Feedback
Table Of Contents
Cisco IOS XR Command Mode Descriptions
Address Family Configuration Mode AF or AFI
Address Family Group Configuration Mode
Administration Configuration Mode
ATM Layer 2 Transport Interface Configuration Mode
ATM Layer 2 Transport PVC Configuration Mode
ATM Layer 2 Transport PVP Configuration Mode
ATM Vc-class Configuration Mode
ATM VP-tunnel Configuration Mode
Automatic Protection Switching Group Configuration Mode
BFD Interface Configuration Mode
Border Gateway Protocol Confederation Peers Configuration Mode
Class Map Generic Inspection Configuration Mode
Class Map HTTP Inspection Configuration Mode
Class Map SIP Inspection Configuration Mode
Control Plane Configuration Mode
Dense Wave Division Multiplexing Controller Mode
DHCP IPv4 Relay Profile Configuration Mode
DHCP IPv6 Interface Server Configuration Mode
DHCP IPv6 Pool Configuration Mode
Distributed Route Processor Pairing Mode
E1 Channel Group Configuration Mode
Encapsulation MPLS Configuration Mode
Explicit Path Configuration Mode
Flow Exporter Map Configuration Mode
Flow Exporter Map Version Configuration Mode
Flow Monitor Map Configuration Mode
Frame Relay PVC Configuration Mode
Global Address Family Configuration Mode
Global Parameter Configuration Mode
Global VRF Address Family Configuration Mode
HSRP Interface Configuration Mode
Interface Address Family Configuration Mode
Interface Configuration Mode (Protocol Areas)
Interface Management Configuration Mode
Interface Peer Configuration Mode
Interface Preconfiguration Mode
Interface PIM Configuration Mode
Interface Routing Information Protocol Configuration Mode
Interface Session Border Controller Configuration Mode
Interface Tunnel Configuration Mode
IP SLA ICMP Echo Configuration Mode
IP SLA ICMP Path-Echo Configuration Mode
IP SLA ICMP Path-Jitter Configuration Mode
IP SLA MPLS Discovery VPN Configuration Mode
IP SLA MPLS LSP Monitor Configuration Mode
IP SLA MPLS LSP Monitor Definition Configuration Mode
IP SLA MPLS LSP Monitor Ping Configuration Mode
IP SLA MPLS LSP Monitor Reaction Configuration Mode
IP SLA MPLS LSP Monitor Reaction Condition Configuration Mode
IP SLA MPLS LSP Monitor Schedule Configuration Mode
IP SLA MPLS LSP Monitor Statistics Configuration Mode
IP SLA MPLS LSP Monitor Trace Configuration Mode
IP SLA MPLS Path Discover Configuration Mode
IP SLA Operation Configuration Mode
IP SLA Operation History Configuration Mode
IP SLA Operation ICMP Path-Echo History Configuration Mode
IP SLA Operation Statistics Configuration Mode
IP SLA Operation UDP Jitter Configuration Mode
IP SLA Reaction Condition Configuration Mode
IP SLA Reaction Configuration Mode
IP SLA Responder Configuration Mode
IP SLA Schedule Configuration Mode
IP SLA UDP Echo Configuration Mode
IP SLA UDP Jitter Configuration Mode
IPv4 Access List Configuration Mode
IPv4 Prefix List Configuration Mode
IPv4 Virtual Routing and Forwarding Address Family Command Mode
IPv6 Access List Configuration Mode
IPv6 Prefix List Configuration Mode
ISAKMP Browser Proxy Configuration Mode
ISAKMP Group Configuration Mode
ISAKMP Peer Configuration Mode
ISAKMP Policy Configuration Mode
ISAKMP Profile Configuration Mode
ISAKMP Profile Match Configuration
L2VPN Bridge Group Bridge Domain Configuration Mode
L2VPN Cross-Connect P2P Pseudowire Configuration Mode
L2VPN Pseudowire Class Configuration Mode
Layer 2 Transport Configuration Mode
Layer 2 Tunnel Protocol Class Configuration Mode
Line (Template) Configuration Mode
Line-Protocol Tracking Configuration Mode
Link Management Protocol Datalink Adjacency Configuration Mode
List Tracking Configuration Mode
LMP Neighbor Configuration Mode
Logging Correlator Apply Rule Configuration Mode
Logging Correlator Apply Rule Set Configuration Mode
Logging Suppression Apply Rule Configuration Mode
Logging Suppression Rule Configuration Mode
MPP Inband Interface Configuration Mode
MPP Out-of-band Interface Configuration Mode
MPLS LDP Interface Configuration Mode
MPLS LDP Label Accept Configuration Mode
MPLS LDP Label Advertise Configuration Mode
MPLS LDP Label Configuration Mode
MPLS LDP Log Configuration Mode
MPLS Operations Administration Maintenance Configuration Mode
MPLS Optical User Network Interface Configuration Mode
MPLS O-UNI Interface Configuration Mode
MPLS TE Interface Configuration Mode
Multi-Area Interface Configuration Mode
Multicast Routing Configuration Mode
Multicast Routing VRF Configuration Mode
Multicast Routing VRF Interface Configuration Mode
Neighbor Address Family Configuration Mode
Neighbor Group Address Family Configuration Mode
Neighbor Group Configuration Mode
Nonstateful Correlation Rule Configuration Mode
Non-Root Cause Configuration Mode
NTP Interface Configuration Mode
O-UNI LMP Datalink Adjacency Configuration Mode
O-UNI LMP Neighbor Adjacency Configuration Mode
O-UNI LMP Neighbor Configuration Mode
POS Interface Configuration Mode
Parameter Map Connection Configuration Mode
Parameter Map DNS Configuration Mode
Parameter Map SIP Configuration Mode
Parameter Map Skinny Configuration Mode
Pifib Policer Global Configuration Mode
Pifib Policer-Per-Node Configuration Mode
Placement Program Configuration Mode
Policy Map Class Configuration Mode
Policy Map HTTP Inspection Configuration Mode
Policy Map SIP Inspection Configuration Mode
Policy Map Skinny Inspection Configuration Mode
Public Key Chain Configuration Mode
QoS Signaling Configuration Mode
RADIUS Server Group Configuration Mode
Resource Reservation Protocol Configuration Mode
Route Distinguisher Configuration Mode
Route-Policy Configuration Mode
Route Tracking Configuration Mode
Router HSRP Configuration Mode
Router IGMP Configuration Mode
Router IGMP Interface Configuration Mode (IPv4)
Router MLD Interface Configuration Mode (IPv6)
Router MSDP Configuration Mode
Router MSDP Peer Configuration Mode
Router PIM Default IPv4 Configuration Mode
Router PIM Default IPv6 Configuration Mode
Router PIM IPv4 Interface Configuration Mode
Router Virtual Router Redundancy Configuration Mode
RSVP Authentication Configuration Mode
RSVP Interface Configuration Mode
RSVP Neighbor Authentication Configuration Mode
RSVP Neighbor Configuration Mode
Sampler Map Configuration Mode
SBC Call Admission Control Policy Configuration Mode
SBC CAC Table Configuration Mode
SBC CAC Table Entry Configuration Mode
SBC DBE Media Address Configuration Mode
SBC H.323 Adjacency Configuration Mode
SBC Local Billing Configuration Mode
SBC Media Gateway Configuration Mode
SBC RADIUS Account Configuration Mode
SBC RADIUS Accounting Server Configuration Mode
SBC RADIUS Authentication Configuration Mode
SBC RADIUS Authentication Server Configuration Mode
SBC Remote Billing Configuration Mode
SBC Routing Policy Number Analysis Configuration Mode
SBC Routing Policy Number Analysis Entry Configuration Mode
SBC Routing Policy Routing Table Configuration Mode
SBC Routing Policy Routing Table Entry Configuration Mode
SBC SBE Routing Policy Configuration Mode
SBC SIP Adjacency Configuration Mode
SBC Virtual DBE Configuration Mode
SBC Virtual DBE H248 Configuration Mode
SBE Body-Filter Profile Body Configuration Mode
SBE Call Policy Configuration Mode
SBE Header Profile Header Configuration Mode
SBE Parameter Profile Parameter Configuration Mode
SBE SIP FQDN Mapping Configuration Mode
SBE SIP Method Configuration Mode
SBE SIP Ping-able Configuration Mode
SBE SIP Timer Configuration Mode
Secure Domain Router Configuration Mode
Server-group Configuration Mode
Server-group Private Configuration Mode
Session Group Configuration Mode
SNMP Interface Configuration Mode
SONET/SDH Path Configuration Mode
Stateful Correlation Rule Configuration Mode
Subinterface Configuration Mode
Synchronous Transport Signal Path Configuration Mode
T1 Channel Group Configuration Mode
TACACS+ Group Configuration Mode
Tunnel Template Configuration Mode
Virtual-link Configuration Mode
VPNv4 Address Family Configuration Mode
VPNv4 Neighbor Address Family Configuration Mode
VPNv6 Address Family Configuration Mode
VPNv6 Neighbor Address Family Configuration Mode
VRF Address Family Configuration Mode
VRF Neighbor Configuration Mode
VRF-Specific NTP Configuration Mode
VRRP Interface Configuration Mode
WAN Physical Controller Configuration Mode
Cisco IOS XR Command Mode Descriptions
This chapter describes the command and configuration modes used in the Cisco IOS XR command-line interface (CLI). The availability of configuration modes depends on the software packages that are installed on your system and on the router platform that you are using. For more information about a particular configuration mode, refer to the command reference or configuration guide that is related to the mode described in this module.
This module describes the command modes in the following sections:
Base Command Modes
Base command modes are used for navigating the CLI and performing basic router startup, configuration, and monitoring tasks.
EXEC Mode
Prompt: (router)
The default command mode for the CLI is EXEC mode. In general, the EXEC commands let you connect to remote devices, change terminal settings on a temporary basis, perform basic tests, and list system information. Most CLI commands in EXEC mode do not change system operation. The most common EXEC commands are show commands (used to display router configuration or operational data) and clear commands (used to clear or reset system counters).
ROM Monitor Mode
Prompt: rommon Bn>
If your router or access server does not find a valid system image to load, the user interface enters read-only memory (ROM) monitor mode. ROM monitor (ROMMON) mode can also be accessed by interrupting the boot sequence during startup. From ROM monitor mode, you can boot the device or perform diagnostic tests.
To enter ROM monitor mode, use the Break (Ctrl-C) during the first 60 seconds of startup. The router prompt consists of an angle bracket by itself or "rommon" followed by the letter B a number, and an angle bracket:
>orrommon B1>. The number after the B increments upon each user-entry.Setup Mode
Setup mode is not actually a command mode. Setup mode is an interactive facility that lets you perform first-time configuration and other basic configurations on all routers. The facility prompts you to enter basic information needed to start a router functioning. Setup mode uses the system configuration dialog, which guides you through the configuration process. It prompts you first for global parameters and then for interface parameters. The values shown in brackets next to each prompt are the default values.
To enter setup mode after the router has been configured for the first time, use the setup command in admin EXEC mode. The router prompt for setup mode is indicated by a configuration question, followed by the default answer in brackets and a colon (:), as shown in the following example:
Continue with configuration dialog? [yes]:Enter host name [Router]:User Configuration Modes
The remaining sections of this module describe each mode you can access during regular operation.
Address Family Configuration Mode AF or AFI
Prompts for Protocols:
•
For BGP: (config-bgp-af)
•
•
•
•
Prompts for Processes:
•
•
Enter one of the address family configuration modes from router configuration mode. Address family configuration mode is available for the BGP, EIGRP, IS-IS, OSPFv3, and RIB protocols. This mode is also available for the multicast routing and router PIM processes. This mode is the highest-level address family configuration mode, and is also called global address family configuration mode.
For BGP only, address family configuration is available in four modes. In addition to this section, see also Address Family Group Configuration Mode, Neighbor Address Family Configuration Mode, or Neighbor Group Address Family Configuration Mode.
For example, first enter BGP router configuration mode, then address family configuration mode:
RP/0/RP0/CPU0:router(config)# router bgp 1RP/0/RP0/CPU0:router(config-bgp)# address-family ipv6 unicastRP/0/RP0/CPU0:router(config-bgp-af)#For example, first enter IS-IS router configuration mode, then address family configuration mode:
RP/0/RP0/CPU0:router(config)# router isis ispRP/0/RP0/CPU0:router(config-isis)# address-family ipv4 unicastRP/0/RP0/CPU0:router(config-isis-af)#Address Family Group Configuration Mode
Prompt: (config-bgp-afgrp)
Enter address family configuration mode from router configuration mode for BGP. In this group configuration mode, you can configure characteristics of an address family group that a neighbor uses. Furthermore, neighbors inherit the configuration parameters of the entire address family group.
For example, create an address family group with the name newgroup1 and an address family of IPv4 unicast. The CLI subsequently enters address family configuration mode. In address family group mode, you configure the next-hop-self feature, so that all neighbors that use address family newgroup1 inherit the next-hop-self configuration:
RP/0/RP0/CPU0:router(config)# router bgp 100RP/0/RP0/CPU0:router(config-bgp)# af-group newgroup1 address-family ipv4 unicastRP/0/RP0/CPU0:router(config-bgp-afgrp)# next-hop-selfAdministration Configuration Mode
Prompt: (admin-config)
Enter administration configuration (admin config) mode from administration EXEC mode. The primary application of administration configuration mode is to let you:
•
•
For SDRs, this mode is used primarily to display system-wide parameters, configure the administration plane over the control Ethernet, and configure SDRs on a multishelf a system. These operations are available at the root level.
For example, first enter the administration EXEC mode, and then use the configure command to enter administration configuration mode:
RP/0/RP0/CPU0:router# adminRP/0/RP0/CPU0:router(admin)# configureRP/0/RP0/CPU0:router(admin-config)#Administration EXEC Mode
Prompt: (admin)
Enter administration executive (admin EXEC) mode from EXEC mode. The admin EXEC mode applies primarily to secure domain routers (SDRs). When SDRs have been configured, the EXEC mode provides visibility into only one SDR, so you must enter administration EXEC mode to see all system parameters. To display system-wide parameters, configure the administration plane over the control Ethernet and configure SDRs on multishelf systems, use administration EXEC mode and administration configuration mode.
For example, to enter the admin EXEC mode:
RP/0/RP0/CPU0:router# adminRP/0/RP0/CPU0:router(admin)#Area Configuration Mode
Prompt: (config-ospf-ar) or (config-ospfv3-ar)
Enter area configuration mode from router configuration mode. The pertinent router modes for area configuration apply to OSPF and OSPFv3. Commands that run in area configuration mode (such as the interface and authentication commands), are automatically bound to that area.
For example, after you enter router configuration mode for OSPF, create area 0. The CLI enters area configuration mode where, in this example, you specify Packet-over-SONET/SDH (POS) interface 0/2/0/0. By definition of an area, interface 0/2/0/0 is bound to area 0:
RP/0/RP0/CPU0:router(config)# router ospf 1RP/0/RP0/CPU0:router(config-router)# area 0RP/0/RP0/CPU0:router(config-ospf-ar)# interface POS 0/2/0/0Similarly, configure POS interface for OSPFv3:
RP/0/RP0/CPU0:router(config)# router ospfv3 2RP/0/RP0/CPU0:router(config-router)# area 1RP/0/RP0/CPU0:router(config-ospfv3-ar)# interface POS 0/1/0/0ATM Layer 2 Transport Interface Configuration Mode
Prompt: (config-if-l2)
Enter ATM Layer 2 transport interface configuration mode by using the l2transport command in interface configuration mode and then configure Layer 2 transport parameters for a particular interface.
For example, enter ATM interface configuration mode and then enter ATM Layer 2 transport interface configuration mode on ATM interface 0/4/0/0:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# interface ATM 0/4/0/0RP/0/RP0/CPU0:router(config-if)# l2transportRP/0/RP0/CPU0:router(config-if-l2)#ATM Layer 2 Transport PVC Configuration Mode
Prompt: (config-atm-l2transport-pvc)
Enter ATM Layer 2 transport permanent virtual circuit (PVC) configuration mode by using the pvc command in interface configuration mode or subinterface configuration mode, and then configure parameters for a particular ATM PVC.
For example, create an ATM PVC on an ATM layer 2 subinterface and enter ATM layer 2 transport PVC configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# interface atm 0/2/0/0.1 l2transportRP/0/RP0/CPU0:router(config-subif)# pvc 20/200RP/0/RP0/CPU0:router(config-atm-l2transport-pvc)#ATM Layer 2 Transport PVP Configuration Mode
Prompt: (config-atm-l2transport-pvp)
Enter ATM Layer 2 transport permanent virtual path (PVP) configuration mode by using the pvp command in subinterface configuration mode and then configure parameters for a particular PVP.
For example, create an ATM PVP on an ATM subinterface, and enter ATM Layer 2 transport PVP configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# interface atm 0/2/0/0.1 l2transportRP/0/RP0/CPU0:router(config-subif)# pvp 20RP/0/RP0/CPU0:router(config-atm-l2transport-pvp)#ATM PVC Configuration Mode
Prompt: (config-atm-vc)
Enter point-to-point ATM virtual circuit configuration mode by using the pvc command in interface configuration mode or subinterface configuration mode, and then configure parameters for a particular ATM permanent virtual circuit (PVC).
For example, create a point-to-point ATM PVC with ILMI encapsulation on an ATM main interface, and enter ATM virtual circuit configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# interface atm 0/6/0/1RP/0/RP0/CPU0:router(config-if)# pvc 5/100 ilmiRP/0/RP0/CPU0:router(config-atm-vc)#ATM Vc-class Configuration Mode
Prompt: (config-vc-class-atm)
Enter vc-class configuration mode by using the vc-class atm command in global configuration mode and then configure parameters for a particular vc-class.
For example, create a vc-class called "class1," and enter vc-class configuration mode for that class:
RP/0/RP0/CPU0:router(config)# vc-class atm class1RP/0/RP0/CPU0:router(config-vc-class-atm)#ATM VP-tunnel Configuration Mode
Prompt: (config-atm-vp-tunnel)
Enter ATM vp-tunnel configuration mode by using the vp-tunnel command in interface configuration mode and then configure parameters for a particular virtual path (VP) tunnel.
