output policies on tunnel interfaces
>   enabling packet-based counting
>     for output policies on tunnel interfaces
>   for output policies on tunnel interfaces
>     based on fragments
>     based on packets
> support, technical See technical support

T

> TCP-friendly one-rate rate-limit profile
> technical support
>   contacting JTAC
> text and syntax conventions
> traffic-class command
> traps, SNMP
>   status information
> tunnel interfaces
>   output policy counters
>     using fragments-based collection
>     using packets-based collection
> two-rate rate-limit profile

V

> variable length IPv6 classifiers
>   examples of
>     supported CAM entries
> variable-sized CAM entries
>   144–bit size
>     active classifiers in the example policy
>     creation and attachment of an IPv6 policy, example
>     size of each classifier in the IPv6 policy example
>   288–bit size
>     active classifiers in the example policy
>     creation and attachment of an IPv6 policy, example
>     size of each classifier in the IPv6 policy example
>   576–bit size
>     active classifiers in the example policy
>     creation and attachment of an IPv6 policy, example
>     size of each classifier in the IPv6 policy example
>   factors to determine
>     available CAM resources
>   for IPv6 classification
>     supported bit sizes
>   maximum IPv6 policies supported
>     with four classifiers per policy
>     with one classifier per policy
>   performance impact
>     caused by CAM addressing