Switching Services Commands: access-list rate-limit Through lane fssrp

This chapter describes the function and syntax of the switching services commands: access-list rate-limit through lane fssrp. For more information about these commands, refer to the corresponding chapter of the Cisco IOS Switching Services Command Reference.

access-list rate-limit

To configure an access list for use with committed access rate (CAR) policies, use the access-list rate-limit global configuration command. To remove the access list from the configuration, use the no form of this command.

access-list rate-limit acl-index {precedence | mac-address | exp | mask mask}

no access-list rate-limit acl-index {precedence | mac-address | exp | mask mask}

Syntax Description


acl-index	Specifies the access list number. Classification options are as follows: •For IP precedence, use any number from 1 to 99. •For MAC address, use any number from 100 to 199. •For MPLS experimental field, use any number from 200 to 299.
precedence	Specifies the IP precedence. Valid values are from 0 to 7.
mac-address	Specifies the MAC address.
exp	Specifies the MPLS experimental field. Valid values are from 0 to 7.
mask mask	Specifies the mask. Use this option if you want to assign multiple IP precedences or MPLS experimental field values to the same rate-limit access list.

address-family

To enter the address family submode for configuring routing protocols such as BGP, RIP, and static routing, use the address-family command in address family configuration submode. To disable the address family submode for configuring routing protocols, use the no form of this command.

Syntax Description


vpnv4	Configures sessions that carry customer VPN-IPv4 prefixes, each of which has been made globally unique by adding an 8-byte route distinguisher.
ipv4	Configures sessions that carry standard IPv4 address prefixes.
unicast	(Optional) Specifies unicast prefixes.
vrf vrf-name	Specifies the name of a VPN routing and forwarding instance (VRF) to associate with submode commands.

append-after

To insert a path entry after a specified index number, use the append-after IP explicit path configuration command.

Syntax Description


index	Previous index number. Valid values are from 0 to 65534.
command	An IP explicit path configuration command that creates a path entry. (Use the next-address command to specify the next IP address in the explicit path.)

atm-address

To override the control ATM address of an MPC or MPS, use the atm-address command in interface configuration mode. To revert to the default address, use the no form of this command.

Syntax Description

bgp default route-target filter

atm-address	Control ATM address.

To enable automatic BGP route-target community filtering, use the bgp default route-target filter router configuration command. To disable this feature, use the no form of this command.

Syntax Description

bgp scan-time

To configure scanning intervals of BGP routers for next hop validation or to decrease import processing time of Virtual Private Network version 4 (VPNv4) routing information, use the bgp scan-time command in address family or router configuration mode. To return the scanning interval of a router to its default scanning interval of 60 seconds, use the no form of this command.

Syntax Descriptionno bgp scan-time


import	(Optional) Configures import processing of VPNv4 unicast routing information from BGP routers into routing tables.
scanner-interval	Specifies the scanning interval of BGP routing information. Valid values used for selecting the desired scanning interval are from 5 to 60 seconds. The default is 60 seconds.

Defaults

Command Modes

Command History

Usage Guidelines

Release	Modification
12.07(T)	This command was introduced.

Entering the no form of this command does not disable scanning, but removes it from the output of the show running-config command.

Examples

In the following router configuration example, the scanning interval for next hop validation of IPv4 unicast routes for BGP routing tables is set to 20 seconds:

In the following address family configuration example, the scanning interval for next hop validation of address family VPNv4 unicast routes for BGP routing tables is set to 45 seconds:

In the following address family configuration example, the scanning interval for importing address family VPNv4 routes into IP routing tables is set to 30 seconds:

Related Commands

cable bundle

Command	Description
address-family vpnv4	Places the router in address family configuration mode for configuring routing sessions such as BGP, RIP, or static routing sessions that use standard VPNv4 address prefixes.

To configure a cable interface to belong to an interface bundle, use the cable bundle interface configuration command. To delete a cable interface bundle definition, use the no form of this command.

Syntax Description

cable helper-address

n	Specifies the bundle identifier. Valid range is from 1 to 255.
master	(Optional) Defines the specified interface as the master.

To specify a destination address for User Datagram Protocol (UDP) broadcast (DHCP) packets, use the cable helper-address interface configuration command.To disable this feature, use the no form of this command.