For example, configure a vp-tunnel on an interface and enter ATM vp-tunnel configuration mode:
RP/0/RP0/CPU0:router(config-if)# vp-tunnel 10RP/0/RP0/CPU0:router(config-atm-vp-tunnel)#Automatic Protection Switching Group Configuration Mode
Prompt: (config-aps)
Enter automatic protection switching (APS) group configuration mode by using the aps group command in global configuration mode. The SONET/SDH APS feature offers recovery from fiber (external) or equipment (interface and internal) failures at the SONET/SDH line layer. The aps group command either creates a new group or identifies an existing group. The group numbers have a range of 1 to 255. APS requires the creation of an APS group for each protection port and its corresponding working port.
For example, use the authenticate command in APS group configuration mode to specify abctown as the authentication string for APS group 1:
RP/0/RP0/CPU0:router(config)# aps group 1RP/0/RP0/CPU0:router(config-aps)# authenticate abctownFor example, configure SONET port 0/2/0/2 to be a local protection channel in APS group 1:
RP/0/RP0/CPU0:router(config)# aps group 1RP/0/RP0/CPU0:router(config-aps)# channel 0 local SONET 0/2/0/2For example, configure the remote channel with IP address 192.168.1.1 to be the working channel for APS group 1:
RP/0/RP0/CPU0:router(config)# aps group 1RP/0/RP0/CPU0:router(config-aps)# channel 1 remote 192.168.1.1BFD Configuration Mode
Prompt: (config-bfd)
Enter Bidirectional Forwarding Detection (BFD) configuration mode by using the bfd command in global configuration mode and then configure BFD parameters.
For example, enter BFD configuration mode:
RP/0/RP0/CPU0:router # configureRP/0/RP0/CPU0:router(config)# bfdRP/0/RP0/CPU0:router(config-bfd)#BFD Interface Configuration Mode
Prompt: (config-bfd-if)
Enter Bidirectional Forwarding Detection (BFD) interface configuration mode by using the interface command in BFD configuration mode and then configure parameters for a particular interface.
For example, enter BFD interface configuration for POS interface 0/1/0/0:
RP/0/RP0/CPU0:router # configureRP/0/RP0/CPU0:router(config)# bfdRP/0/RP0/CPU0:router(config-bfd)# interface pos 0/1/0/0RP/0/RP0/CPU0:router(config-bfd-if)#Border Gateway Protocol Confederation Peers Configuration Mode
Prompt: (config-bgp-confed-peers)
Enter Border Gateway Protocol (BGP) confederation peer configuration mode by using the bgp confederation peers command in BGP router configuration mode. In this mode, you can specify multiple autonomous systems (one autonomous-system-number) on each command line.
For example, configure multiple autonomous systems in BGP confederation peer configuration mode:
RP/0/RP0/CPU0:router(config)# router bgp 1095RP/0/RP0/CPU0:router(config-bgp)# bgp confederation peers RP/0/RP0/CPU0:router(config-bgp-confed-peers)# 1096 RP/0/RP0/CPU0:router(config-bgp-confed-peers)# 1097 RP/0/RP0/CPU0:router(config-bgp-confed-peers)# 1098Class Map Configuration Mode
Prompt: (config-cmap)
Enter class map configuration mode from global configuration mode by using the class-map command. Use the class-map command to create a new class map or identify an existing map. The CLI then goes into class map configuration mode so you can create the quality-of-service (QoS)-related configuration of the class map.
For example, create a class map with the name "class1":
RP/0/RP0/CPU0:router(config)# class-map class1RP/0/RP0/CPU0:router(config-cmap)#Class Map Generic Inspection Configuration Mode
Prompt: (config-cmap-generic)
Enter class map generic inspection configuration mode by using the class-map type generic command. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade(MSB) of the Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.
For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The class-map type generic command is a SanOS (Linux) command that runs on the VFW application.
For example, create a class map with the name "Generic_L7_CLASS":
firewall/Admin(config)# class-map type generic match-any GENERIC_L7_CLASSfirewall/Admin(config-cmap-generic)#Class Map HTTP Inspection Configuration Mode
Prompt: (config-cmap-http-insp)
Enter class map http inspection configuration mode by using the class-map type http inspect command in global configuration mode. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.
For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The class-map type http inspect command is a SanOS (Linux) command that runs on the VFW application.
For example, create a Layer 7 class map with the name "HTTP_INSPECT_L7CLASS" that performs HTTP deep-packet inspection:
firewall/Admin(config)# class-map type http inspect match-any HTTP_INSPECT_L7CLASSfirewall/Admin(config-cmap-http-insp)#Class Map SIP Inspection Configuration Mode
Prompt: (config-cmap-sip-insp)
Enter class map sip inspection configuration mode by using the class-map type sip inspect command. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.
For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The class-map type sip inspect command is a SanOS (Linux) command that runs on the VFW application.
For example, create a Layer 7 SIP packet inspection class map named SIP_INSPECT_L7CLASS and configure the match criteria for the class map:
firewall/Admin(config)# class-map type sip inspect SIP_INSPECT_L7CLASSfirewall/Admin(config-cmap-sip-insp)#Control Plane Configuration Mode
Prompt: (config-ctrl)
Enter control plane configuration mode by using the control-plane command in global configuration mode.
For example, enter control plane configuration mode:
RP/0/RP0/CPU0:router(config)# control-planeRP/0/RP0/CPU0:router(config-ctrl)#Crypto IPSec Transport
Prompt: (config-transport)
Enter IP Security (IPSec) transport configuration mode by using the crypto ipsec transport command in global configuration mode. IPSec protects the Upper Layer Protocol (ULP) header and the payload. IPSec transport mode supports end-to-end security (in which security endpoints match the host endpoints). All transport mode IPSec traffic must be configured in crypto ipsec transport mode.
For example, enter IPSec transport configuration mode, and then configure a crypto profile:
RP/0/RP0/CPU0:router(config)# crypto ipsec transportRP/0/RP0/CPU0:router(config-transport)# profile pn1Dense Wave Division Multiplexing Controller Mode
Prompt: (config-dwdm)
Enter dense wave division multiplexing (DWDM) controller mode by using the controller preconfigure dwdm command in global configuration mode and then configure parameters for a particular DWDM instance.
For example, enter the controller mode for DWDM on interface 0/6/0/0:
RP/0/RP0/CPU0:router(config)# controller preconfigure dwdm 0/6/0/0RP/0/RP0/CPU0:router(config-dwdm)#DHCP IPv4 Configuration Mode
Prompt: (config-dhcpv4)
Enter Dynamic Host Configuration Protocol (DHCP) for IPv4 configuration mode by using the dhcp ipv4 command in the global configuration mode.
For example, enable DHCP for IPv4:
RP/0/RP0/CPU0:router(config)# dhcp ipv4RP/0/RP0/CPU0:router (config-dhcpv4)#DHCP IPv4 Relay Profile Configuration Mode
Prompt: (config-dhcpv4-relay-profile)
Enter DHCP relay profile for IPv4 configuration mode by using the profile client relay command in DHCP IPv4 configuration mode and then configure a relay profile for the DHCP IPv4 component.
For example, from DHCP IPv4 configuration mode, create a relay profile instance "client":
RP/0/RP0/CPU0:router(config)# dhcp ipv4RP/0/RP0/CPU0:router(config-dhcpv4)# profile client relayRP/0/RP0/CPU0:router(config-dhcpv4-relay-profile)DHCP IPv6 Configuration Mode
Prompt: (config-dhcpv6)
Enter Dynamic Host Configuration Protocol (DHCP) for IPv6 configuration mode by using the dhcp ipv6 command in global configuration mode.
For example, enable DHCP for IPv6:
RP/0/RP0/CPU0:Router(config)# dhcp ipv6RP/0/RP0/CPU0:Router (config-dhcpv6)#
DHCP IPv6 Interface Server Configuration Mode
Prompt: (config-dhcpv6-if)
Enter DHCP interface server for IPv6 configuration mode by using the interface server command in DHCP IPv6 configuration mode.
For example, configure the POS interface 0/5/0/0 for the dhcp ipv6 mode:
RP/0/RP0/CPU0:router(config)# dhcp ipv6RP/0/RP0/CPU0:router(config-dhcpv6)# interface pos 0/5/0/0 serverRP/0/RP0/CPU0:router(config-dhcpv6-if)DHCP IPv6 Pool Configuration Mode
Prompt: (config-dhcpv6-pool)
Enter DHCP pool for IPv6 pool configuration mode by using the dhcp ipv6 pool command in global configuration mode. You can specify a symbolic string (such as pool1) or an integer for the name of the pool.
For example, configure DHCP for the IPv6 server configuration information pool with the instance name "pool1":
RP/0/RP0/CPU0:router(config)# dhcp ipv6 pool pool1RP/0/RP0/CPU0:router(config-dhcpv6-pool)#Distributed Route Processor Pairing Mode
Prompt: (admin-config-pairing:drp_name)
Enter distributed route processor (DRP) pairing mode by using the pairing command in administrative configuration mode. After you name a new or existing DRP pair, the CLI enters DRP pairing configuration mode.
For example, create a DRP pair, and assign two DRP nodes to the pair name:
RP/0/RP0/CPU0:router# adminRP/0/RP0/CPU0:router(admin)# configRP/0/RP0/CPU0:router(admin-config)# pairing drp1RP/0/RP0/CPU0:router(admin-config-pairing:drp1)#E1 Channel Group Configuration Mode
Prompt: (config-e1-channel_group)
Enter channel group configuration mode for an E1 controller by using the channel-group command in E1 configuration mode.
For example, enter channel group configuration mode for channel group number 5 on E1 interface 0/6/2/0/3:
RP/0/RP0/CPU0:router(config)# controller e1 0/6/2/0/3RP/0/RP0/CPU0:router(config-e1)# channel-group 5RP/0/RP0/CPU0:router(config-e1-channel_group)#E1 Configuration Mode
Prompt: (config-e1)
Enter E1 configuration mode by using the controller e1 command in global configuration mode and then configure parameters for a particular E1 instance.
For example, enter E1 configuration mode for E1 interface 0/6/2/0/3:
RP/0/RP0/CPU0:router(config)# controller e1 0/6/2/0/3RP/0/RP0/CPU0:router(config-e1)#E3 Configuration Mode
Prompt: (config-e3)
Enter E3 configuration mode by using the controller e3 command in global configuration mode and then configure parameters for a particular E3 instance.
For example, enter E3 configuration mode for E3 interface 0/6/2/0:
RP/0/RP0/CPU0:router(config)# controller e3 0/6/2/0RP/0/RP0/CPU0:router(config-e3)#Encapsulation MPLS Configuration Mode
Prompt: (config-l2vpn-pwc-encap-mpls)
Enter MPLS pseudowire encapsulation configuration mode by using the encapsulation mpls command in L2VPN pseudowire class configuration mode.
For example, enter encapsulation MPLS configuration mode for a pseudowire class template called "kanata01":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# l2vpnRP/0/RP0/CPU0:router(config-l2vpn)# pw-class kanata01RP/0/RP0/CPU0:router(config-l2vpn-pwc)# encapsulation mplsExplicit Path Configuration Mode
Prompt: (config-expl-path)
Enter explicit path configuration mode from global configuration mode by using the explicit-path command. This mode applies to the Multiprotocol Label Switching (MPLS) traffic engineering (TE) feature. After the CLI enters explicit path Multiprotocol configuration mode, use the disable, exclude-address, next-address, or show explicit-paths command to modify or display the IP explicit path that you identified to the explicit-path command.
For example, exclude IP addresses 192.168.3.2 and 192.168.4.2 from IP explicit path 200:
RP/0/RP0/CPU0:router(config)# explicit-path identifier 200RP/0/RP0/CPU0:router(config-expl-path)# exclude-address 192.168.3.2RP/0/RP0/CPU0:router(config-expl-path)# exclude-address 192.168.4.2For example, remove IP address 192.168.3.2 from the excluded addresses for path 200:
RP/0/RP0/CPU0:router(config)# explicit-path identifier 200RP/0/RP0/CPU0:router(config-expl-path)# no index 1For example, disable explicit path 200:
RP/0/RP0/CPU0:router(config)# explicit-path identifier 200RP/0/RP0/CPU0:router(config-expl-path)# disableFirewall Configuration Mode
Prompt: (config-firewall)
Enter firewall configuration mode for configuring a virtual firewall by using the firewall command in global configuration mode.
For example, in global configuration mode, enter firewall mode for the instance named "fw1":
RP/0/0/CPU0:router# configureRP/0/0/CPU0:router(config)# firewall fw1RP/0/0/CPU0:router(config-firewall)# service-location preferred-active 0/0/CPU0preferred-standby 0/1/CPU0 auto-revertRP/0/0/CPU0:router(config-firewall)# default-interface-name outsideRP/0/0/CPU0:router(config-firewall)# failure-action shutdownFlow Exporter Map Configuration Mode
Prompt: (config-fem)
Enter flow exporter map configuration mode by using the flow exporter-map command in global configuration mode and then configure parameters for a particular flow exporter map.
For example, create a flow exporter map called "map1," and enter the flow exporter map configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# flow exporter-map map1RP/0/RP0/CPU0:router(config-fem)#Flow Exporter Map Version Configuration Mode
Prompt: (config-fem-ver)
Enter flow exporter map version configuration mode by using the version v9 command in flow exporter map configuration mode, and then configure export version parameters for a particular flow exporter map.
For example, enter flow exporter map version configuration mode for a flow exporter called "map1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# flow exporter-map map1 version v9RP/0/RP0/CPU0:router(config-fem-ver)#Flow Monitor Map Configuration Mode
Prompt: (config-fmm)
Enter flow monitor map configuration mode by using the flow monitor-map command in global configuration mod, and then configure parameters for a particular monitor map.
For example, enter flow monitor map configuration mode for a monitor map called "map1":
RP/0/RP0/CPU0:router # configureRP/0/RP0/CPU0:router(config)# flow monitor-map map1RP/0/RP0/CPU0:router(config-fmm)#Frame Relay PVC Configuration Mode
Prompt: (config-fr-vc)
Enter Frame Relay PVC configuration mode and associate a data-link connection identifier (DLCI) number to a permanent virtual circuit (PVC) using the pvc command in subinterface configuration mode.
For example, create a PVC with DLCI 16 :
RP/0/0/CPU0:router(config)# interface pos 0/4/0/0.1 point-to-pointRP/0/0/CPU0:router(config-subif)# pvc 16RP/0/0/CPU0:router(config-fr-vc)#Global Address Family Configuration Mode
Prompts: See Address Family Configuration Mode AF or AFI.
Prompts for Protocols:
•
•
•
•
•
Prompts for Processes:
•
•
Global Configuration Mode
Prompt: (config)
Enter global configuration mode from executive (EXEC) mode by using the configure command. Global configuration commands generally apply to the whole system rather than just one protocol or interface. You can enter all other configuration submodes listed in this section from global configuration mode.
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)#Global Parameter Configuration Mode
Prompt: (config-rpl-gl)
Enter global parameter configuration mode by using the policy-global command in global configuration mode. In global parameter configuration mode, you can create or modify a global policy by entering successive commands and then terminating the configuration by entering the end-global command.
For example, to configure global parameters:
RP/0/RP0/CPU0:router(config)# policy-globalRP/0/RP0/CPU0:router(config-rpl-gl)# glbpathtype ebgpRP/0/RP0/CPU0:router(config-rpl-gl)# glbtag 100RP/0/RP0/CPU0:router(config-rpl-gl)# end-globalGlobal VRF Address Family Configuration Mode
Prompt: (config-vrf-af)
Enter global virtual private network (VPN) routing and forwarding (VRF) address family configuration mode by using the address-family command in VRF configuration mode.
For example, enter VRF mode for IPv4 unicast:
RP/0/RP0/CPU0:router(config)# vrf vrfARP/0/RP0/CPU0:router(config-vrf)# address-family ipv4 unicastRP/0/RP0/CPU0:router(config-vrf-af)#Global VRF Configuration Mode
Prompt: (config-vrf)
Enter VPN routing and forwarding (VRF) configuration mode by using the vrf command in the global configuration mode.
For example, enter VRF configuration mode for the VRF instance named "new1":
RP/0/RP0/CPU0:router(config)# vrf new1RP/0/RP0/CPU0:router(config-vrf)#HSRP Interface Configuration Mode
Prompt: (config-hsrp-if)
Enter Hot Standby Router Protocol (HSRP) interface configuration mode by using the interface command in router HSRP configuration mode. In this mode, you can configure details of the HSRP for a specific interface.
For example, enter the HSRP interface configuration mode for the Ten Gigabit Ethernet interface 0/2/0/1:
RP/0/RP0/CPU0:router(config)# router hsrpRP/0/RP0/CPU0:router(config-hsrp)# interface TenGigE 0/2/0/1RP/0/RP0/CPU0:router(config-hsrp-if)#Interface Address Family Configuration Mode
Prompt: (config-isis-if-af)
Enter interface address family configuration mode from interface mode (for IS-IS) by using the address-family command.
For example, enter router configuration mode for IS-IS, and then specify the Packet-over-SONET/SDH (POS) interface 0/1/0/1. In interface mode, use the address-family command to enter interface IPv4 unicast address family configuration mode. Configure the interface:
RP/0/RP0/CPU0:router(config)# router isis ispRP/0/RP0/CPU0:router(config-isis)# interface POS0/1/0/1RP/0/RP0/CPU0:router(config-isis-if)# address-family ipv4 unicastRP/0/RP0/CPU0:router(config-isis-if-af)#Interface Configuration Mode
Prompts:
•
•
Enter interface configuration mode from global configuration mode. At this level and other interface submodes, a wide variety of capabilities are supported, and these capabilities depend on the installed software packages.