Syntax Description


ip-address	The IP address of a DHCP server. Based on whether you add the host or cable-modem keyword at the end of the cable helper-address command, it is the IP address of the MSOs CNR server or the ISPs DHCP server.
cable-modem	Specifies that only cable modem UDP broadcasts are forwarded
host	Specifies that only host UDP broadcasts are forwarded.

cache

To configure aggregation cache operational parameters, use the cache command in aggregation cache configuration mode. To disable the operational parameters, use the no form of this command.

cache {entries number | timeout [active minutes | inactive seconds]}

Syntax Description


entries number	The number of cached entries allowed in the aggregation cache. The number of entries can be 1024 to 524288. The default is 4096.
timeout	Dissolves the session in the aggregation cache.
active minutes	(Optional) The number of minutes that an active entry is active. The range is from 1 to 60 minutes. The default is 30 minutes.
inactive seconds	(Optional) The number of seconds that an inactive entry will stay in the aggregation cache before it times out. The range is from 10 to 600 seconds. The default is 15 seconds.

class (MPLS)

To configure a defined MPLS CoS map that specifies how classes map to label VCs (LVCs) when combined with a prefix map, use the class command in CoS map submode. To disable this option, use the no form of this command.

Syntax Description


class	The precedence of identified traffic to classify traffic.
available	(Optional) Means low precedence (In/Out plus lower two bits = 0,4).
standard	(Optional) Means next precedence (In/Out plus lower two bits = 1,5).
premium	(Optional) Means high precedence (In/Out plus lower two bits = 2,6).
control	(Optional) Means highest precedence pair (In/Out plus lower two bits = 3,7). These bits are reserved for control traffic.

clear adjacency

To clear the Cisco Express Forwarding (CEF) adjacency table, use the clear adjacency command in EXEC mode.

Syntax Description

clear atm vc

To release a specified switched virtual circuit (SVC), use the clear atm vc command in EXEC mode.

Syntax Description

clear cef linecard

vcd	Virtual channel descriptor of the channel to be released.

To clear Cisco Express Forwarding (CEF) information from line cards, use the clear cef linecard command in EXEC mode.

clear cef linecard [slot-number] [adjacency | interface | prefix]

Syntax Description


slot-number	(Optional) Line card slot number to clear. When you omit this argument, all line card slots are cleared.
adjacency	(Optional) Clears line card adjacency tables and rebuilds adjacency for the specified line card.
interface	(Optional) Clears line card interface information and recreates the interface information for the specified line card.
prefix	(Optional) Clears line card prefix tables and starts rebuilding the FIB table.

clear ip cef prefix-statistics

To clear Cisco Express Forwarding (CEF) counters by resetting the packet and byte count to zero (0), use the clear ip cef prefix-statistics command in EXEC mode.

Syntax Description


network	Clears counters for a FIB entry specified by network.
mask	(Optional) Clears counters for a FIB entry specified by network and mask.
*	Clears counters for all FIB entries.

clear ip flow stats

To clear the NetFlow statistics, use the clear ip flow stats command in EXEC mode.

Syntax Description

clear ip mds forwarding

To clear all linecard routes from a MFIB table and resynchronize it with the Router Processor (RP), use the clear ip mds forwarding command in EXEC mode.

Syntax Description

clear ip mroute

To delete entries from the IP multicast routing table, use the clear ip mroute command in EXEC mode.

Syntax Description


*	Deletes all entries from the IP multicast routing table.
group	Either of the following: •Name of the multicast group, as defined in the DNS hosts table or with the ip host command. •IP address of the multicast group. This is a multicast IP address in four-part, dotted notation.
source	(Optional) If you specify a group name or address, you can also specify a name or address of a multicast source that is sending to the group. A source need not be a member of the group.

clear ip pim interface count

To clear all line card counts or packet counts, use the clear ip pim interface count command in EXEC mode.

Syntax Description

clear ip route vrf

To remove routes from the VRF routing table, use the clear ip route vrf command in EXEC mode.

Syntax Description


vrf-name	Name of the VPN routing and forwarding instance (VRF) for the static route.
*	Deletes all routes for a given VRF.
network	Destination to be removed, in dotted decimal format.
mask	(Optional) Mask for the specified network destination, in dotted decimal format.

clear lane le-arp

To clear the dynamic LAN Emulation Address Resolution Protocol (LE ARP) table or a single LE ARP entry of the LANE client configured on the specified subinterface or emulated LAN, use the clear lane le-arp command in EXEC mode.

clear lane le-arp [interface slot/port [.subinterface-number] | name elan-name] [mac-address mac-address | route-desc segment segment-number bridge bridge-number]

clear lane le-arp [interface number [.subinterface-number] | name elan-name] [mac-address mac-address | route-desc segment segment-number bridge bridge-number]

Syntax Description


interface slot/port[.subinterface-number]	(Optional) Interface or subinterface for the LANE client whose LE ARP table or entry is to be cleared for the Cisco 7500 series routers. The space between the interface keyword and the slot argument is optional.
interface number[.subinterface-number]	(Optional) Interface or subinterface for the LANE client whose LE ARP table or entry is to be cleared for the Cisco 4500 or 4700 routers. The space between the interface keyword and the number argument is optional.
name elan-name	(Optional) Name of the emulated LAN for the LANE client whose LE ARP table or entry is to be cleared. Maximum length is 32 characters.
mac-address mac-address	(Optional) Keyword and MAC address of the LANE client.
route-desc segment segment-number	(Optional) Keywords and LANE segment number. The segment number ranges from 1 to 4095.
bridge bridge-number	(Optional) Keyword and bridge number that is contained in the route descriptor. The bridge number ranges from 1 to 15.

clear lane server

To force a LANE server to drop a client and allow the LANE configuration server to assign the client to another emulated LAN, use the clear lane server command in EXEC mode.

clear lane server {interface slot/port [.subinterface-number] | name elan-name} [mac-address mac-address | client-atm-address atm-address | lecid lane-client-id | route-desc segment segment-number bridge bridge-number]

clear lane server {interface number [.subinterface-number] | name elan-name} [mac-address mac-address | client-atm-address atm-address | lecid lecid | route-desc segment segment-number bridge bridge-number]

Syntax Description


interface slot/port [.subinterface-number]	Interface or subinterface where the LANE server is configured for the Cisco 7500 series. The space between the interface keyword and the slot argument is optional.
interface number [.subinterface-number]	Interface or subinterface where the LANE server is configured for the Cisco 4500 or 4700 routers. The space between the interface keyword and the number argument is optional.
name elan-name	Name of the emulated LAN on which the LANE server is configured. Maximum length is 32 characters.
mac-address mac-address	(Optional) Keyword and MAC address of the LANE client.
client-atm-address atm-address	(Optional) Keyword and ATM address of the LANE client.
lecid lane-client-id	(Optional) Keyword and ID of the LANE client. The LANE client ID is a value from 1 to 4096.
route-desc segment segment-number	(Optional) Keywords and LANE segment number. The segment number ranges from 1 to 4095.
bridge bridge-number	(Optional) Keyword and bridge number that is contained in the route descriptor. The bridge number ranges from 1 to 15.

clear mpoa client cache

To clear the ingress and egress cache entries of one or all MPCs, use the clear mpoa client cache command in EXEC mode.

clear mpoa client [name mpc-name] cache [ingress | egress] [ip-address ip-address]

Syntax Description


name mpc-name	(Optional) Specifies the name of the MPC with the specified name.
ingress	(Optional) Clears ingress cache entries associated with the MPC.
egress	(Optional) Clears egress cache entries associated with the MPC.
ip-address ip-address	(Optional) Clears matching cache entries with the specified IP address.

clear mpoa server cache

To clear the ingress and egress cache entries, use the clear mpoa server cache command in EXEC mode.

clear mpoa server [name mps-name] cache [ingress | egress] [ip-address ip-address]

Syntax Description


name mps-name	(Optional) Specifies the name of the MPS. If this keyword is omitted, this command will apply to all servers.
ingress	(Optional) Clears ingress cache entries associated with a server.
egress	(Optional) Clears egress cache entries associated with a server.
ip-address ip-address	(Optional) Clears matching cache entries with the specified IP address. If this keyword is omitted, this command will clear all entries.

client-atm-address name

To add a LANE client address entry to the configuration server's configuration database, use the client-atm-address name database configuration command. To remove a client address entry from the table, use the no form of this command.