For example, enter the POS interface configuration mode:
RP/0/RP0/CPU0:router(config)# interface POS 0/2/0/4RP/0/RP0/CPU0:router(config-if)#For example, enter the IS-IS router configuration mode:
RP/0/RP0/CPU0:router(config)# router isis ispRP/0/RP0/CPU0:router(config-isis)# interface POS0/3/0/0RP/0/RP0/CPU0:router(config-isis-if)#Interface Configuration Mode (Protocol Areas)
Prompts:
•
•
•
Enter area interface configuration mode from area configuration mode for OSPF, OSPFv3, or EIGRP. The commands in this mode apply to an interface within the area you specify at the area configuration prompt.
For example, enter the area interface configuration mode for the OSPF protocol:
RP/0/RP0/CPU0:router(config)# router ospfv 201RP/0/RP0/CPU0:router(config-ospfv)# area 0RP/0/RP0/CPU0:router(config-ospfv-ar)# interface POS 0/1/0/1RP/0/RP0/CPU0:router(config-ospfv-ar-if)#
For example, enter the area interface configuration mode for the OSPFv3 protocol:
RP/0/RP0/CPU0:router(config)# router ospfv3 201RP/0/RP0/CPU0:router(config-ospfv3)# area 0RP/0/RP0/CPU0:router(config-ospfv3-ar)# interface POS 0/1/0/1RP/0/RP0/CPU0:router(config-ospfv3-ar-if)#For example, enter the area interface configuration mode for the EIGRP protocol:
RP/0/RP0/CPU0:router(config)# router eigrp 1RP/0/RP0/CPU0:router(config-eigrp)# address-family ipv4RP/0/RP0/CPU0:router(config-eigrp)# router-id 10.1.1.1RP/0/RP0/CPU0:router(config-eigrp-af)# interface POS 0/1/0/0RP/0/RP0/CPU0:router(config-eigrp-af-if)# hello-interval 10Interface Management Configuration Mode
Prompt: (config-if)
Enter interface management configuration mode by using the interface MgmtEth command in global configuration mode.
For example, enter Ethernet management configuration mode for the instance 0/0/CPU0/0.
RP/0/RP0/CPU0:router(config)# interface MgmtEth 0/0/CPU0/0RP/0/RP0/CPU0:router(config-if)#Interface Multicasting Mode
Prompt: (config-mcast-default-ipv4-if)
Enter multicasting configuration mode for an interface using the interface command or other applicable command in multicast router configuration mode.
For example, enable multicast routing on the Packet-over-SONET/SDH (POS) interface 0/1/0/0:
RP/0/RP0/CPU0:router# multicast-routingRP/0/RP0/CPU0:router# address-family ipv4RP/0/RP0/CPU0:router(config-mcast-default-ipv4)# interface all enableRP/0/RP0/CPU0:router(config-mcast-default-ipv4)# interface pos 0/1/0/0RP/0/RP0/CPU0:router(config-mcast-default-ipv4-if)#Interface Peer Configuration Mode
Prompt: (config-telnet-peer)
Enter interface peer configuration mode from global configuration mode.
For example, enter the interface peer configuration mode for the peer IPv4 address 10.1.0.0 with a prefix of 16 for management traffic:
RR/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# control-planeRP/0/RP0/CPU0:router(config-ctrl)# management-planeRP/0/RP0/CPU0:router(config-mpp)# inbandRP/0/RP0/CPU0:router(config-mpp-inband)# interface POS 0/6/0/0RP/0/RP0/CPU0:router(config-mpp-inband-POS0_6_0_0)# allow Telnet peerRP/0/RP0/CPU0:router(config-telnet-peer)# address ipv4 10.1.0.0/16Interface Preconfiguration Mode
Prompt: (config-if-pre)
Enter the interface preconfiguration mode for a Packet-over-SONET/SDH interface from template configuration mode by using the interface preconfigure command.
For example, first create a template named "pre-pos." This action places the CLI in template configuration mode. Use the interface preconfigure command with POS interface 0/1/0/0 to enter interface preconfiguration mode.
RP/0/RP0/CPU0:router(config)# template pre-posRP/0/RP0/CPU0:router(config-TPL)# interface preconfigure pos 0/1/0/0RP/0/RP0/CPU0:router(config-if-pre)#Interface PIM Configuration Mode
Prompt: (config-pim-default-ipv4-if)
Enter the interface Protocol Independent Management (PIM) configuration mode by using the interface type instance-id command in PIM configuration mode.
For example, configure the router to specify a designated router (DR) priority of 4 for Packet-over-SONET/SDH (POS) interface 0/1/0/0:
RP/0/RP0/CPU0:router(config)# router pimRP/0/RP0/CPU0:router(config-pim-default-ipv4)# interface pos 0/1/0/0RP/0/RP0/CPU0:router(config-pim-default-ipv4-if)#Interface Routing Information Protocol Configuration Mode
Prompt: (config-rip-if)
Enter interface routing information protocol (RIP) configuration mode by using the interface command in global configuration mode.
For example, enter interface routing information protocol (RIP) configuration mode for the POS interface 1/0/0/0:
RP/0/RP0/CPU0:router(config)# router ripRP/0/RP0/CPU0:router(config-rip)# interface POS 1/0/0/0RP/0/RP0/CPU0:router(config-rip-if)#Interface Session Border Controller Configuration Mode
Prompt: (config-if-sbc)
Enter interface session border controller (SBC) configuration mode by using the interface sbc command in global configuration mode. If the specified interface does not exist, this command creates it.
For example, interface session border controller (SBC) configuration mode:
RP/0/0/CPU0:router(config)# interface sbc 200RP/0/0/CPU0:router (config-if-sbc)#Interface Tunnel Configuration Mode
Prompt: (config-if)
Enter interface configuration mode for tunnels from global configuration mode. Use the tunnel-ipsec command for this purpose. After the CLI enters interface configuration mode, the applicable commands for tunnels let you configure a source, destination, and profile. To specify the source address for a tunnel interface, use the tunnel source command in interface configuration mode. Use the tunnel source command to configure the source address or interface type and the instance for an IP Security tunnel. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of Cisco IOS XR System Security Configuration Guide.
For example, configure the tunnel source to be 172.19.72.92:
RP/0/RP0/CPU0:router(config)# interface tunnel-ipsec0RP/0/RP0/CPU0:router(config-if)# tunnel source 172.19.72.92RP/0/RP0/CPU0:router(config-if)# tunnel destination 172.19.72.120RP/0/RP0/CPU0:router(config-if)# profile pn1IP SLA ICMP Echo Configuration Mode
Prompt: (config-ipsla-icmp-echo)
Enter IP service level agreement (SLA) internet control message protocol (ICMP) echo configuration mode for an IP SLA by using the type icmp echo command in IP SLA operation configuration mode.
For example, for IP SLA operation 1, enter ICMP echo configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type icmp echoRP/0/RP0/CPU0:router(config-ipsla-icmp-echo)#IP SLA ICMP Path-Echo Configuration Mode
Prompt: (config-ipsla-icmp-path-echo)
Enter IP service level agreement (IP SLA) Internet control messaging protocol (ICMP) path-echo configuration mode by using the type icmp path-echo command in IP SLA operation configuration mode.
For example, for IP SLA operation 1, enter ICMP path-echo configuration mode:
RP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type icmp path-echoRP/0/RP0/CPU0:router(config-ipsla-icmp-path-echo)# lsr-path 20.25.22.1IP SLA ICMP Path-Jitter Configuration Mode
Prompt: (config-ipsla-icmp-path-jitter)
Enter IP service level agreement (IP SLA) Internet control messaging protocol (ICMP) path-jitter configuration mode by using the type icmp path-jitter command in IP SLA operation configuration mode.
For example, enter the IP SLA ICMP path-jitter configuration mode for IP SLA operation 1 :
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type icmp path-jitterRP/0/RP0/CPU0:router(config-ipsla-path-jitter)#IP SLA MPLS Discovery VPN Configuration Mode
Prompt:(config-ipsla-mpls-discovery-vpn)
Enter IP SLA MPLS discovery VPN configuration mode by using the mpls discovery vpn command in IP SLA configuration mode:
For example, enter IP SLA MPLS discovery VPN configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls discovery vpnRP/0/RP0/CPU0:router(config-ipsla-mpls-discovery-vpn)#IP SLA MPLS LSP Monitor Configuration Mode
Prompt:(config-ipsla-mplslm)
Enter IP SLA MPLS LSP monitor configuration submode by using the mpls lsp-monitor command in IP SLA configuration mode.
For example, enter mpls lsp-monitor configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)#IP SLA MPLS LSP Monitor Definition Configuration Mode
Prompt:(config-ipsla-mplslm-def)
Enter IP SLA MPLS LSP monitor definition configuration mode by using the monitor command in IP SLA MPLS LSP monitor configuration mode.
For example, enter IP SLA MPLS LSP Monitor configuration mode for monitor definition "1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)# monitor 1RP/0/RP0/CPU0:router(config-ipsla-mplslm-def)#IP SLA MPLS LSP Monitor Ping Configuration Mode
Prompt: (config-ipsla-mplslm-lsp-ping)
Enter IP SLA MPLS LSP monitor ping configuration mode by using the type mpls lsp ping command in IP SLA MPLS LSP monitor definition configuration mode.
For example, enter the IP SLA MPLS LSP monitor ping configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)# monitor 1RP/0/RP0/CPU0:router(config-ipsla-mplslm-def)# type mpls lsp pingRP/0/RP0/CPU0:router(config-ipsla-mplslm-lsp-ping)#IP SLA MPLS LSP Monitor Reaction Configuration Mode
Prompt:(config-ipsla-mplslm-react)
Enter IP SLA MPLS LSP monitor reaction configuration mode by using the reaction monitor command in IP SLA MPLS LSP monitor configuration mode.
For example, enter IP SLA MPLS LSP monitor reaction configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)# reaction monitor 1RP/0/RP0/CPU0:router(config-ipsla-mplslm-react)#IP SLA MPLS LSP Monitor Reaction Condition Configuration Mode
Prompt:(config-ipsla-mplslm-react-cond)
Enter IP SLA MPLS LSP monitor reaction condition configuration mode by using the react connection-loss command in IP SLA MPLS LSP monitor reaction configuration mode.
For example, enter IP SLA MPLS LSP monitor reaction condition configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)# reaction monitor 1RP/0/RP0/CPU0:router(config-ipsla-mplslm-react)#react connection-lossRP/0/RP0/CPU0:router(config-ipsla-mplslm-react-cond)#IP SLA MPLS LSP Monitor Schedule Configuration Mode
Prompt:(config-ipsla-mplslm-sched)
Enter IP SLA MPLS LSP monitor schedule configuration mode by using the schedule monitor command in IP SLA MPLS LSP monitor configuration mode.
For example, enter IP SLA MPLS LSP monitor schedule configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)# schedule monitor 2RP/0/RP0/CPU0:router(config-ipsla-mplslm-sched)#IP SLA MPLS LSP Monitor Statistics Configuration Mode
Prompt:(config-ipsla-mplslm-stats)
Enter IP SLA MPLS LSP monitor statistics configuration mode by using the statistics hourly command in IP SLA MPLS LSP ping configuration mode.
For example, enter IP SLA MPLS LSP monitor statistics configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)# monitor 1RP/0/RP0/CPU0:router(config-ipsla-mplslm-def)# type mpls lsp pingRP/0/RP0/CPU0:router(config-ipsla-mplslm-lsp-ping)# statistics hourlyRP/0/RP0/CPU0:router(config-ipsla-mplslm-stats)#IP SLA MPLS LSP Monitor Trace Configuration Mode
Prompt: (config-ipsla-mplslm-lsp-trace)
Enter IP SLA MPLS LSP monitor trace configuration mode by using the type mpls lsp trace command in MPLS LSP monitor definition configuration mode.
For example, enter the IP SLA MPLS LSP monitor trace configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)# monitor 1RP/0/RP0/CPU0:router(config-ipsla-mplslm-def)# type mpls lsp traceRP/0/RP0/CPU0:router(config-ipsla-mplslm-lsp-trace)#IP SLA MPLS Path Discover Configuration Mode
Prompt:(config-ipsla-mplslm-lpd)
Enter IP SLA MPLS path discover configuration mode by using the path discover command in IP SLA MPLS LSP monitor ping configuration mode.
For example, enter IP SLA MPLS path discover configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitor monitor 1RP/0/RP0/CPU0:router(config-ipsla-mplslm-def)# type mpls lsp ping
RP/0/RP0/CPU0:router(config-ipsla-mplslm-lsp-ping)# path discover
RP/0/RP0/CPU0:router(config-ipsla-mplslm-lpd)IP SLA Operation Configuration Mode
Prompt: (config-ipsla-op)
Enter IP service level agreement (SLA) configuration mode by using the ipsla operation command in global configuration mode.
For example, enter IP SLA operation configuration mode for the operation "1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)#IP SLA Operation History Configuration Mode
Prompt: (config-ipsla-op-hist)
Enter the IP SLA operation history configuration mode by using the history command in UDP echo configuration mode.
For example, enter history configuration mode for operation "1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type udp echoRP/0/RP0/CPU0:router(config-ipsla-udp-echo)# historyRP/0/RP0/CPU0:router(config-ipsla-op-hist)#IP SLA Operation ICMP Path-Echo History Configuration Mode
Prompt: (config-ipsla-icmp-path-echo)
Enter IP SLA operation ICMP path-echo history configuration mode by using the type icmp path-echo history command in IP SLA operation configuration mode.
For example, enter IP SLA operation ICMP path-echo configuration mode for the operation "1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type icmp path-echoRP/0/RP0/CPU0:router(config-ipsla-icmp-path-echo)#IP SLA Operation Statistics Configuration Mode
Prompt: (config-ipsla-op-stats)
Enter IP SLA operation statistics configuration mode by using the statistics command in IP SLA UDP jitter configuration or IP SLA UDP path echo configuration mode.
For example, enter IP SLA operation statistics configuration mode for the operation "1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type icmp path-echoRP/0/RP0/CPU0:router(config-ipsla-icmp-path-echo)# statistics hourlyRP/0/RP0/CPU0:router(config-ipsla-op-stats)#For example, enter IP SLA operation UDP jitter configuration mode for the operation "1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type udp jitterRP/0/RP0/CPU0:router(config-ipsla-udp-jitter)# statistics hourlyRP/0/RP0/CPU0:router(config-ipsla-op-stats)#IP SLA Operation UDP Jitter Configuration Mode
Prompt: (config-ipsla-udp-jitter)
Enter IP SLA operation UDP jitter configuration mode by using the type udp jitter command in IP SLA operation configuration mode.
For example, enter IP SLA operation UDP jitter configuration mode for the operation "1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type udp jitterRP/0/RP0/CPU0:router(config-ipsla-udp-jitter)#IP SLA Reaction Condition Configuration Mode
Prompt: (config-ipsla-react-cond)
Enter the IP SLA reaction condition configuration mode by using the react command and one or more keywords in IP SLA reaction configuration mode.
For example, enter IP SLA reaction condition configuration mode for the operation "432":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla reaction operation 432RP/0/RP0/CPU0:router(config-ipsla-react)# react connection-lossRP/0/RP0/CPU0:router(config-ipsla-react-cond)#IP SLA Reaction Configuration Mode
Prompt: (config-ipsla-react)
Enter IP SLA reaction configuration mode by using the ipsla reaction operation command in global configuration mode. In this mode, you can configure reactions for a variety of IP SLA events.
For example, enter IP SLA reaction configuration mode for the operation "432":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla reaction operation 432RP/0/RP0/CPU0:router(config-ipsla-react)#IP SLA Responder Configuration Mode
Prompt: (config-ipsla-resp)
Enter IP SLA responder configuration mode by using the ipsla responder command in global configuration mode.
For example, enter IP SLA responder configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla responderRP/0/RP0/CPU0:router(config-ipsla-resp)#IP SLA Schedule Configuration Mode
Prompt: (config-ipsla-sched)
Enter the IP SLA schedule configuration mode by using the ipsla schedule operation command in global configuration mode.
For example, enter IP SLA schedule configuration mode for the operation "1":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla schedule operation 1RP/0/RP0/CPU0:router(config-ipsla-sched)#IP SLA UDP Echo Configuration Mode
Prompt: (config-ipsla-udp-echo)
Enter the IP SLA UDP echo configuration mode by using the type udp echo command in IP SLA operation configuration mode.
For example, enter the IP SLA UDP echo configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type udp echoRP/0/RP0/CPU0:router(config-ipsla-udp-echo)#IP SLA UDP Jitter Configuration Mode
Prompt: (config-ipsla-udp-jitter)
Enter IP SLA UDP jitter configuration mode for configuring jitter-related values for IP SLA UDP by using the type udp jitter command in IP SLA operation mode.
For example, enter the IP SLA UDP jitter configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipsla operation 1RP/0/RP0/CPU0:router(config-ipsla-op)# type udp jitterRP/0/RP0/CPU0:router(config-ipsla-udp-jitter)#IPv4 Access List Configuration Mode
Prompt: (config-ipv4-acl)
Enter IPv4 access list configuration mode from global configuration mode. In global configuration mode, you can create or modify an access list by specifying the name of the list as an argument to the ipv4 access-list command. The CLI automatically enters IPv4 access list configuration mode.
For example, specify a deny condition for an access list named "Internetfilter":
RP/0/RP0/CPU0:router(config)# ipv4 access-list InternetfilterRP/0/RP0/CPU0:router(config-ipv4-acl)# 10 deny 192.168.34.0 0.0.0.255RP/0/RP0/CPU0:router(config-ipv4-acl)# 20 deny 172.16.0.0 0.0.255.255RP/0/RP0/CPU0:router(config-ipv4-acl)# 25 deny tcp host 172.16.0.0 eq bgp host 192.168.202.203 range 1300 1400RP/0/RP0/CPU0:router(config-ipv4-acl)# permit 10.0.0.0 0.255.255.255IPv4 Prefix List Configuration Mode
Prompt: (config-ipv4-pfx)
Enter IPv4 prefix list configuration mode by using the ipv4 prefix-list command in global configuration mode.