Syntax Description


atm-address-template	Template that explicitly specifies an ATM address or a specific part of an ATM address and uses wildcard characters for other parts of the ATM address, making it easy and convenient to specify multiple addresses matching the explicitly specified part. Wildcard characters can replace any nibble or group of nibbles in the prefix, the end-system identifier (ESI), or the selector fields of the ATM address.
elan-name	Name of the emulated LAN. Maximum length is 32 characters.

default

To enable a default aggregation cache, use the default command in aggregation cache configuration mode.

Syntax Description


cache	(Optional) Configures NetFlow cache parameters.
enabled	(Optional) Enables the aggregation cache.
export	(Optional) Specifies host or port to send flow statistics.

default-name

To provide an emulated LAN name in the configuration server's database for those client MAC addresses and client ATM addresses that do not have explicit emulated LAN name bindings, use the default-name command in database configuration mode. To remove the default name, use the no form of this command.

Syntax Description

enabled

elan-name	Default emulated LAN name for any LANE client MAC address or LANE client ATM address not explicitly bound to any emulated LAN name. Maximum length is 32 characters.

To enable an aggregation cache, use the enabled command in aggregation cache configuration mode.

Syntax Description

encapsulation dot1q

To enable IEEE 802.1Q encapsulation of traffic on a specified subinterface in virtual LANs (VLANs), use the encapsulation dot1q subinterface configuration command.

Syntax Description

encapsulation isl

vlan-id	Virtual LAN identifier. The allowed range is from 1 to 1000.
native	(Optional) Sets the PVID value of the port to the vlan-id value.

To enable the Inter-Switch Link (ISL), use the encapsulation isl command in subinterface configuration mode.

Syntax Description

encapsulation sde

vlan-identifier	Virtual LAN (VLAN) identifier. The allowed range is from 1 to 1000.

To enable IEEE 802.10 encapsulation of traffic on a specified subinterface in virtual LANs (VLANs), use the encapsulation sde command in subinterface configuration mode. IEEE 802.10 is a standard protocol for interconnecting multiple switches and routers and for defining VLAN topologies.

Syntax Description

encapsulation tr-isl trbrf-vlan

said	Security association identifier. This value is used as the VLAN identifier. The valid range is from 0 to 0xFFFFFFFE.

To enable TRISL, use the encapsulation tr-isl trbrf-vlan command in subinterface configuration mode. TRISL is a Cisco proprietary protocol for interconnecting multiple routers and switches and maintaining VLAN information as traffic goes between switches.

Syntax Description


vlan-id	Number identifying the VLAN.
bridge-num bridge-number	Keyword and specify the identification number of the bridge number on the ISL trunk. Possible values are from 1 to 4095.

exit

To leave aggregation cache mode, use the exit command in aggregation cache configuration mode.

Syntax Description

exit-address-family

To exit from the address family configuration submode, use the exit-address-family command in address family configuration submode.

Syntax Description

export destination

To enable the exporting of information from NetFlow aggregation caches, use the export destination command in aggregation cache configuration mode. To disable the exporting of NetFlow aggregation cache information, use the no form of this command.

Syntax Description

extended-port

ip-address	Destination IP address.
port	Destination UDP port.

To associate the currently selected extended MPLS ATM (XTagATM) interface with a particular external interface on the remotely controlled ATM switch, use the extended-port interface configuration command.

extended-port ctrl-if {bpx bpx-port-number | descriptor vsi-descriptor | vsi vsi-port-number}

Syntax Description


ctrl-if	Identifies the ATM interface used to control the remote ATM switch. You must configure VSI on this interface using the tag-control-protocol interface configuration command.
bpx bpx-port-number	Specifies the associated Cisco BPX interface using the native BPX syntax. slot.port [.virtual port] You can use this form of the command only when the controlled switch is a Cisco BPX switch.
descriptor vsi-descriptor	Specifies the associated port by its VSI physical descriptor. The vsi-descriptor string must match the corresponding VSI physical descriptor.
vsi vsi-port-number	Specifies the associated port by its VSI physical descriptor. The vsi-descriptor string must match the corresponding VSI physical descriptor.

holding-time

To specify the holding time value for the MPS-p7 variable of an MPS, use the holding-time command in MPS configuration mode. To revert to the default value, use the no form of this command.