For example, configure a list named "list1" to accept a mask length of up to 24 bits in routes with the prefix 172.20.10.171/16:
RP/0/RP0/CPU0:router(config)# ipv4 prefix-list list1RP/0/RP0/CPU0:router(config-ipv4-pfx)# permit 172.20.10.171/16 le 24IPv4 Virtual Routing and Forwarding Address Family Command Mode
Prompts:
•
•
Enter the command mode for an IPv4 VPN routing and forwarding (VRF) address family by using the vrf command in router configuration mode for the applicable routing protocol. This mode also supports configuration of static routes.
For example, after entering VRF configuration mode from router BGP configuration mode, specify IPv4 unicast configuration mode:
RP/0/RP0/CPU0:router(config-bgp)# vrf new1RP/0/RP0/CPU0:router(config-bgp-vrf)# address-family ipv4 unicastRP/0/RP0/CPU0:router(config-bgp-vrf-af)#For example, enter static router configuration mode and then specify a VRF named "new1":
RP/0/RP0/CPU0:router(config)# router staticRP/0/RP0/CPU0:router(config-static)# vrf new1RP/0/RP0/CPU0:router(config-static-vrf)# address-family ipv4 unicastRP/0/RP0/CPU0:router(config-static-vrf-afi)#IPv6 Access List Configuration Mode
Prompt: (config-ipv6-acl)
Enter IPv6 access list configuration mode by using the ipv6 access-list command in global configuration mode. You can create or modify an access list by specifying the name of the list as an argument to the ipv6 access-list command. The CLI automatically enters IPv6 access list configuration mode.
For example, enter IPv6 access list configuration mode for an IPv6 access list named "Internetfilter":
RP/0/RP0/CPU0:router(config)# ipv6 access-list InternetfilterRP/0/RP0/CPU0:router(config-ipv6-acl)#IPv6 Prefix List Configuration Mode
Prompt: (config-ipv6-pfx)
Enter IPv6 prefix list configuration mode by using the ipv6 prefix-list command in global configuration mode.
For example, enter IPv6 prefix list configuration mode for a prefix list named "preflist1":
RP/0/RP0/CPU0:router(config)# ipv6 prefix-list preflist1RP/0/RP0/CPU0:router(config-ipv6-pfx)#ISAKMP Browser Proxy Configuration Mode
Prompt: (config-crypto-isakmp-browser-proxy)
Enter ISAKMP browser proxy configuration mode by using the crypto isakmp client configuration browser-proxy command.
For example, specify browser-proxy parameter settings for a browser proxy named "bproxy":
RP/0/RP0/CPU0:router(config)# crypto isakmp client configuration browser-proxy bproxyRP/0/RP0/CPU0:router(config-crypto-isakmp-browser-proxy)#ISAKMP Group Configuration Mode
Prompt: (config-group)
Enter ISAKMP group configuration mode by using the crypto isakmp client configuration group command.
For example, configure a local group profile with the group name "marketing":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# crypto isakmp client configuration group marketingRP/0/RP0/CPU0:router(config-group)#ISAKMP Peer Configuration Mode
Prompt (config-isakmp-peer)
Enter ISAKMP peer configuration mode by using the crypto isakmp peer command in global configuration mode.
For example, specify the peer address as 40.40.40.2 named "siteA":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# crypto isakmp peer address 40.40.40.2RP/0/RP0/CPU0:router(config-isakmp-peer)# description siteAISAKMP Policy Configuration Mode
Prompt: (config-isakmp)
Enter ISAKMP policy configuration mode by using the crypto isakmp policy command in global configuration mode. In policy configuration mode, the available commands let you define a policy for Internet Key Exchange (IKE).
For example, create and configure policy number 15 with the characteristics shown:
RP/0/RP0/CPU0:router(config)# crypto isakmp policy 15RP/0/RP0/CPU0:router(config-isakmp)# hash md5RP/0/RP0/CPU0:router(config-isakmp)# authentication rsa-sigRP/0/RP0/CPU0:router(config-isakmp)# group 2RP/0/RP0/CPU0:router(config-isakmp)# lifetime 5000RP/0/RP0/CPU0:router(config-isakmp)# description this is a sample IKE policyRP/0/RP0/CPU0:router(config-isakmp)# exitISAKMP Profile Configuration Mode
Prompt: (config-isa-prof)
Enter ISAKMP profile configuration mode by using the crypto isakmp profile command in global configuration mode.
For example, define an ISAKMP profile:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# crypto isakmp profile vpnprofileRP/0/RP0/CPU0:router(config-isa-prof)#ISAKMP Profile Match Configuration
Prompt: (config-isa-prof-match)
Enter ISAKMP profile match configuration mode by using the match identity command in ISAKMP profile configuration mode.
For example, configure the group with the name "vpngroup":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# crypto isakmp profile vpnprofileRP/0/RP0/CPU0:router(config-isa-prof)# match identity group vpngroupRP/0/RP0/CPU0:router(config-isa-prof-match)#Key Chain Mode
Prompt: (config-client-keys)
Enter key chain mode by entering the key chain command in global configuration mode. In the prompt for this mode, the client is a protocol (such as IS-IS) or other type of client that uses a key.
For example, enter key chain mode for a client named "isis-keys":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# key chain isis-keysRP/0/RP0/CPU0:router(config-isis-keys)#Keychain-Key Mode
Prompt: (config-client-keys-key-id)
Enter keychain-key mode by entering the key command in key chain configuration mode. In the prompt for this mode, the client is a protocol (such as IS-IS) or other type of client that is using the key identified by the key-id argument.
For example, create a key for IS-IS with a value of 8:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# key chain isis-keysRP/0/RP0/CPU0:router(config-isis-keys)# key 8RP/0/RP0/CPU0:router(config-isis-keys-8)#Keyring Configuration Mode
Prompt: (config-keyring)
Enter keyring configuration mode by using the crypto keyring command in global configuration mode..
For example, use the crypto keyring command to enter keyring configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# crypto keyring vpnkeyRP/0/RP0/CPU0:router(config-keyring)#L2VPN Bridge Group Bridge Domain Configuration Mode
Prompt: (cofig-l2vpn-bg-bd)
Enter L2VPN bridge group bridge domain configuration mode by using the bridge-domain command in L2VPN bridge group configuration mode.
For example, configure a bridge with the instance named "bar":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# l2vpnRP/0/RP0/CPU0:router(config-l2vpn)# bridge group 1RP/0/RP0/CPU0:router(config-l2vpn-bg)# bridge-domain barRP/0/RP0/CPU0:router(config-l2vpn-bg-bd)#L2VPN Cross-Connect P2P Pseudowire Configuration Mode
Prompt: (config-l2vpn-xc-p2p)
Enter L2VPN cross-connect point-to-point pseudowire configuration mode by using the p2p command in L2VPN cross-connect configuration mode.
For example, enter L2VPN cross-connect P2P pseudowire configuration mode for the point-to-point cross connect instance named "rtrA_to_rtrB" :
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# l2vpn xconnect group l2vpnRP/0/RP0/CPU0:router(config-l2vpn-xc)# p2p rtrA_to_rtrBRP/0/RP0/CPU0:router(config-l2vpn-xc-p2p)#L2VPN Pseudowire Class Configuration Mode
Prompt: (cofig-l2vpn-pwc)
Enter Layer 2 VPN pseudowire class configuration mode by using the pw-class command in L2VPN configuration mode.
For example, enter L2VPN pseudowire class configuration mode for the pseudowire instance named "kanata01":
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# l2vpnRP/0/RP0/CPU0:router(config-l2vpn)# pw-class kanata01RP/0/RP0/CPU0:router(config-l2vpn-pwc)#Layer 2 Transport Configuration Mode
Prompt: (config-if-l2)
Enter Layer 2 transport configuration mode by using l2transport command in interface configuration mode and then configure Layer 2 transport parameters on a particular interface.
For example, enable Layer 2 transport port mode on an ATM interface and enter Layer 2 transport configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# interface ATM 0/2/0/0RP/0/RP0/CPU0:router(config-if)# l2transportRP/0/RP0/CPU0:router(config-if-l2)#Layer 2 Tunnel Protocol Class Configuration Mode
Prompt: (config-l2tp-class)
Enter L2TP configuration class mode to create a template of Layer 2 Tunnel Protocol (L2TP) control plane configuration settings by using the l2tp-class command.
For example, create a template named "cisco":
RP/0/RP0/CPU0:router(config)# l2tp-class ciscoRP/0/RP0/CPU0:router(config-l2tp-class)#L2VPN Configuration Mode
Prompt: (config-l2vpn)
Enter L2VPN configuration mode to configure Layer 2 Virtual Private Network (L2VPN) commands by using the l2vpn command.
For example, enter L2VPN configuration mode by configuring cross-connect commands:
RP/0/RP0/CPU0:router(config)# l2vpnRP/0/RP0/CPU0:router(config-l2vpn)#Line (Template) Configuration Mode
Prompt: (config-line)
Enter line (or line template) configuration mode by using a line command in global configuration mode. This mode applies in the environments for multicasting; IP addresses and services; and authentication, authorization, and accounting (AAA).
For line template configuration, you can add a variety of characteristics to terminal services, such as setting up physical and virtual terminal connections, managing terminals, and configuring virtual terminal line (vty) pools.
For example, use the width command to set the width of the display terminal to 99 characters:
RP/0/RP0/CPU0:router(config)# line defaultRP/0/RP0/CPU0:router(config-line)# width 99For example, specify the default outgoing transport protocol to be the Secure Shell (SSH) protocol by using the transport preferred command:
RP/0/RP0/CPU0:router(config)# line defaultRP/0/RP0/CPU0:router(config-line)# transport preferred sshLine-Protocol Tracking Configuration Mode
Prompt:(config-track-line-prot)
Enter line-protocol tracking configuration mode by using the type line-protocol state command in global configuration mode.
For example, enter line-protocol tracking configuration mode:
RP/0/0/CPU0:router(config)# track track12RP/0/0/CPU0:router(config-track)# type line-protocol stateRP/0/0/CPU0:router(config-track-line-prot)#Link Management Protocol Datalink Adjacency Configuration Mode
Prompt: (config-mpls-ouni-if-adj)
Enter the link management protocol (LMP) datalink adjacency configuration mode by using the lmp data-link adjacency command from the interface mode of MPLS O-UNI.
For example, configure the transport network address (TNA) for an Optical User Network Interface (O-UNI) datalink. Configure the datalink for POS interface 0/1/0/1 to the TNA 194.169.4.7:
RP/0/RP0/CPU0:router(config)# mpls optical-uniRP/0/RP0/CPU0:router(config-mpls-ouni)# interface pos 0/1/0/1RP/0/RP0/CPU0:router(config-mpls-ouni-if)# lmp data-link adjacencyRP/0/RP0/CPU0:router(config-mpls-ouni-if-adj)# tna ipv4 194.169.4.7List Tracking Configuration Mode
Prompt:(config-track-list)
Enter list tracking configuration mode from the global configuration mode.
For example, to show how to use the type list boolean command in creating a list of objects to be tracked:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# track LIST2RP/0/RP0/CPU0:router(config-track)# type list boolean andRP/0/RP0/CPU0:router(config-track-list)# object IPSec1 notRP/0/RP0/CPU0:router(config-track-list)# object IPSec2RP/0/RP0/CPU0:router(config-track-list)# object PREFIX1RP/0/RP0/CPU0:router(config-track-list)# exitLMP Neighbor Configuration Mode
Prompt: (config-npls-ouni-nbr-neighbor-name)
Enter link management protocol (LMP) neighbor configuration mode for optical user network interface (O-UNI) by using the lmp neighbor command in MPLS O-UNI configuration mode.
For example, configure a neighbor called "router1" with a node ID of 192.166.21.14:
RP/0/RP0/CPU0:router(config)# mpls optical-uniRP/0/RP0/CPU0:router(config-mpls-ouni)# lmp neighbor router1RP/0/RP0/CPU0:router(config-mpls-ouni-nbr-router1)# remote node-id 192.166.21.14Logging Correlator Apply Rule Configuration Mode
Prompt: (config-corr-apply-rule)
To apply and activate a correlation rule and enter correlation apply rule configuration mode, use the logging correlator apply rule command in global configuration mode.
For example, apply the logging correlator rule called "stateful1":
RP/0/RP0/CPU0:Router#configRP/0/RP0/CPU0:router(config)# logging correlator apply rule stateful1 RP/0/RP0/CPU0:router(config-corr-apply-rule)#Logging Correlator Apply Rule Set Configuration Mode
Prompt: (config-corr-apply-ruleset)
Enter logging correlator apply rule set mode from global configuration mode. The logging correlator apply ruleset command allows you to enter the config-corr-apply-ruleset submode to apply and activate rule sets.
For example, apply the logging correlator ruleset instance with the name "ruleset1":
RP/0/RP0/CPU0:Router# configRP/0/RP0/CPU0:Router(config)# logging correlator apply ruleset ruleset1RP/0/RP0/Router(config-corr-apply-ruleset)#Logging Suppression Apply Rule Configuration Mode
Prompt: (config-suppr-apply-rule)
Enter suppression apply rule configuration mode to apply and activate a suppression rule by using the logging suppression apply rule command in global configuration mode.
For example, apply the logging suppression rule to all locations on the router:
RP/0/RP0/CPU0:router(config)# logging suppress apply rule commitRP/0/RP0/CPU0:router(config-suppr-apply-rule)# all-of-router
Logging Suppression Rule Configuration Mode
Prompt: (config-suppr-rule)
Enter suppression rule configuration mode to configure a specific suppression rule by using the logging suppression rule command in global configuration mode.
For example, configure the logging suppression rule instance with the name "commit" to suppress all types of alarms:
RP/0/RP0/CPU0:router(config)# logging suppress rule commitRP/0/RP0/CPU0:router(config-suppr-rule)# all-alarmsMPP Configuration Mode
Prompt: (config-mpp)
Enter management plane protection(MPP) configuration mode by using the management-plane command in control plane configuration mode.
For example, enter MPP configuration mode:
RP/0/RP0/CPU0:router(config)# control-planeRP/0/RP0/CPU0:router(config-ctrl)# management-planeRP/0/RP0/CPU0:router(config-mpp)#MPP Inband Configuration Mode
Prompt: (config-mpp-inband)
Enter management plane protection (MPP) inband configuration mode by using the inband command in MPP configuration mode.
For example, enter MPP inband configuration mode:
RP/0/RP0/CPU0:router(config)# control-planeRP/0/RP0/CPU0:router(config-ctrl)# management-planeRP/0/RP0/CPU0:router(config-mpp)# inbandRP/0/RP0/CPU0:router(config-mpp-inband)MPP Inband Interface Configuration Mode
Prompt: (config-mpp-inband-interface-name)
Enter management plane protection (MPP) inband interface configuration mode by using the interface command in MPP inband configuration mode.
For example, enter MPP inband interface configuration mode:
RP/0/RP0/CPU0:router(config)# control-planeRP/0/RP0/CPU0:router(config-ctrl)# management-planeRP/0/RP0/CPU0:router(config-mpp)# inbandRP/0/RP0/CPU0:router(config-mpp-inband)# interface POS 0/1/0/1RP/0/RP0/CPU0:router(config-mpp-inband-POS0_1_0_1)#MPP Out-of-band Configuration
Prompt: (config-mpp-outband)
Enter management plane protection (MPP) out-of-band configuration mode by using the out-of-band command in MPP configuration mode.
For example, enter MPP out-of-band configuration mode:
RR/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# control-planeRP/0/RP0/CPU0:router(config-ctrl)# management-planeRP/0/RP0/CPU0:router(config-mpp)# out-of-bandRP/0/RP0/CPU0:router(config-mpp-outband)#MPP Out-of-band Interface Configuration Mode
Prompt: (config-mpp-outband-interface-name)
Enter management plane protection (MPP) out-of-band interface configuration mode by using the interface command in MPP out-of-band configuration mode.
For example, enter MPP out-of-band interface configuration mode:
RR/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# control-planeRP/0/RP0/CPU0:router(config-ctrl)# management-planeRP/0/RP0/CPU0:router(config-mpp)# out-of-bandRP/0/RP0/CPU0:router(config-mpp-outband)# interface POS 0/6/0/2RP/0/RP0/CPU0:router(config-mpp-outband-POS0_6_0_2)#MPLS LDP Interface Configuration Mode
Prompt: (config-ldp-if)
Enter multiprotocol label switching (MPLS) label distribution protocol (LDP) interface configuration mode from global configuration or MPLS LDP configuration mode to enable LDP on an interface or to configure interface-related LDP parameters by using the interface command.
For example, specify IP address 10.10.3.1 as the transport address on POS interface 0/1/0/0:
RP/0/RP0/CPU0:router(config)# mpls ldp interface POS 0/1/0/0RP/0/RP0/CPU0:router(config-ldp-if)# discovery transport-address 10.10.3.1MPLS LDP Label Accept Configuration Mode
Prompt: (config-ldp-lbl-acpt)
Enter multiprotocol label switching (MPLS) label distribution protocol (LDP) label accept configuration mode by using the label accept command in MPLS LDP configuration mode. In the label accept mode, you can control the receipt of labels (remote bindings) for a set of prefixes from a peer.
For example, enter the MPLS LDP label accept configuration mode :
RP/0/RP0/CPU0:router(config)# mpls ldpRP/0/RP0/CPU0:router(config-ldp)# label acceptRP/0/9/CPU0:LDP1(config-ldp-lbl-acpt)#For example, configure an inbound label filtering policy. In this example, an LSR is configured to accept and retain the following label bindings and prefixes:
•
•
•
RP/0/RP0/CPU0:router(config-ldp-lbl-acpt)# for pfx_acl_1 from 1.1.1.1RP/0/RP0/CPU0:router(config-ldp-lbl-acpt)# for pfx_acl_2 from 2.2.2.2RP/0/RP0/CPU0:router(config-ldp-lbl-acpt)# for pfx_acl_3 from 3.3.3.3MPLS LDP Label Advertise Configuration Mode
Prompt: (config-ldp-lbl-advt)
Enter multiprotocol label switching (MPLS) label distribution protocol (LDP) label advertise configuration mode by using the label advertise command in MPLS LDP configuration mode. In the label advertise mode, you can control the advertisement of local labels.
For example, enter the MPLS LDP label advertise configuration mode:
RP/0/RP0/CPU0:router(config)# mpls ldpRP/0/RP0/CPU0:router(config-ldp)# label advertiseRP/0/RP0/CPU0:router(config-ldp-lbl-advt)#MPLS LDP Label Configuration Mode
Prompt: (config-ldp-lbl)
Enter multiprotocol label switching (MPLS) label distribution protocol (LDP) label configuration mode by using the label command in MPLS LDP configuration mode. In this mode, you can enter a submode to perform the configuration tasks of either controlling the advertisement of local labels (outbound label filtering) or controlling the receipt of labels (remote bindings) for a set of prefixes from a given peer (inbound label filtering). These available submodes are called label advertise mode and label accept mode. Moreover, LDP local label allocation configuration can also be entered directly under this mode.
For example, enter MPLS LDP label configuration submode and then configure local label allocation policy, or enter advertise or accept configuration submodes:
RP/0/RP0/CPU0:router(config)# mpls ldpRP/0/RP0/CPU0:router(config-ldp)# labelRP/0/RP0/CPU0:router(config-ldp-lbl)#RP/0/RP0/CPU0:router(config-ldp-lbl)# label allocate for pfx_aclRP/0/RP0/CPU0:router(config-ldp-lbl)# acceptRP/0/RP0/CPU0:router(config-ldp-lbl-acpt)#RP/0/RP0/CPU0:router(config-ldp-lbl)# advertiseRP/0/RP0/CPU0:router(config-ldp-lbl-advt)#MPLS LDP Log Configuration Mode
Prompt: (config-ldp-log)
Enter multiprotocol label switching (MPLS) label distribution protocol (LDP) log configuration mode by using the mpls ldp log command in global configuration mode. These logs can be enabled to accumulate information related to a neighbor, graceful-restart, or session-protection.
For example, enter LDP log configuration mode:
RP/0/9/CPU0:LDP1(config)# mpls ldp logRP/0/9/CPU0:LDP1(config-ldp-log)#MPLS Operations Administration Maintenance Configuration Mode
Prompt: (config-oam)
Enter multiprotocol label switching (MPLS) operations administration maintenance (OAM) configuration mode by using the mpls oam command in global configuration mode. In MPLS OAM mode, you can configure OAM tasks for learning the routes that packets follow when travelling to their destinations, setting the echo packet revision, and enabling label switched path (LSP) verification commands.
For example, enable MPLS OAM:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(configure)# mpls oamRP/0/RP0/CPU0:router(config-oam)#MPLS Optical User Network Interface Configuration Mode
Prompt: (config-mpls-ouni)
Enter multiprotocol label switching (MPLS) optical user network interface (O-UNI) configuration mode by using the mpls optical-uni command in global configuration mode.
To configure or update a new or existing O-UNI-specific Link Management Protocol (LMP) neighbor and its associated parameters, use the lmp neighbor command in MPLS O-UNI configuration mode.
For example, create a neighbor called "router1". The CLI enters LMP neighbor configuration mode from O-UNI configuration mode. In this neighbor submode, configure a node ID of 192.68.22.12:
RP2/0/RP0/CPU0:router(config)# mpls optical-uniRP2/0/RP0/CPU0:router(config-mpls-ouni)# mpls optical-uni lmp neighbor router1RP2/0/RP0/CPU0:router(config-ouni-nbr-router1)# remote node-id 192.68.22.12MPLS O-UNI Interface Configuration Mode
Prompt: (config-mpls-ouni-if)
Enter multiprotocol label switching (MPLS) optical user network interface (O-UNI) interface configuration mode by using the interface command in MPLS optical UNI mode.
For example, configure the POS interface 0/1/0/0 to be a passive end of an O-UNI:
RP/0/RP0/CPU0:router(config)# mpls optical-uniRP/0/RP0/CPU0:router(config-mpls-ouni)# interface POS 0/1/0/1RP/0/RP0/CPU0:router(config-mpls-ouni-if)# passiveMPLS TE Configuration Mode
Prompt: (config-mpls-te)
Enter multiprotocol label switching (MPLS) traffic engineering(TE) configuration mode by using the mpls traffic-eng command in global configuration mode.
For example, enter the MPLS TE configuration mode:
RP/0/RP0/CPU0:router(config)# mpls traffic-engRP/0/RP0/CPU0:router(config-mpls-te)#MPLS TE Interface Configuration Mode
Prompt: (config-mpls-te-if)
Enter multiprotocol label switching (MPLS) traffic engineering(TE) interface configuration mode by using the interface command in MPLS TE configuration mode.
For example, enter the MPLS TE interface configuration mode:
RP/0/RP0/CPU0:router(config)# mpls traffic-engRP/0/RP0/CPU0:router(config-mpls-te)# interface pos 0/7/0/0RP/0/RP0/CPU0:router(config-mpls-te-if)#Multi-Area Interface Configuration Mode
Prompt: (config-ospf-ar-mif)Enter multi-area interface configuration mode to enable multiple adjacencies for different Open Shortest Path First (OSPF) areas by using the multi-area-interface command in the area configuration mode.
For example, after your create area 0 in area configuration mode, enter multi-area-interface mode to
configure POS interface 0/1/0/1:RP/0/RP0/CPU0:router(config)# router ospf 1RP/0/RP0/CPU0:router(config-ospf)# area 0RP/0/RP0/CPU0:router(config-ospf-ar)# multi-area-interface POS 0/1/0/1Multicast Routing Configuration Mode
Prompt: (config-mcast-ipv4)
Enter multicast routing configuration mode by using the multicast-routing command in global configuration mode.
For example, configure SSM service for the IP address range defined by access list 4:
RP/0/RP0/CPU0:router# ipv4 access-list 4 permit 224.2.151.141RP/0/RP0/CPU0:router(config)# multicast-routingRP/0/RP0/CPU0:router(config-mcast-ipv4)# ssm range 4For example, enable multicast routing on all interfaces, and then disable the feature on Packet-over-SONET/SDH (POS) interface 0/1/0/0:
RP/0/RP0/CPU0:router# multicast-routingRP/0/RP0/CPU0:router(config-mcast-ipv4)# interface all enableRP/0/RP0/CPU0:router(config-mcast-ipv4)# interface pos 0/1/0/0RP/0/RP0/CPU0:router(config-mcast-ipv4-if)# disableMPLS LDP Configuration Mode
Prompt: (config-ldp)
Enter multiprotocol label switching (MPLS) label distribution protocol (LDP) configuration mode by using the mpls ldp command in global configuration mode.
In MPLS LDP configuration mode, you can:
•
•
For example, enter MPLS LDP configuration mode and then enable graceful restart:
RP/0/RP0/CPU0:router(config)# mpls ldpRP/0/RP0/CPU0:router(config-ldp)# graceful-restartMPLSLM LPD Configuration Mode
Prompt: (config-ipsla-mplslm-lsp-lpd)
Enter multiprotocol label switching (MPLS) LSP path discover (LPD) configuration mode by using the path discover command in IP SLA MPLS LSP ping configuration mode.
For example, enter MPLSLM LPD configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# ipslaRP/0/RP0/CPU0:router(config-ipsla)# mpls lsp-monitorRP/0/RP0/CPU0:router(config-ipsla-mplslm)# monitor 1RP/0/RP0/CPU0:router(config-ipsla-mplslm-def)# type mpls lsp pingRP/0/RP0/CPU0:router(config-ipsla-mplslm-lsp-ping)# path discoverRP/0/RP0/CPU0:router(config-ipsla-mplslm-lsp-lpd)#Multicast Routing VRF Configuration Mode
Prompt: (config-mcast-vrf-instance-ipv4)
Enter multicast routing VRF configuration mode by using the vrf command in multicast routing configuration mode.
For example, enter multicast routing VRF configuration mode for the VRF instance named "vrf_A":
RP/0/RP0/CPU0:router# multicast-routingRP/0/RP0/CPU0:router(config-mcast)# vrf vrf_ARP/0/RP0/CPU0:router(config-mcast-vrf_A-ipv4)#Multicast Routing VRF Interface Configuration Mode
Prompt: (config-mcast-vrf-instance-ipv4-if)
Enter multicast routing VRF interface configuration mode by using the interface command in multicast routing VRF configuration mode.
For example, configure POS interface 0/1/0/1 for the VRF instance named "vrf_A":
RP/0/RP0/CPU0:router# multicast-routingRP/0/RP0/CPU0:router(config-mcast)# vrf vrf_ARP/0/RP0/CPU0:router(config-mcast-vrf_A-ipv4)#interface POS 0/1/0/1 RP/0/RP0/CPU0:router(config-mcast-vrf_A-ipv4-if)#
Neighbor Address Family Configuration Mode
Prompt: (config-bgp-nbr-af)
Enter neighbor address family configuration mode by using the address-family command in address BGP neighbor configuration mode.
For example, enter the neighbor address family configuration mode for the IPv4 multicast address family:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# router bgp 1RP/0/RP0/CPU0:router(config-bgp)# neighbor 10.0.0.1RP/0/RP0/CPU0:router(config-bgp-nbr)# remote-as 1RP/0/RP0/CPU0:router(config-bgp-nbr)# address-family ipv4 multicastRP/0/RP0/CPU0:router(config-bgp-nbr-af)#Neighbor Configuration Mode
Prompts: (config-bgp-nbr)
Enter neighbor configuration mode by using the neighbor command in router configuration mode.
For example, enter the neighbor configuration mode for a neighbor 10.0.0.1:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# router bgp 1RP/0/RP0/CPU0:router(config-bgp)# neighbor 10.0.0.1RP/0/RP0/CPU0:router(config-bgp-nbr)#Neighbor Group Address Family Configuration Mode
Prompt: (config-bgp-nbrgrp-af)
Enter neighbor group address family configuration mode by using the neighbor-group command in router configuration mode.
For example, enter the neighbor group address family configuration mode for the neighbor group named "rrclients" :
RP/0/RP0/CPU0:router(config-bgp)# neighbor-group rrclientsRP/0/RP0/CPU0:router(config-bgp-nbrgrp)# remote-as 65534RP/0/RP0/CPU0:router(config-bgp-nbrgrp)# address-family ipv4 unicastRP/0/RP0/CPU0:router(config-bgp-nbrgrp-af)#Neighbor Group Configuration Mode
Prompt: (config-bgp-nbrgrp)
Enter neighbor group configuration mode by using the neighbor-group command in router configuration mode.
For example, enter the neighbor group configuration mode for the neighbor group named "rrclients":
RP/0/RP0/CPU0:router(config-bgp)# neighbor-group rrclientsRP/0/RP0/CPU0:router(config-bgp-nbrgrp)#NTP Configuration Mode
Prompt: (config-ntp)
Enter Network Time Protocol (NTP) configuration by using the ntp command in global configuration mode. In NTP configuration mode, you can configure the NTP services for a router.
For example, configure the system to allow itself to be synchronized by a peer from an access list named "access1" and to restrict access to allow time requests only from an access list named "access2":
RP/0/RP0/CPU0:router(config)# ntpRP/0/RP0/CPU0:router(config-ntp)# access-group peer access1RP/0/RP0/CPU0:router(config-ntp)# access-group serve-only access2For example, configure the router to use the IP address of Packet-over-SONET/SDH (POS) interface 0/0/0/1 as the source address of all outgoing NTP packets:
RP/0/RP0/CPU0:router(config)# ntpRP/0/RP0/CPU0:router(config-ntp)# source POS 0/0/0/1Nonstateful Correlation Rule Configuration Mode
Prompt: (config-corr-rule-nonst)
Enter nonstateful correlation rule configuration mode by using the logging correlator rule type command in global configuration mode. Nonstateful rules result in correlations that are fixed and immutable after the correlation occurs.
For example, enter the nonstateful correlation rule configuration mode:
RP/0/RP0/CPU0:Router#configRP/0/RP0/CPU0:Router(config)#logging correlator rule state_rule type nonstat$RP/0/RP0/CPU0:Router(config-corr-rule-nonst)#Non-Root Cause Configuration Mode
Prompt: (config-corr-rule-st-nonrc)
Enter non-root-cause configuration mode and specify a non-root-cause alarm by using the nonrootcause command in stateful or nonstateful correlation rule configuration modes.
For example, enter the non-root-cause configuration mode:
RP/0/RP0/CPU0:router(config)# logging correlator rule state_rule type statefulRP/0/RP0/CPU0:router(config-corr-rule-st)# nonrootcauseRP/0/RP0/CPU0:router(config-corr-rule-st-nonrc)#NTP Interface Configuration Mode
Prompt: (config-ntp-int)
Enter Network Time Protocol (NTP) interface configuration mode by using the ntp interface command in global configuration mode.
For example, configure Packet-over-SONET/SDH (POS) interface 0/0/0/1 to send NTP packets:
RP/0/RP0/CPU0:router(config)# ntp interface POS 0/0/0/1RP/0/RP0/CPU0:router(config-ntp-int)#O-UNI LMP Datalink Adjacency Configuration Mode
Prompt: (config-mpls-ouni-if-adj)
Enter optical user network interface (O-UNI) link management protocol (LMP) datalink adjacency configuration mode by using the lmp data-link adjacency command in MPLS O-UNI interface configuration mode.
For example, associate a neighbor named "router1" with the datalink specified as POS interface 0/1/0/1:
RP/0/RP0/CPU0:router(config)# mpls optical-uniRP/0/RP0/CPU0:router(config-mpls-ouni)# interface POS0/1/0/1RP/0/RP0/CPU0:router(config-mpls-ouni-if)# lmp data-link adjacencyRP/0/RP0/CPU0:router(config-mpls-ouni-if-adj)# neighbor router1O-UNI LMP Neighbor Adjacency Configuration Mode
Prompt: (config-mpls-ouni-if-adj)
Enter optical user network interface (O-UNI) link management protocol (LMP) neighbor adjacency configuration mode for MPLS O-UNI neighbor interfaces by using the lmp data-link adjacency command in the interface submode of MPLS O-UNI configuration mode.
For example, configure a remote interface ID of 2 for POS interface 0/2/0/0:
RP/0/RP0/CPU0:router(config)# mpls optical-uniRP/0/RP0/CPU0:router(config-mpls-ouni)# interface pos 0/2/0/0RP/0/RP0/CPU0:router(config-mpls-ouni-if)# lmp data-link adjacencyO-UNI LMP Neighbor Configuration Mode
Prompt: (config-ouni-nbr-neighbor)
Enter optical user network interface (O-UNI) link management protocol (LMP) neighbor configuration mode by using the lmp neighbor command in MPLS O-UNI configuration mode. The name of the neighbor subsequently appears in the O-UNI LMP neighbor prompt.
For example, configure a routed IPCC for a neighbor called router1, whose destination IP address is the node ID of the neighbor router1 on an interface determined dynamically by an IP routing protocol:
RP/0/RP0/CPU0:router(config)# mpls optical-uniRP/0/RP0/CPU0:router(config-mpls-ouni)# lmp neighbor router1RP/0/RP0/CPU0:router(config-ouni-nbr-router1)# ipcc routedPOS Interface Configuration Mode
Prompt: (config-if-pos)
Enter the Packet-over-SONET/SDH (POS) interface configuration mode by using the pos command in interface configuration mode.
For example, enter the POS interface configuration mode for 0/1/0/2:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# interface POS 0/1/0/2RP/0/RP0/CPU0:router(config-if)# posRP/0/RP0/CPU0:router(config-if-pos)#Parameter Map Connection Configuration Mode
Prompt: (config-parammap-connection)
Enter parameter map connection configuration mode by using the parameter-map type connection command in firewall administration configuration mode. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.
For example:
RP/0/0/CPU0:router# service firewall attach location 0/1/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The parameter-map type connection command is a SanOS (Linux) command that runs on the VFW application.
For example, create a connection type parameter map with the name "TCP_MAP" and configure TCP, IP, and other settings for the map:
firewall/Admin(config)# parameter-map type connection TCP_MAPfirewall/Admin(config-parammap-conn) #
Parameter Map DNS Configuration Mode
Prompt: (config-parammap-dns)
Enter parameter map dns configuration mode by using the parameter-map type dns command in the firewall administration configuration mode. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.
For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The parameter-map type dns command is a SanOS (Linux) command that runs on the VFW application.
For example, configure DNS settings for the map named "IMS1", :
firewall/Admin(config)# parameter-map type dns DNS1firewall/Admin(config-parammap-dns) #
Parameter Map SIP Configuration Mode
Prompt: (config-parammap-sip)
Enter parameter map sip configuration mode by using the parameter-map type sip command in firewall administration configuration mode. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the
Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The parameter-map type sip command is a SanOS (Linux) command that runs on the VFW application.
For example, configure various settings for the type parameter map named "SIP_INSPECT_L7PARAMETER":
firewall/Admin(config)# parameter-map type sip SIP_INSPECT_L7PARAMETERfirewall/Admin(config-parammap-sip) #
Parameter Map Skinny Configuration Mode
Prompt: (config-parammap-skinny)
Enter parameter map skinny configuration mode by using the parameter-map type skinny command in firewall administration configuration mode. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.
For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The parameter-map type skinny command is a SanOS (Linux) command that runs on the VFW application.
For example, configure various settings for the type parameter map named "SCCP_INSPECT_L7PARAMETER":
firewall/Admin(config)# parameter-map type skinny SCCP_INSPECT_L7PARAMETERfirewall/Admin(config-parammap-skinny) #
Peer Configuration Mode
Prompt: (config-msdp-peer)
Enter peer configuration mode by using the peer command in router configuration mode.
For example, configure the router named "router.cisco.com" to be the default peer to the local router:
RP/0/RP0/CPU0:router(config)# router msdpRP/0/RP0/CPU0:router(config-msdp)# peer 172.16.2.3RP/0/RP0/CPU0:router(config-msdp-peer)# default-peer router.cisco.comPifib Policer Global Configuration Mode
Prompt: (config-pifib-policer-global)
Enter pifib policer global configuration mode by using the lpts pifib hardware police command in global configuration mode.