Syntax Description

import map

time	Specifies the holding time value in seconds.

To configure an import route map for a VRF, use the import map command in VRF configuration submode.

Syntax Description

index

route-map	Specifies the route map to be used as an import route map for the VRF.

To insert or modify a path entry at a specific index, use the index ip explicit path subcommand. To disable this feature, use the no form of this command.

Syntax Description


index	Index number at which the path entry will be inserted or modified. Valid values are from 0 to 65534.
command	An IP explicit path configuration command that creates or modifies a path entry. (Currently you can use only the next-address command.)

interface atm

To enter interface configuration mode, specify ATM as the interface type, and create a subinterface on that interface type, use the interface atm global configuration command.

interface atm interface.subinterface-number [mpls | tag-switching | point-to-point | multipoint]

Syntax Description


interface	Specifies a (physical) ATM interface (for example, 3/0).
.subinterface-number	Specifies the subinterface number for the ATM interface. On Cisco 7500 series routers, subinterface numbers can range from 0 to 4294967285.
mpls	(Optional) Specifies MPLS as the interface type for which a subinterface is to be created.
tag-switching	(Optional) Specifies tag switching as the interface type for which a subinterface is to be created.
point-to-point	(Optional) Specifies point-to-point as the interface type for which a subinterface is to be created.
multipoint	(Optional) Specifies multipoint as the interface type for which a subinterface is to be created.

interface fastethernet

To select a particular Fast Ethernet interface for configuration, use the interface fastethernet global configuration command.

Syntax Description


number	Port, connector, or interface card number. On Cisco 4500 or 4700 series routers, specifies the Network Interface Module (NIM) or Networking Products Marketplace (NPM) number. The numbers are assigned at the factory at the time of installation or when added to a system.
slot	Number of the slot being configured. Refer to the appropriate hardware manual for slot and port information.
port	Number of the port being configured. Refer to the appropriate hardware manual for slot and port information.
port-adapter	Number of the port adapter being configured. Refer to the appropriate hardware manual for information about port adapter compatibility.

interface XTagATM

To enter interface configuration mode for the extended MPLS ATM (XTagATM) interface, use the following interface XTagATM global configuration command.

Syntax Description

ip cache-invalidate-delay

if-num	Specifies the interface number.

To control the invalidation rate of the IP route cache, use the ip cache-invalidate-delay command in global configuration mode. To allow the IP route cache to be immediately invalidated, use the no form of this command.

Syntax Description


minimum	(Optional) Minimum time (in seconds) between invalidation request and actual invalidation. The default is 2 seconds.
maximum	(Optional) Maximum time (in seconds) between invalidation request and actual invalidation. The default is 5 seconds.
quiet	(Optional) Length of quiet period (in seconds) before invalidation.
threshold	(Optional) Maximum number of invalidation requests considered to be quiet.

ip cef

To enable Cisco Express Forwarding (CEF) on the route processor card, use the ip cef command in global configuration mode. To disable CEF, use the no form of this command.

Syntax Description

ip cef accounting

distributed	(Optional) Enables distributed CEF (dCEF) operation. Distributes CEF information to line cards. Line cards perform express forwarding.

To enable network accounting of Cisco Express Forwarding (CEF), use the ip cef accounting command in global configuration mode. To disable network accounting of CEF, use the no form of this command.