For example, configure the LPTS policer for the bgp-known flow type for all line cards:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# lpts pifib hardware policeRP/0/RP0/CPU0:router(config-pifib-policer-global)#Pifib Policer-Per-Node Configuration Mode
Prompt: (config-pifib-policer-per-node)
Enter pifib policer-per-node configuration mode by using the lpts pifib hardware police location from global configuration mode.
For example, configure LPTS policer for the Intermediate System-to-Intermediate System (IS-IS)-known flow type for a specific line card:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# lpts pifib hardware police location 0/2/CPU0RP/0/RP0/CPU0:router(config-pifib-policer-per-node)#Placement Program Configuration Mode
Prompt: (config-place)
Enter placement program mode for a route processor (RP) by using the placement program command in global configuration mode. This command lets you assign a process to an RP or DRP. In placement program mode, you can assign process affinities (preferences) by using the affinity command.
For example, enter the placement program mode for the program called "pim," and then configure affinity attributes for that program.
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# placement program defaultRP/0/RP0/CPU0:router(config-place)# affinity location-set 0/1/CPU0 attract 100Policy Map Class Configuration Mode
Prompt: (config-pmap-c)
Enter policy map class configuration mode by using the class command in policy map configuration mode.
For example, first guarantee that 50 percent of the interface bandwidth goes to a class named "class1," and then guarantee that 10 percent of the interface bandwidth to a class named "class2":
RP/0/RP1/CPU0:router(config)# policy-map policy1RP/0/RP1/CPU0:router(config-pmap)# class class1RP/0/RP1/CPU0:router(config-pmap-c)# bandwidth percent 50RP/0/RP1/CPU0:router(config-pmap-c)# exitRP/0/RP1/CPU0:router(config-pmap)# class class2RP/0/RP1/CPU0:router(config-pmap-c)# bandwidth percent 10Policy Map Configuration Mode
Prompt: (config-pmap)
Enter policy map configuration mode to create a policy map or modify an existing policy map by using the policy-map command in global configuration mode.
To attach a QoS policy to a specific POS interface, you must enter interface configuration mode from global configuration mode by identifying the interface and then using the service-policy command to attach an existing policy.
For example, create a policy named "policy1":
RP/0/RP1/CPU0:router(config)# policy-map policy1RP/0/RP1/CPU0:router(config-pmap)#Policy Map HTTP Inspection Configuration Mode
Prompt: (config-pmap-ins-http)
Enter policy map http inspection configuration mode by using the policy-map type inspect http command in firewall administration configuration mode. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the Cisco XR 12000 Series Routerto the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.
For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The policy-map type inspect http is a SanOS (Linux) command that runs on the VFW application.
For example, create an HTTP deep packet and access policy map inspection HTTP configuration mode:
firewall/Admin(config)# policy-map type inspect http all-match HTTP_INSPECT_L7POLICY firewall/Admin(config-pmap-ins-http)#
Policy Map SIP Inspection Configuration Mode
Prompt: (config-pmap-ins-sip)
Enter policy map sip inspection configuration mode by using the policy-map type inspect sip command in firewall administration configuration mode. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the
Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The policy-map type inspect sip command is a SanOS (Linux) command that runs on the VFW application.
For example, create a Session Initiation Protocol (SIP) inspection policy map and access policy map SIP inspection configuration mode:
host/Admin(config)# policy-map type inspect sip all-match SIP_INSPECT_L7POLICYhost/Admin(config-pmap-ins-sip) #Policy Map Skinny Inspection Configuration Mode
Prompt: (config-pmap-skinny-ins)
Enter policy map skinny inspection configuration mode by using the policy-map type inspect skinny command in firewall administration configuration mode.. Before you run this command, you must attach the route processor to the Virtual Firewall (VFW) application using the service firewall attach location command.
The service firewall attach location command attaches the multiservice blade (MSB) of the Cisco XR 12000 Series Router to the VFW application. After you run the command, use admin as the username and password combination to get a prompt in the VFW application.
For example:
RP/0/0/CPU0:router# service firewall attach location 0/3/CPU0firewall login: adminPassword:Cisco Application Control Software (ACSW)TAC support: http://www.cisco.com/tacCopyright (c) 2002-2006, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained herein are owned byother third parties and are used and distributed under license.Some parts of this software are covered under the GNU PublicLicense. A copy of the license is available athttp://www.gnu.org/licenses/gpl.html.firewall/Admin#The policy-map type inspect skinny command is a SanOS (Linux) command that runs on the VFW application.
For example, create a Layer 7 Skinny Client Protocol (SCCP) inspection policy map and access policy map skinny inspection configuration mode:
firewall/Admin(config)# policy-map type inspect skinny first-match SCCP_INSPECT_L7POLICY firewall/Admin(config-pmap-skinny-ins) #
Process Configuration Mode
The applicable process actions actually occur in administration EXEC mode. The object of these process actions are instances of OSPF or OSPFv3 processes. In admin EXEC mode, a variety of process control commands are available.
Profile Configuration Mode
Prompt: (config-profilename)
Enter profile configuration mode by using the crypto ipsec profile command in global configuration mode.
For example, create a crypto profile named "newprofile," set the PFS to group2, and configure the profile as a dynamic profile:
RP/0/RP0/CPU0:router(config)# crypto ipsec profile newprofileRP/0/RP0/CPU0:router(config-newprofile)# set pfs group2RP/0/RP0/CPU0:router(config-newprofile)# set type dynamicRP/0/RP0/CPU0:router(config-newprofile)#Public Key Chain Configuration Mode
Prompt: (config-pubkey)
Enter public key chain configuration mode by using the rsa-pubkey command in keyrign configuration mode.
In public key configuration mode, you can specify the Rivest, Shamir, and Adelman (RSA) public keys for other IP Security (IPSec) peers that you subsequently configure manually.
For example, specify the RSA manual key of an IPSec peer:
RP/0/RP0/CPU0:router(config)# crypto keyring vpnkeyringRP/0/RP0/CPU0:router(config-keyring)# rsa-pubkey name r1RP/0/RP0/CPU0:router(config-pubkey)#Public Key Configuration Mode
Prompt: (config-pubkey-key)
Enter public key configuration mode by using the key command in public key chain configuration mode.
For example, specify the RSA manual key associated with the address 10.5.5.1:
RP/0/RP0/CPU0:router(config)# crypto keyring vpnkeyRP/0/RP0/CPU0:router(config-keyring)# rsa-pubkey address 10.5.5.1RP/0/RP0/CPU0:router(config-pubkey)# keyRP/0/RP0/CPU0:router(config-pubkey-key)#For example, specify the RSA manual key associated with the hostname r1:RP/0/RP0/CPU0:router(config)# crypto keyring vpnkeyRP/0/RP0/CPU0:router(config-keyring)# rsa-pubkey name r1RP/0/RP0/CPU0:router(config-pubkey)# keyRP/0/RP0/CPU0:router(config-pubkey-key)#QoS Signaling Configuration Mode
Prompt: (config-sbc-sbe-qos-fax)
Enter quality-of-service (QoS) signaling configuration mode by using the qos sig command in SBC SBE configuration mode.
For example, configure the QoS sig profile to mark packets with a DSCP value:
RP/0/RP0/CPU0:router(config)# sbc MySbc sbeRP/0/RP0/CPU0:router(config-sbc-sbe)# qos sig residentialRP/0/RP0/CPU0:router(config-sbc-sbe-qos-sig)# marking dscpQoS Video Configuration Mode
Prompt: (config-sbc-sbe-qos-video)
Enter QoS video configuration mode by using the qos video command in SBC SBE configuration mode.
For example, configure the QoS video profile to mark packets with a DSCP value:
RP/0/RP0/CPU0:router(config)# sbc MySbc sbeRP/0/RP0/CPU0:router(config-sbc-sbe)# qos video residentialRP/0/RP0/CPU0:router(config-sbc-sbe-qos-video)# marking dscpQoS Voice Configuration Mode
Prompt: (config-sbc-sbe-qos-voice)
Enter QoS video configuration mode by using the qos voice residential command in SBC SBE configuration mode.
For example, configure the QoS voice profile to mark packets with a DSCP value:
RP/0/RP0/CPU0:router(config)# sbc MySbc sbeRP/0/RP0/CPU0:router(config-sbc-sbe)# qos voice residentialRP/0/RP0/CPU0:router(config-sbc-sbe-qos-voice)# marking dscpRADIUS Server Group Configuration Mode
Prompt: (config-sg-radius)
Enter remote authentication dial-in user service (RADIUS) server group configuration modeby using the aaa group server radius command in global configuration mode . This command lets you group different server hosts into distinct lists.
For example, enter RADIUS server group configuration mode, and then specify the IP address of an external RADIUS server to be 192.168.60.15:
RP/0/RP0/CPU0:router(config)# aaa group server tacacs+ t1RP/0/RP0/CPU0:router(config-sg-tacacs)# server 192.168.60.15Resource Reservation Protocol Configuration Mode
Prompt: (config-rsvp)
Enter resource reservation protocol (RSVP) configuration mode from global configuration mode by using the rsvp command. The mode is used to enter the interface submode for RSVP.
For example, enter RSVP configuration mode:
RP/0/RP0/CPU0:router(config)# rsvpRP/0/RP0/CPU0:router(config-rsvp)Route Distinguisher Configuration Mode
Prompt: (config-rd)
To create a route distinguisher (RD) and enter RD configuration mode, use the rd-set command in global configuration mode. An RD set is a 64-bit value prepended to an IPv4 address to create a globally unique Border Gateway Protocol (BGP) VPN-IPv4 address. The values for an RD can have a variety of formats. The example here shows ASN format with a wildcard character. This format can appear as, for example, 10002:255.255.0.0. For a list of all the formats, see the rd-set command description in the command reference.
For example, create an RD called vpn-1 in ASN format. The end-set and end-policy commands are used to end the RD definition and the route policy configuration and then return to global configuration mode:
RP/0/RP0/CPU0:router(config)# rd-set vpn-1RP/0/RP0/CPU0:router(config-rd)# 10.0.0.2:777RP/0/RP0/CPU0:router(config-rd)# end-setRP/0/RP0/CPU0:router(config-rd)# end-policyRoute-Policy Configuration Mode
Prompt: (config-rpl)
Enter route-policy configuration mode by using the route-policy command in global configuration mode. In route-policy configuration mode, you can create or modify a route policy by entering successive commands and then terminating the configuration by entering the end-policy command.
For example, create a simple policy named "drop-all":
RP/0/RP0/CPU0:router(config)# route-policy drop-allRP/0/RP0/CPU0:router(config-rpl)# dropRP/0/RP0/CPU0:router(config-rpl)# end-policyRoute Tracking Configuration Mode
Prompt:(config-track-route)
Enter route tracking configuration mode by using the track route command in global configuration mode.
For example, enter the route tracking configuration mode:
RRP/0/RP0/CPU0:router(config)# track PREFIX1RRP/0/RP0/CPU0:router(config-track)# type route reachabilityRP/0/RP0/CPU0:router(config-track-route)#Router Configuration Mode
Prompts:
•
•
•
•
•
•
Enter router configuration mode by using the router command with a routing protocol name in global configuration mode. The router command also lets you enter static route configuration mode.
Router configuration mode lets you select and configure a routing protocol, such as BGP, OSPF, or IS-IS. For example, the following generic command syntax shows how to enter router configuration mode:
RP/0/RP0/CPU0:router(config)# router protocolRP/0/RP0/CPU0:router(config-protocol)#For example, place the router configuration mode for BGP:
RP/0/RP0/CPU0:router# configurationRP/0/RP0/CPU0:router(config)# router bgp 140RP/0/RP0/CPU0:router(config-bgp)#For example, enter the router configuration mode for static routes:
RP/0/0/CPU0:ios(config)# router staticRP/0/0/CPU0:ios(config-static)#Router HSRP Configuration Mode
Prompt: (config-hsrp)
Enter router Hot Standby Router Protocol (HSRP) configuration mode by using the router hsrp command in global configuration mode.
For example, enter HSRP router configuration mode by entering the command sequence router hsrp:
RP/0/RP0/CPU0:router(config)# router hsrp
config-fmm:router(config-hsrp)#Router IGMP Configuration Mode
Prompt: (config-igmp)
Enter router Internet Group Management Protocol (IGMP) configuration mode for multicasting by using the router IGMP command in global configuration mode or for a specific interface, the interface IGMP configuration mode.
For example, enter IGMP configuration mode:
RP/0/RP0/CPU0:router(config)# router igmpRP/0/RP0/CPU0:router(config-igmp)#Router IGMP Interface Configuration Mode (IPv4)
Prompt: (config-igmp-default-if)
Enter Internet Group Management Protocol (IGMP) interface configuration mode by using the interface command in router IGMP configuration mode.
For example, enter router IGMP configuration mode for the POS interface 0/1/0/1:
RP/0/RP0/CPU0:router(config)# router igmpRP/0/RP0/CPU0:router(config-igmp)# interface pos 0/1/0/1RP/0/RP0/CPU0:router(config-igmp-default-if)#Router MLD Configuration Mode
Prompt: (config-mld)
Enter the Multicast Listener Discovery (MLD) configuration mode by entering the router mld command in global configuration mode. MLD only supports IPv6.
For example, enter MLD configuration mode:
RP/0/RP0/CPU0:router(config)# router mldRP/0/RP0/CPU0:router(config-mld)#Router MLD Interface Configuration Mode (IPv6)
Prompt: (config-mld-default-if)
Enter Multicast Listener Discovery (MLD) interface configuration mode by entering the interface command in router MLD configuration mode.
For example, enter MLD configuration mode for the POS interface 0/1/0/1:
RP/0/RP0/CPU0:router(config)# router mldRP/0/RP0/CPU0:router(config-mld)# interface pos 0/1/0/1RP/0/RP0/CPU0:router(config-mld-default-if)#Router MSDP Configuration Mode
Prompt: (config-msdp)
Enter Multicast Source Discovery Protocol (MSDP) configuration mode by using the router msdp command in global configuration mode.
For example, enter the MSDP configuration mode:
RP/0/RP0/CPU0:router(config)# router msdpRP/0/RP0/CPU0:router(config-msdp)#Router MSDP Peer Configuration Mode
Prompt: (config-msdp-peer)
Enter the router Multicast Source Discovery Protocol (MSDP) peer configuration mode by using the peer command in router MSDP configuration mode.
For example, enter MSDP peer configuration mode for peer 10.0.5.4:
RP/0/RP0/CPU0:router(config)# router msdpRP/0/RP0/CPU0:router(config-msdp)# peer 10.0.5.4
RP/0/RP0/CPU0:router(config-msdp-peer)#Router PIM Default IPv4 Configuration Mode
Prompt: (config-pim-default-ipv4)
Enter router Protocol Independent Multicast (PIM) default ipv4 configuration mode by using the router pim or router pim address-family ipv4 command in global configuration mode.
For example, enter router PIM IPv4 configuration mode:
RP/0/RP0/CPU0:router(config)# router pimRP/0/RP0/CPU0:router(config-pim-default-ipv4)#Router PIM Default IPv6 Configuration Mode
Prompt: (config-pim-default-ipv6)
Enter router Protocol Independent Multicast (PIM) IPv6 configuration mode by using the router pim address-family ipv6 command in global configuration mode.
For example, enter router PIM IPv6 configuration mode:
RP/0/RP0/CPU0:router(config)# router pim address-family ipv6RP/0/RP0/CPU0:router(config-pim-default-ipv6)#Router PIM IPv4 Interface Configuration Mode
Prompt: (config-pim-ipv4-if)
Enter router Protocol Independent Multicast (PIM) IPv4 interface configuration mode by using the interface command in router PIM default IPv4 configuration mode.
For example, configure the POS interface 0/1/0/0 to the PIM domain border:
RP/0/RP0/CPU0:router(config)# router pimRP/0/RP0/CPU0:router(config-pim-default-ipv4)# interface POS 0/1/0/0RP/0/RP0/CPU0:router(config-pim-ipv4-if)#Router Virtual Router Redundancy Configuration Mode
Prompt: (config-vrrp)
Enter router Virtual Router Redundancy Protocol (VRRP) configuration mode by using the router vrrp command in global configuration mode.
For example, enter VRRP router configuration mode:
RP/0/RP0/1:router(config)# router vrrpRP/0/RP0/1:router(config-vrrp)#RSVP Authentication Configuration Mode
Prompt:(config-rsvp-auth)
Enter RSVP authentication configuration mode by using the rsvp authentication command in global configuration mode.
For example, enter RSVP authentication configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# rsvp authenticationRP/0/RP0/CPU0:router(config-rsvp-auth)#RSVP Interface Configuration Mode
Prompt: (config-rsvp-if)
Enter Resource Reservation Protocol (RSVP) interface configuration mode by using the rsvp interface command either in global configuration mode.
For example, enter the RSVP interface configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# rsvp interface pos 0/3/0/0RP/0/RP0/CPU0:router(config-rsvp-if)#RSVP Neighbor Authentication Configuration Mode
Prompt: (config-rsvp-nbor-auth)
Enter RSVP neighbor authentication configuration modeby using the rsvp neighbor command in global configuration mode.
For example, enter RSVP neighbor authentication configuration mode for IP address 1.1.1.1:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# rsvp neighbor 1.1.1.1 authenticationP/0/RP0/CPU0:router(config-rsvp-nbor-auth)#RSVP Neighbor Configuration Mode
Prompt: (config-rsvp-nbor)
Enter RSVP neighbor configuration mode by using the rsvp neighbor command in global configuration mode.
For example, configure the RSVP neighbor with IP address 1.1.1.1 and enter rsvp neighbor configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# rsvp neighbor 1.1.1.1RP/0/RP0/CPU0:router(config-rsvp-nbor)#Sampler Map Configuration Mode
Prompt: (config-sm)
Enter sampler map configuration submode for a specific monitor map using the sampler-map command in global configuration mode.
For example, use the sampler-map command to enter sampler map configuration submode for a monitor map called "map1:"
RP/0/RP0/CPU0:router # configureRP/0/RP0/CPU0:router(config)# sampler-map map1RP/0/RP0/CPU0:router(config-sm)#SBC Call Admission Control Policy Configuration Mode
Prompt: (config-sbc-sbe-cacpolicy)
Enter SBC call admission control (CAC) policy set configuration mode by using the cac-policy-set command in signaling border element (SBE) configuration mode. If the CAC policy does not exist, this command creates it. If a policy is marked as complete, you cannot change it. Further, a policy set cannot be destroyed if it is marked as complete.
For example, create an empty (new) policy set with an ID of 1 for the SBC service instance named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)#SBC CAC Table Configuration Mode
Prompt: (config-sbc-sbe-cacpolicy-cactable)
Enter SBC call admission control (CAC) table configuration mode by using the cac-policy-table command in CAC policy configuration mode. A CAC table exists within the context of a CAC policy set. The CAC policy set exists within a signaling border element (SBE). If the named CAC table does not exist, this command creates it.
If a policy set to which a table belongs is marked as being complete, you cannot modify the CAC table. Also, a CAC table cannot be destroyed if its context is that of a complete policy.
For example, create the CAC table named "MyCacTable" for the CAC policy set whose ID is 1. The SBC service instance is named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTableRP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)#SBC CAC Table Entry Configuration Mode
Prompt: (config-sbc-sbe-cacpolicy-cactable-entry)
Enter the mode for specifying entries in an SBC SBE CAC table for an CAC policy by using the entry command in CAC table configuration mode.
For example, configure the next table to process in a new CAC table called MyCacTable, and identify that table as MyCacTable2:
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTableRP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# action next-table MyCacTable2SBC Configuration Mode
Prompt: (config-sbc)
Enter session border controller (SBC) service configuration mode by using the sbc command in global configuration mode. If the specified SBC service does not exist, the first-time use of the sbc command with the new name creates the instance of that SBC service.
For example, create the SBC instance named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBCRP/0/0/CPU0:router (config-sbc)#SBC DBE Configuration Mode
Prompt: (config-sbc-dbe)
Enter the configuration mode for a particular instance of a data border element (DBE) by using the dbe command in SBC configuration mode. The DBE mode and applicable commands pertain to the media gateway tasks of SBC.
If the specified DBE does not exist, the first-time use of the dbe command with the new name creates the new DBE. If you plan to create both a DBE and an SBE on a card, you must create the DBE first.
For example, enter the DBE configuration mode for an SBC service instance named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBCRP/0/0/CPU0:router(config-sbc)# dbeRP/0/0/CPU0:router (config-sbc-dbe)#SBC DBE Media Address Configuration Mode
Prompt: (config-sbc-dbe-media-address)
Enter SBC data border element (DBE) media address pool configuration mode and create an address pool for use with IPv4 by using the media-address ipv4 command in DBE configuration mode.
For example, configure an address pool for use for the IPv4 address 10.1.0.0.:
RP/0/0/CPU0:router(config)# sbc mySBC dbeRP/0/0/CPU0:router(config-sbc-dbe)# media-address ipv4 10.1.0.0RP/0/0/CPU0:router(config-sbc-dbe-media-address)#SBC H.323 Adjacency Configuration Mode
Prompt: (config-sbc-sbe-adj-h323)
Enter the mode for configuring a signaling border element (SBE) H.323 adjacency within an SBC service instance by using the adjacency h323 command in SBE configuration mode. If a particular adjacency does not exist, the first-time identification of the adjacency to this command creates it.
For example, create an H.323 adjacency called h323ToIsp42 for the SBC service instance called mySBC:
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)#SBC Local Billing Configuration Mode
Prompt: (config-sbc-sbe-lclbill)
Enter the configuration mode for a local billing policy by using the billing-local command in SBE configuration mode.
For example, enter the local billing mode for the SBC service instance named "mySBC" but do so from the global configuration mode:
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# billing-localRP/0/0/CPU0:router(config-sbc-sbe-lclbill)SBC Media Gateway Configuration Mode
Prompts:
•
•
Enter media gateway configuration mode for a signaling border element (SBE) by using the media-gateway command in SBE configuration mode. This command takes an IPv4 H.248 control IP address as an argument.
For example, enter media gateway configuration mode for the media gateway with IP address 10.0.0.1:
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# media-gateway ipv4 10.0.0.1RP/0/0/CPU0:router(config-sbc-sbe-mg)#For example, enter media gateway configuration mode for the media gateway with IP address 10.0.0.1, and then specify the following codecs for the media gateway:
RP/0/RP0/CPU0:router(config)# sbc mySBC sbeRP/0/RP0/CPU0:router(config-sbc-sbe)# media-gateway ipv4 10.0.0.1RP/0/RP0/CPU0:router(config-sbc-sbe-media-gateway)# codecs "m=audio 6000 RTP/AVP 4,a=rtpmap:0 PCMU/8000"SBC RADIUS Account Configuration Mode
Prompt: (config-sbc-sbe-acc)
Enter the mode for creating and configuring a RADIUS accounting client by using the radius-account command in signaling border element (SBE) configuration mode. Each client maintains a list of servers consisting of one active server and a set of standby servers. The list is traversed by the client in the order of user-configured priorities. If the named client does not exist, using the radius-account command creates it.
If call detail reports (CDRs) must be sent to multiple RADIUS servers simultaneously, you can configure an SBC instance to have multiple clients (each with its own ordered set of servers).
An accounting client sends a CDR to the active server. If the active server cannot be contacted, a standby server is used.
For example, create a RADIUS accounting client named "radius1." The radius1 client belongs to the SBC service instance named "mySBC":
RP/0/RP0/CPU0:router(config)# sbc mySBC sbeRP/0/RP0/CPU0:router(config-sbc-sbe)# radius-account radius1RP/0/RP0/CPU0:router(config-sbc-sbe-acc)#SBC RADIUS Accounting Server Configuration Mode
Prompt: (config-sbc-sbe-acc-ser)
Enter the mode for configuring ordered lists of RADIUS accounting servers by using the server command in RADIUS accounting configuration mode. You can specify any number of accounting servers. When a call is terminated, a call detail report (CDR) is sent to the server that has the highest priority.
For example, create an instance of the accounting servers named "castor" and "pollux" for the RADIUS accounting client named "radius1." The name of the SBC service instance is "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1 RP/0/0/CPU0:router(config-sbc-sbe-acc)# server castorRP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# endRP/0/0/CPU0:router(config-sbc-sbe-acc)# server polluxRP/0/0/CPU0:router(config-sbc-sbe-acc-ser)#SBC RADIUS Authentication Configuration Mode
Prompt: (config-sbc-sbe-auth)
Enter the SBC RADIUS authentication configuration mode by using the radius authentication command in SBC SBE configuration mode.
For example, configure an authentication server named "bengal." The name of the SBC service instance is "mySBC":
RP/0/RP0/CPU0:router(config)# sbc mySBC sbeRP/0/RP0/CPU0:router(config-sbc-sbe)# radius authenticationRP/0/RP0/CPU0:router(config-sbc-sbe-auth)# server bengalRP/0/RP0/CPU0:router(config-sbc-sbe-auth-ser)#SBC RADIUS Authentication Server Configuration Mode
Prompt: (config-sbc-sbe-auth-ser)
Enter the SBC RADIUS authentication server configuration mode by using the server command in RADIUS authentication configuration mode.
For example, configure authentication servers named "castor" and "pollux" for RADIUS authorization. Identify the server by IP address 10.0.0.1. The name of the SBC service instance is mySBC:
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# radius authenticationRP/0/0/CPU0:router(config-sbc-sbe-auth)# server castorRP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# address ipv4 10.0.0.1RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# endRP/0/0/CPU0:router(config-sbc-sbe-auth)# server polluxRP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# address polluxSBC Remote Billing Configuration Mode
Prompt: (config-sbc-sbe-rmtbill)
Enter the configuration mode for a remote billing policy by using the billing remote command in signaling border element (SBE) configuration mode.
For example, enter the remote billing mode for the SBC service instance named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# billing remoteRP/0/0/CPU0:router(config-sbc-sbe-rmtbill)
SBC Routing Policy Number Analysis Configuration Mode
Prompt: (config-sbc-sbe-rtgpolicy-natable)
Enter the configuration mode of a number analysis table within the context of a signaling border element (SBE) routing policy set. In this mode, you can create or configure a table that consists of all of the following types of content:
•
•
•
•
If the identified number analysis table does not exist, this command creates it. Within a policy set, a table name must be unique across all tables.
For example, create a number analysis table named "MyNaTable" with entries that are to be matched against the entire dialed number. In this case, the number of the routing policy is 1, and the SBC service instance is named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySbc sbeRP/0/0/CPU0:router(config-sbc-sbe)# routing-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTableRP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)#SBC Routing Policy Number Analysis Entry Configuration Mode
Prompt: (config-sbc-sbe-rtgpolicy-natable-entry)
Enter the mode for configuring an entry to a number analysis table within the context of an SBE routing policy set by using the entry command. The mode in which you use the entry command is a number analysis table configuration mode.
To use the entry command, first specify a number analysis table that applies to a destination number, destination prefix, source adjacency, or source account. When you enter one of the commands from the preceding list, the prompt shows only that you are configuring for a number analysis table (not the type of number analysis table), and when you subsequently use the entry command for one of these types of number analysis constituents, the prompt changes to show only "entry." The examples illustrate this progression.
Within a number analysis table, each entry must have a unique number.
For example, create the first entry (entry number = 1) in a new destination prefix number analysis table named "MyNaTable." The MyNaTable table belongs to routing policy set 1:
RP/0/0/CPU0:router(config)# sbc mySbc sbeRP/0/0/CPU0:router(config-sbc-sbe)# routing-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-prefix-table MyNaTableRP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)#Create an entry for a source adjacency number analysis table called MyOtherNaTable. The MyOtherNaTable table belongs to a routing policy set with an ID of 1.
RP/0/0/CPU0:router(config)# sbc mySbc sbeRP/0/0/CPU0:router(config-sbc-sbe)# routing-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-adjacency-table MyOtherNaTableRP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)#SBC Routing Policy Routing Table Configuration Mode
Prompt: (config-sbc-sbe-rtgpolicy-rtgtable)
Enter the SBE routing policy routing table configuration mode by using any of the following commands in routing policy mode:
•
•
•
•
•
Any of these commands places the CLI in the routing table mode for specifying entries within a routing table. The command you can subsequently use for configuring a table entry is the entry command.
For example, create a source address table called MyRtgTable. The SBC service instance is called mySBC, and the routing policy set ID is 1:
RP/0/0/CPU0:router(config)# sbc mySbc sbeRP/0/0/CPU0:router(config-sbc-sbe)# routing-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-address-table MyRtgTableRP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#SBC Routing Policy Routing Table Entry Configuration Mode
Prompt: (config-sbc-sbe-rtgpolicy-rtgtable-entry)
Enter the mode for specifying entries in a routing policy routing table by using the entry command in the routing table mode for a particular routing policy. A particular routing table mode is entered by using one of the following commands in routing policy mode:
•
•
•
•
•
For example, create an entry with a value of 1 in a new round-robin routing table called MyRtgTable. The SBC service instance is called mySBC, and the routing policy set ID is 1:
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# routing-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-round-robin-table MyRtgTableRP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-enable)#SBC SBE Routing Policy Configuration Mode
Prompt: (config-sbc-sbe-rtgpolicy)
Enter the mode for configuring a routing policy within a signaling border element (SBE) entity by using the routing-policy-set command in SBE configuration mode. If the policy does not exist, using this command creates it. A policy set cannot be destroyed or modified if that policy set is marked as complete.
For example, create an empty policy set identified by the number 1 for the SBC instance named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# routing-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)#SBC SIP Adjacency Configuration Mode
Prompt: (config-sbc-sbe-adj-sip)
Enter the configuration mode for Session Initiation Protocol (SIP) by using the adjacency sip command in signaling border element (SBE) configuration mode. If this SIP adjacency does not exist, using this command creates it.
For example, create an SIP adjacency called SipToIsp42 for the SBC service instance named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBC sbeRP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)#SBC SBE Configuration Mode
Prompt: (config-sbc-sbe)
Enter the signaling border element (SBE) configuration mode for an SBC instance by using the sbe command in SBC configuration mode. The SBE mode and applicable commands pertain to the signaling aspects of a particular SBC instance.
In the current release, you can configure:
•
•
For example, enter SBE configuration mode for the SBC service instance named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBCRP/0/0/CPU0:router(config-sbc)# sbeRP/0/0/CPU0:router(config-sbc-sbe)#SBC Virtual DBE Configuration Mode
Prompt: (config-sbc-dbe-vdbe)
Enter the mode for specifying virtual data border element (vDBE) parameters by using the vdbe command in the DBE configuration mode for a specific SBC service instance.
Note
For example, enter vDBE configuration mode for an SBC service instance named "mySBC":
RP/0/0/CPU0:router(config)# sbc mySBC dbeRP/0/0/CPU0:router(config-sbc-dbe)# vdbeRP/0/0/CPU0:router(config-sbc-dbe-vdbe)#SBC Virtual DBE H248 Configuration Mode
Prompt: (config-sbc-dbe-vdbe-h248)
Enter the mode for specifying an H248 controller by using the controller h248 command in virtual data border element (vDBE) configuration mode.
Note
For example, configure two DBE H248 controllers within the SBC instance named "mySBC." Identify the first controller by the unique index number 1. Identify the second controller by the number 2:
RP/0/0/CPU0:router(config)# sbc mySBC dbe vdbeRP/0/0/CPU0:router(config-sbc-dbe-vdbe)# controller h248 1RP/0/0/CPU0:router(config-sbc-dbe-vdbe-h248)# endRP/0/0/CPU0:router(config-sbc-dbe-vdbe)# controller h248 2RP/0/0/CPU0:router(config-sbc-dbe-vdbe-h248)#SBE Body-Filter Profile Body Configuration Mode
Prompt: (config-sbc-sbe-sip-bfp)
Enter body-filter-profile configuration mode by using the body-filter-profile command in SBC SBE configuration mode.
For example, set the action for body element type application/ISUP in body-filter profile bf1 to strip:
switch# configswitch(config)# sbc mySbcswitch(config-sbc)# sbeswitch(config-sbc-sbe)# sip body-filter-profile bf1switch(config-sbc-sbe-sip-bfp)# body application/ISUPswitch(config-sbc-sbe-sip-bfp-ele)# action stripSBE Call Policy Configuration Mode
Prompt: (config-sbc-sbe-rtgpolicy)
Enter SBE routing policy configuration mode by using the call-policy-set command in SBC SBE configuration mode.
For example, create an empty policy set, identified by number 1, on mySbc:
RP/0/0/CPU0:router# configureRP/0/0/CPU0:router(config)# sbc mySbcRP/0/0/CPU0:router(config-sbc)# sbeRP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)#SBE Header Profile Header Configuration Mode
Prompt: (config-sbc-sbe-sip-hdr-ele)
Enter SBE header profile header configuration mode by using the header-profile command in SBC SBE configuration mode.
For example, set the action for header element type To in parameter profile headerprof1 to as-profile:
switch# configswitch(config)# sbc mySbcswitch(config-sbc)# sbeswitch(config-sbc-sbe)# sip header-profile headerprof1switch(config-sbc-sbe-sip-hdr)# header Toswitch(config-sbc-sbe-sip-hdr-ele)# action as-profileSBE Parameter Profile Parameter Configuration Mode
Prompt: (config-sbc-sbe-sip-prm-ele)
Enter SBE parameter profile parameter configuration mode by using the parameter-profile command in SBC SBE configuration mode.
For example, set the action for parameter element type user in parameter profile paramprof1 to add-not-present:
switch# configswitch(config)# sbc mySbcswitch(config-sbc)# sbeswitch(config-sbc-sbe)# sip parameter-profile paramprof1switch(config-sbc-sbe-sip-prm)# parameter userswitch(config-sbc-sbe-sip-prm-ele)# action add-not-present value phoneSBE SIP FQDN Mapping Configuration Mode
Prompt: (config-sbc-sbe-ipfqdn)
Enter SBE SIP fully qualified domain name (FQDN) mapping configuration mode by using the sip ip-fqdn-mapping command in SBE configuration mode and map a FQDN to an IP address.
For example, map IP address 11.22.33.41 to domain name example.sbc1.com in both directions:
switch# configswitch(config)# sbc mySbcswitch(config-sbc)# sbeswitch(config-sbc-sbe)# sip ip-fqdn-mapping 1switch(config-sbc-sbe-ipfqdn)# ipv4 11.22.33.41 example.sbc1.com both-waysSBE SIP Method Configuration Mode
Prompt: (config-sbc-sbe-sip-mth)
Enter SBE SIP method configuration mode by using the sip method-profile command in SBC SBE configuration mode.
For example, configure the SIP method profile with the instance named "test1":
RP/0/0/CPU0:router# configureRP/0/0/CPU0:router(config)# sbc mySbcRP/0/0/CPU0:router(config-sbc)# sbeRP/0/0/CPU0:router(config-sbc-sbe)# sip method-profile test1RP/0/0/CPU0:router(config-sbc-sbe-sip-mth)#SBE SIP Ping-able Configuration Mode
Prompt: (config-sbc-sbe-sip-ping-able)
Enter SBE SIP ping-able configuration mode by using the ping-able command in SBE SIP configuration mode. If a configuration is loaded on top of an active configuration, warnings are generated to notify that the configuration cannot be modified. If you must modify the entire configuration by loading a new one, please remove the existing configuration first.
For example, set the adjacency to poll the remote peer by sending SIP options pings:
RP/0/0/CPU0:router# configureRP/0/0/CPU0:router(config)# sbc mySbcRP/0/0/CPU0:router(config-sbc)# sbeRP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# ping-ableRP/0/0/CPU0:router(config-sbc-sbe-sip-ping-able)#SBE SIP Timer Configuration Mode
Prompt: (config-sbc-sbe-sip-tmr)
Enter SBE SIP timer configuration mode by using the sip timer command in SBC SBE configuration mode.