Syntax Description


per-prefix	(Optional) Enables the collection of the number of packets and bytes express forwarded to a destination (or prefix).
non-recursive	(Optional) Enables accounting through nonrecursive prefixes. For prefixes with directly connected next hops, enables the collection of the number of packets and bytes express forwarded through a prefix.

ip cef traffic-statistics

To change the time interval that controls when NHRP will set up or tear down an SVC, use the ip cef traffic-statistics command in global configuration mode. To restore the default values, use the no form of this command.

ip cef traffic-statistics [load-interval seconds] [update-rate seconds]

Syntax Description


load-interval seconds	(Optional) Length of time (in 30-second increments) during which the average trigger-threshold and teardown-threshold are calculated before an SVC setup or teardown action is taken. (These thresholds are configured in the ip nhrp trigger-svc command.) The load-interval range is 30 seconds to 300 seconds, in 30-second increments. The default value is 30 seconds.
update-rate seconds	(Optional) Frequency with which the port adapter sends the accounting statistics to the Router Processor (RP). When NHRP is used in distributed CEF switching mode, this value must be set to 5 seconds. The default value is 10 seconds.

ip dhcp relay information option

To enable the system to insert the cable modem MAC address into a DHCP packet received from a cable modem or host and forward the packet to a DHCP server, use the ip dhcp relay information option in global configuration mode. To disable MAC address insertion, use the no form of this command.

Syntax Description

ip explicit-path

To enter the command mode for IP explicit paths and create or modify the specified path, use the ip explicit-path command in router configuration mode. An IP explicit path is a list of IP addresses, each representing a node or link in the explicit path.To disable this feature, use the no form of this command.

ip explicit-path {name word | identifier number} [{enable | disable}]

Syntax Description


name word	Name of the explicit path.
identifier number	Number of the explicit path. Valid values are from 1 to 65535.
enable	(Optional) Enables the path.
disable	(Optional) Prevents the path from being used for routing while it is being configured.

ip flow-aggregation cache

To enable aggregation cache configuration mode, use the ip flow-aggregation cache global configuration command. To disable aggregation cache configuration mode, use the no form of this command.

ip flow-aggregation cache {as | destination-prefix | prefix | protocol-port | source-prefix}

no ip flow-aggregation cache {as | destination-prefix | prefix | protocol-port | source-prefix}

Syntax Description


as	Configures the autonomous system aggregation cache scheme.
destination-prefix	Configures the destination prefix aggregation cache scheme.
prefix	Configures the prefix aggregation cache scheme.
protocol-port	Configures the protocol port aggregation cache scheme.
source-prefix	Configures the source prefix aggregation cache scheme.

ip flow-cache entries

To change the number of entries maintained in the NetFlow cache, use the ip flow-cache entries command in global configuration mode. To return to the default number of entries, use the no form of this command.

Syntax Description

ip flow-export

number	Number of entries to maintain in the NetFlow cache. The valid range is from 1024 to 524288 entries. The default is 65536 (64K).

To enable the exporting of information in NetFlow cache entries, use the ip flow-export command in global configuration mode. To disable the exporting of information, use the no form of this command.

ip flow-export ip-address udp-port [version 1 | version 5 [origin-as | peer-as]]

Syntax Description


ip-address	IP address of the workstation to which you want to send the NetFlow information.
udp-port	UDP protocol-specific port number.
version 1	(Optional) Specifies that the export packet uses the version 1 format. This is the default. The version field occupies the first two bytes of the export record. The number of records stored in the datagram is a variable from 1 to 24 for version 1.
version 5	(Optional) Specifies that the export packet uses the version 5 format. The number of records stored in the datagram is a variable between 1 and 30 for version 5.
origin-as	(Optional) Specifies that export statistics include the origin autonomous system (AS) for the source and destination.
peer-as	(Optional) Specifies that export statistics include the peer AS for the source and destination.

ip load-sharing

To enable load balancing for Cisco Express Forwarding (CEF), use the ip load-sharing command in interface configuration mode. To disable load balancing for CEF, use the no form of this command.

Syntax Description

ip mroute-cache

per-packet	(Optional) Enables per-packet load balancing on the interface.
per-destination	(Optional) Enables per-destination load balancing on the interface.

To configure IP multicast fast switching or multicast distributed switching (MDS), use the ip mroute-cache command in interface configuration mode. To disable either of these features, use the no form of this command.

Syntax Description

ip multicast-routing

distributed	(Optional) Enables MDS on the interface. In the case of RSP, this keyword is optional; if it is omitted, fast switching occurs. On the GSR, this keyword is required because the GSR does only distributed switching.

To enable IP multicast routing, use the ip multicast-routing command in global configuration mode. To disable IP multicast routing, use the no form of this command.

Table Of Contents