For example, configure SBC to time out invite transactions after 60 seconds:
RP/0/0/CPU0:router# configureRP/0/0/CPU0:router(config)# sbc mySbcRP/0/0/CPU0:router(config-sbc)# sbeRP/0/0/CPU0:router(config-sbc-sbe)# sip timerRP/0/0/CPU0:router(config-sbc-sbe-sip-tmr) # invite-timeout 60Secure Domain Router Configuration Mode
Prompt: (admin-config-sdr:router)
Enter secure domain router (SDR) configuration mode by entering the sdr command in administrative configuration mode. After you name a new or an existing SDR, the CLI enters SDR configuration mode.
For example, create an SDR named "testbed":
RP/0/RP0/CPU0:router# adminRP/0/RP0/CPU0:router(admin)# configureRP/0/RP0/CPU0:router(admin-config)# sdr testbedRP/0/RP0/CPU0:router(admin-config-sdr:testbed)#Serial Configuration Mode
Prompt: (config-if-serial)
Enter serial configuration mode by using the serial command in interface configuration mode and then configure parameters for a particular serial interface.
For example, enter serial configuration mode:
RP/0/RP0/CPU0:router(config-if)# serialRP/0/RP0/CPU0:router(config-if-serial)#Server-group Configuration Mode
Prompt: (config-sg-radius)
Enter server-group configuration mode by using the aaa group server radius command.
For example, configure the AAA group server named "radgroup1," which comprises three member servers:
RP/0/RP0/CPU0:router(config)# aaa group server radius radgroup1RP/0/RP0/CPU0:router(config-sg-radius)# server 10.0.0.5 auth-port 1700 acct-port 1701RP/0/RP0/CPU0:router(config-sg-radius)# server 10.0.0.10 auth-port 1702 acct-port 1703RP/0/RP0/CPU0:router(config-sg-radius)# server 10.0.0.20 auth-port 1705 acct-port 1706Server-group Private Configuration Mode
Prompt: (config-sg-radius-private)
Enter RADIUS server-group private configuration mode by using the server-private (RADIUS) command.
For example, define the group1 RADIUS group server, associate private servers with it, and to enter RADIUS server-group private configuration mode:
RP/0/RP0/CPU0:router(config)# aaa group server radius group1RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 timeout 5RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 retransmit 3RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 key cokeRP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 auth-port 300RP/0/RP0/CPU0:router(config-sg-radius-private)#Session Group Configuration Mode
Prompt: (config-bgp-sngrp)
Enter the session group configuration mode by using the session-group command in router configuration mode. In session group configuration mode, you can configure values that are independent of address family configuration. In turn, neighbors can inherit these configured values.
For example, define a session group named "session1," and then configure neighbor 172.168.40.24 to use session1; consequently, the session1 configuration also takes effect on the neighbor:
RP/0/RP0/CPU0:router(config)# router bgp 1RP/0/RP0/CPU0:router(config-bgp)# session-group session1RP/0/RP0/CPU0:router(config-bgp-sngrp)# advertisement-interval 40RP/0/RP0/CPU0:router(config-bgp-sngrp)# timers 30 90RP/0/RP0/CPU0:router(config-bgp-sngrp)# exitRP/0/RP0/CPU0:router(config-bgp)# neighbor 172.168.40.24RP/0/RP0/CPU0:router(config-bgp-nbr)# remote-as 2RP/0/RP0/CPU0:router(config-bgp-nbr)# use session-group session1RP/0/RP0/CPU0:router(config-bgp-nbr)# exitSNMP Interface Configuration Mode
Prompt: (config-snmp-if)
Enter Simple Network Management Protocol (SNMP) interface configuration mode by using the snmp-server interface command in global configuration mode. The snmp-server commands enable SNMP on Management Ethernet interfaces by default.
For example, enter SNMP interface configuration mode for Packet-over-SONET/SDH (POS) interface instance 0/0/1/0:
RP/0/RP0/CPU0:Router(config)# configureRP/0/RP0/CPU0:Router(config)# snmp-server interface pos 0/0/1/0SNMP VRF Configuration Mode
Prompt: (config-snmp-vrf)
Enter Simple Network Management Protocol (SNMP) VRF configuration mode by using the snmp-server VRF command in global configuration mode. The snmp-server commands enable SNMP on Management Ethernet interfaces by default.
For example, enter SNMP VRF configuration mode for the VRF instance "vrfa":
RP/0/RP0/CPU0:Router(config)# configureRP/0/RP0/CPU0:Router(config)# snmp-server interface vrf vrfa
SONET/SDH Configuration Mode
Prompt: (config-sonet)
Enter Synchronous Optical Network /Synchronous Digital Hierarchy (SONET/SDH) configuration mode from global configuration mode by using the controller sonet command and providing it with the interface identifier.
For example, all packets are looped back to the SONET/SDH controller:
RP/0/RP0/CPU0:router(config)# controller sonet 0/2/0/2RP/0/RP0/CPU0:router(config-sonet)# loopback internalSONET/SDH Path Configuration Mode
Prompt: (config-sonet-path)
Enter SONET/SDH path configuration mode by using the path command in SONET/SDH configuration mode.
For example, enter the SONET/SDH path configuration mode:
RP/0/0/CPU0:router(config)# controller sonet 0/2/0/2RP/0/0/CPU0:router(config-sonet)# pathRP/0/0/CPU0:router(config-sonet-path)#Stateful Correlation Rule Configuration Mode
Prompt: (config-corr-rule-st)
Enter the stateful correlation rule configuration mode by using the logging correlator rule type command in global configuration mode.
For example, enter the stateful correlation rule configuration mode:
RP/0/RP0/CPU0:router(config)# logging correlator rule state_rule type stateful RP/0/RP0/CPU0:router(config-corr-rule-st)# rootcause L2 SONET_LOCAL ALARMSubinterface Configuration Mode
Prompt: (config-subif)
Enter the interface submode from global configuration mode to configure a variety of technologies, such as virtual local area network (VLAN), ATM and SONET.
For example, first create of a Ten Gigabit Ethernet subinterface with ID 0/2/0/4.1, and then specify a VLAN of 10. Lastly, configure an interface IP address of 10.0.0.1/24:
RP/0/RP0/CPU0:router# configure terminalRP/0/RP0/CPU0:router(config)# interface TenGigE 0/2/0/4.1 RP/0/RP0/CPU0:router(config-subif)# dot1q vlan 10RP/0/RP0/CPU0:router(config-subif)# ip addr 10.0.0.1/24Synchronous Transport Signal Path Configuration Mode
Prompt: (config-stsPath)
Enter Synchronous Transport Signal (STS) path configuration mode by using the sts command in SONET controller configuration mode.
mode, overhead, threshold, width
For example, enter the STS path configuration mode:
RP/0/RP0/CPU0:router# configureRP/0/RP0/CPU0:router(config)# controller SONET 0/2/0/0RP/0/RP0/CPU0:router(config-sonet)# sts 1RP/0/RP0/CPU0:router(config-stsPath)#T1 Channel Group Configuration Mode
Prompt: (config-t1-channel_group)
Enter channel group configuration mode for a T1 controller using the channel-group command in T1 configuration mode.
For example, enter channel group configuration mode for channel group number 5 on T1 interface 0/6/0/0/10:
RP/0/RP0/CPU0:router(config)# controller t1 0/6/0/0/10RP/0/RP0/CPU0:router(config-t1)# channel-group 5RP/0/RP0/CPU0:router(config-t1-channel_group)#T1 Configuration Mode
Prompt: (config-t1)
Enter T1 configuration mode by using the controller t1 command in global configuration mode and then configure parameters for a particular T1 controller instance.
For example, enter T1 configuration mode for T1 interface 0/6/2/0:
RP/0/RP0/CPU0:router(config)# controller t1 0/6/2/0RP/0/RP0/CPU0:router(config-t1)#T3 Configuration Mode
Prompt: (config-t3)
Enter T3 configuration mode by using the controller e3 command in global configuration mode and then configure parameters for a particular T3 controller instance.
For example, enter T3 configuration mode for T3 interface 0/6/0/0:
RP/0/RP0/CPU0:router(config)# controller t3 0/6/0/0RP/0/RP0/CPU0:router(config-t3)#Task Group Configuration Mode
Prompt: (config-tg)
Enter task group configuration mode from global configuration mode.
For example, create the following description of a task group alpha named "this is a sample taskgroup":
RP/0/RP0/CPU0:router(config)# taskgroup alphaRP/0/RP0/CPU0:router(config-tg)# description this is a sample taskgroupTACACS+ Group Configuration Mode
Prompt: (config-sg-tacacs+)
Enter Terminal Access Controller Access-Control System (TACACS+) server group configuration mode from global configuration mode by using the aaa group server tacacs+ command.
For example, enter TACACS+ server group configuration mode, and then specify the IP address of an external TACACS+ server to be 192.168.60.15:
RP/0/RP0/CPU0:router(config)# aaa group server tacacs+RP/0/RP0/CPU0:router(config-sg-tacacs+)# server 192.168.60.15Template Configuration Mode
Prompt: (config-TPL)
Enter template configuration mode by using the template command with the name of a new or existing template in global configuration mode. In template configuration mode, you can specify the details of a template. Subsequently, the template can be applied to a router or to a particular interface.
For example, enter template configuration mode by creating a template named "pre-pos" (for preconfiguring a POS interface). The configuration consists of the preconfigured Packet-over-SONET/SDH (POS) interface 0/1/0/1:
RP/0/RP0/CPU0:router(config)# template pre-posRP/0/RP0/CPU0:router(config-TPL)# interface preconfigure pos0/1/0/0RP/0/RP1/CPU0:router(config-if-pre)# ipv4 address 10.3.32.154 255.0.0.0Track Configuration Mode
Prompt:(config-track)
Enter track configuration mode by using the track command in global configuration mode.
For example, to show clearance of the configured delay, which had been set to notify the network administrator of a change in the up state of the interface every five seconds:
RP/0/RP0/CPU0:router# configurationRP/0/RP0/CPU0:router(config)# track atm1235RP/0/RP0/CPU0:router(config-track)# clear delay up 5Transport Configuration Mode
Prompt: (config-transport)
Enter transport configuration mode from global configuration mode by using the crypto ipsec transport command. In transport configuration mode, you can specify the crypto profile to use in IPSec processing and then determine which traffic is protected and how that traffic is protected.
For example, configure the crypto profile as shown:
RP/0/RP0/CPU0:router(config)# crypto ipsec transportRP/0/RP0/CPU0:router(config-transport)# profile pn1RP/0/RP0/CPU0:router(config)# interface tunnel-ipsec0RP/0/RP0/CPU0:router(config-if)# profile pn1Trustpoint Configuration Mode
Prompt: (config-trustp)
Enter the trustpoint configuration mode to create a new trustpoint or identify an existing trustpoint for you to modify by using the crypto ca trustpoint command in global configuration mode.
For example, use the crypto ca trustpoint command to create a trustpoint called "myca":
RP/0/RP0/CPU0:router(config)# crypto ca trustpoint myca RP/0/RP0/CPU0:router(config-trustp)# enrollment url http://myca.mydomain.comTunnel Template Configuration Mode
Prompt: (config-tuntem)
Enter tunnel-template configuration mode to create tunnel templates for L3VPNs by using the tunnel-template command in global configuration mode.
For example, to create template1:
RP/0/RP0/CPU0:router(config)# tunnel-template template1RP/0/RP0/CPU0:router(config-tuntem)#MTU 576User Group Configuration Mode
Prompt: (config-ug)
Enter usergroup configuration mode by using the usergroup command in global configuration mode.
For example, create a description of a user group alpha named "this is a sample user group":
RP/0/RP0/CPU0:router(config)# usergroup alphaRP/0/RP0/CPU0:router(config-ug)# description this is a sample user groupFor example, add permissions from the user group beta to the user group alpha:
RP/0/RP0/CPU0:router(config)# usergroup alphaRP/0/RP0/CPU0:router(config-ug)# inherit usergroup betaUsername Configuration Mode
Prompt: (config-un)
Enter username configuration mode by using the username command in global configuration mode.
For example, create a login password for the user named "user1" by running the password command. For user1, create an unencrypted password to be pwd1:
RP/0/RP0/CPU0:router(config)# username user1RP/0/RP0/CPU0:router(config-un)# password 0 pwd1For example, enter username configuration mode by specifying a user named "enzo," and then create a group named "ferrari":
RP/0/RP1/CPU0:router(config)# username enzoRP/0/RP1/CPU0:router(config-un)# group ferrariVirtual-link Configuration Mode
Prompt: (config-router-ar-vl)
Enter virtual link configuration mode from the area command mode for OSPFv3. Provide the router ID of the virtual link neighbor as input to the virtual-link command. For OSPF, you can set the estimated time required to send a link-state update packet on the interface.
For OSPFv3, you can:
•
•
•
•
For example, after you specify area 0, enter virtual-link mode by specifying the router ID 10.1.0.1, configure a transmit delay of 50 seconds:
RP/0/RP1/CPU0:router(config)# router ospf 10RP/0/RP1/CPU0:router(config-ospf)# area 0RP/0/RP1/CPU0:router(config-ospf-ar)# virtual-link 10.0.0.1RP/0/RP1/CPU0:router(config-ospf-ar-vl)# transmit-delay 50VPNv4 Address Family Configuration Mode
Prompt: (config-protocol-af)
Enter VPNv4 address family configuration mode by using the address-family vpnv4 unicast command in router configuration mode for the selected protocol.
For example, enter address family VPNv4 unicast mode:
RP/0/RP0/CPU0:router(config-bgp)# address-family vpnv4 unicastRP/0/RP0/CPU0:router(config-bgp-af)#VPNv4 Neighbor Address Family Configuration Mode
Prompt: (config-protocol-nbr-af)
Enter the neighbor address family configuration mode for VPNv4 unicast by using the neighbor command in router configuration mode for the chosen protocol. (See the example.)
For example, from BGP router configuration mode, enter neighbor configuration mode for 10.1.1.1. Enter the neighbor group address family configuration mode for VPNv4 unicast:
RP/0/RP0/CPU0:router(config-bgp)# neighbor 10.1.1.1RP/0/RP0/CPU0:router(config-bgp-nbr)# address-family vpnv4 unicastRP/0/RP0/CPU0:router(config-bgp-nbr-af)#VPNv6 Address Family Configuration Mode
Prompt: (config-protocol-af)
Enter the VPNv6 address family configuration mode by using the address-family vpnv6 unicast command in router configuration mode for the selected protocol.
For example, enter address family VPNv6 unicast mode:
RP/0/RP0/CPU0:router(config-bgp)# address-family vpnv6 unicastRP/0/RP0/CPU0:router(config-bgp-af)#VPNv6 Neighbor Address Family Configuration Mode
Prompt: (config-protocol-nbr-af)
Enter the neighbor address family configuration mode for VPNv6 unicast by using the neighbor command in router configuration mode for the selected protocol.
For example, from BGP router configuration mode, enter neighbor configuration mode for 10.1.1.1. Enter the neighbor address family configuration mode for VPNv6 unicast:
RP/0/RP0/CPU0:router(config-bgp)# neighbor 10.1.1.1RP/0/RP0/CPU0:router(config-bgp-nbr)# address-family vpnv6 unicastRP/0/RP0/CPU0:router(config-bgp-nbr-af)#VRF Address Family Configuration Mode
Prompt: (config-protocol-vrf-af)
Enter the address family submode for VPN routing and forwarding (VRF) by using the address family command in VRF configuration mode for the selected protocol.
For example, enter the configuration submode for a BGP VRF instance named "vrfA":
RP/0/RP0/CPU0:router(config-bgp)# vrf vrfARP/0/RP0/CPU0:router(config-bgp-vrf)# address-family ipv4 unicastRP/0/RP0/CPU0:router(config-bgp-vrf-af)#VRF Configuration Mode
Prompt: (config-protocol-vrf)
Enter VPN routing and forwarding (VRF) configuration mode by using the vrf command in the router configuration mode for the chosen protocol.
For example, in router BGP configuration mode, enter VRF mode for the instance named "new1":
RP/0/RP0/CPU0:router (config-bgp)# vrf new1RP/0/RP0/CPU0:router (config-bgp-vrf)#VRF Neighbor Configuration Mode
Prompt: (config-protocol-vrf-nbr)
Enter the neighbor submode for VPN routing and forwarding (VRF) by using the neighbor command in VRF configuration mode. The protocol is whatever is specified for the router configuration mode.
For example, enter the configuration submode for a BGP VRF instance named "new1" for the neighbor at 10.1.1.1:
RP/0/RP0/CPU0:router(config-bgp)# vrf newb1RP/0/RP0/CPU0:router(config-bgp-vrf)# neighbor 10.1.1.1RP/0/RP0/CPU0:router(config-bgp-vrf-nbr)#VRF-Specific NTP Configuration Mode
Prompt: (config-ntp-vrf)
Enter VRF-specific Network Time Protocol (NTP) configuration mode by using the ntp vrf command in the global configuration mode.
For example, enter a VRF-specific NTP interface configuration mode:
RP/0/RP0/CPU0:router(config)# ntp vrf vrf_10RP/0/RP0/CPU0:router(config-ntp-vrf)#VRRP Interface Configuration Mode
Prompt: (config-vrrp-if)
Enter Virtual Router Redundancy Protocol (VRRP) interface configuration mode by using the interface command in router VRRP configuration mode.
For example, enable VRRP on Ten Gigabit Ethernet interface 0/3/0/0. The VRRP virtual router identifier is 1, and 10.0.1.20 is the IP address of the virtual router:
RP/0/RP0/1:router(config)# router vrrpRP/0/RP0/1:router(config-vrrp)# interface TenGigE 0/3/0/0RP/0/RP0/1:router(config-vrrp-if)# vrrp 1 ipv4 10.0.1.20WAN Physical Controller Configuration Mode
Prompt: (config-wanphy)
Enter WAN physical controller configuration mode by using the controller wanphy command in global configuration mode, and then configure parameters for a particular 10-Gigabit Ethernet WAN physical controller instance.
For example, to enter the controller mode for the WAN physical controller on interface 0/6/0/0:
RP/0/RP0/CPU0:Router # configureRP/0/RP0/CPU0:Router(config)# controller wanphy 0/6/0/0RP/0/RP0/CPU0:Router(config-wanphy)#
