Property Settings

Table Of Contents

Property Settings

Property Settings

---

The file csm.properties contains the property setting information for IPsec VPN Solution and MPLS VPN Solution. The csm.properties file is located at: /vpn/etc.

For each of the properties in the csm.properties file, Table C-2, "Property Information in csm.properties File," provides the default value, the range of values or the rules for valid values, and an explanation. You can use a text editor to reset the properties in the csm.properties file.

---

Note Table C-1, "Reference for Server Information," provides a quick reference for where to get information about each of the servers. The properties in Table C-2, "Property Information in csm.properties File," are presented in the order they appear in the csm.properties file.

When entering a property, place a space, an equal sign, and another space after the property name and before the value you choose to assign. For example: netsys.datacollector.cct.sc_port = 1607

Many properties have the same prefix. In these cases, you will see the prefix to the far left and its subordinate properties indented.

---

The WatchDog and its Servers read this csm.properties file when started. Changing properties in this file and then stopping or restarting a single server does not necessarily have the desired effect. To be sure that the property changes are reflected in the running system, restart the entire system by running stopwd and then startwd.

Table C-1 Reference for Server Information 

Server	References	Function
DataSetServer	Table C-2.	Provides a CORBA front end to the internal database.
EventGateway	Table C-2 and Table C-2.	Gateways events from the TIBCO domain to the CORBA domain.
LayoutServer	Table C-2.	Provides topology layout recomputation services for web topology, which is used when selecting certain topology views.
ReportServerFactory	Table C-2.	Launches and manages ReportServer processes that generate and provide access to dynamic web reports.
ResourceMgr	Table C-2	Handles device locking so a router's configuration is not modified by multiple service requests at the same time, and allocates Telnet Gateway Servers in the system for download/upload requests.
TaskServer	Table C-2.	Provides a CORBA front end to the IPsec VPN Solution task repository.
TemplateServer	Table C-2	Provides a CORBA front end to the Template Provisioning System.
TGServer	Table C-2	Provides a CORBA API to download configlets, upload configuration files, and send IOS commands to the router.
VerifyReportServer	Table C-2.	Back end that generates Verify Reports.
VpnInvServer	Table C-2.	Provisioning API CORBA server.
aggregator	Table C-2.	Aggregates collected datasets periodically.
httpd	Table C-2.	Web server.
journal	Table C-2	Listens to all repository events and saves them into journal files. Also archives the journal files periodically.
lock_manager	Table C-2.	Handles locking for the internal database.
log	Table C-2.	Makes the output of tasks available to you in a browsable format.
poller	Table C-2.	Gets requests from other data collectors and forwards the requests to the device. Gets the response and sends it to appropriate collectors.
rmiregistry	Table C-2.	Underlying communication process necessary for ReportServerFactory and LayoutServer to communicate with web clients.
scheduler	Table C-2.	Enables you to schedule tasks immediately or later in time, once or several times.
trapcatcher (also referred to as: datacollector)	Table C-2; Table C-2.	Catches configuration change traps from routers.
watchdog_perf	Table C-2.	Tracks performance for the IPsec VPN Solution system itself. The data is collected and stored in the internal database only. The data is useful for diagnostics.

Table C-2 Property Information in csm.properties File 

Property	Default Value	Range/ Rules	Explanation
license.vpnsc.threshold	90	Do NOT change. (Internal Use Only.)	The value indicates a percentage of the edge devices licensed. When this percentage is reached, an e-mail is sent to the address specified in the property: netsys.watchdog.\ email.disk, indicating you are quickly approaching your license limit.
Router Settings:
netsys.router.			Login router and password prompts.
loginprompt	Username:	Must match actual router prompts.	Login prompt.
passwordprompt	Password:	Must match actual router prompts.	Password prompt.
trapcatcher Server:
netsys.datacollector.cct.			SmartCollector settings.
sc_port	1607	>1024	The value is the port location at which the SmartCollector listens for traps.
sc_delay	120	>0	The value is the number of seconds between writing traps to the repository.
cycle_t	250	>0	The value is the number of minutes between full collections.
Miscellaneous System Settings:
netsys.tibco.service	7500	Integer port number (3000 to 31999) or service name from /etc/service.	Port number of TIB®/Rendezvous™. During installation, you can change this default. For example, if you are running two copies of VPNSC on the same subnets, you must specify unique default values for each of these copies. If you are running just TGS, the specified port must be the same as the port on the VPNSC installation.
netsys.tibco.prefix	cisco.vpnsc.	Do NOT change. (Internal Use Only.)	Prefix for message subjects.
netsys.home.unix	<ECSP_HOME>	Valid directory name.	Home for VPN Solution Center.
netsys.RepositoryLocator.file.unix	<ECSP_HOME>/etc/rep.list	Valid complete file name.	Path for VPN Solution Center repository locator file.
netsys.tmpdir.unix	<ECSP_HOME>/tmp	Valid directory.	The location where scratch (temporary) files are kept.
netsys.expectdebug	2	0 means false; any nonzero integer means true.	For debugging purposes only. True turns on and false turns off debugging messages.
netsys.Debug	false	The valid values are: true and false.	For debugging purposes only. True turns on and false turns off debugging messages.
netsys.DebugVerbose	false	The valid values are: true and false.	For debugging purposes only. True turns on and false turns off verbose debugging messages.
netsys.debug.level	3	The valid values are 0 to 5.	The value specified indicates the level of messages printed to the console from the VPNSC client 0 indicates to turn off debugging. 1 indicates to print only critical error messages. 2 indicates to print error messages and critical error messages. 3 indicates to print warning, error, and critical error messages. 4 indicates to print informational, warning, error, and critical error messages. 5 indicates to print debug, informational, warning, error, and critical error messages.
netsys.vpnconsole.fullCheckOfServers	true	The valid values are: true and false.	The value true means the full server check occurs at startup. The value false means the vpnconsole will skip the full server check at startup. Note: The recommendation is to keep the default of true. If you choose false, this may result in erroneous behavior during the operation of vpnconsole, because some servers may not be in the started state.
For printing reports:
netsys.printer.unix	None
netsys.html2ps.cmd.unix	<ECSP_HOME>/bin/\ execperldirect.sh \ <ECSP_HOME>/resources/\ htm12ps/htm12ps -f \ <ECSP_HOME>/resources/\ htm12ps/mpls.format
netsys.printer.cmd.unix	lpr		UNIX print command.
For log server, webserver, and browser support:
netsys.logSrv.addr.			Log server support.
unix	<localhost>	Valid hostname.	Log server hostname.
nt	<localhost>	Valid hostname.	Log server hostname.
netsys.WebServer.			Web server support.
addr.unix	<localhost>:8080	Valid web server hostname and port.	Web server hostname and port.
addr.nt	<localhost>:8080	Valid web server hostname and port.	Web server hostname and port.
displayDebug	false	The valid values are: true and false.	For debugging purposes only. True turns on and false turns off debugging messages.
netsys.browser.unix	netscape	Default value only. Cannot be changed.	Browser support.
netsys.taskLogURL.unix	http://<localhost>:8080/servlet/ TaskLogs	Valid URL.	URL for viewing task logs.
netsys.execCommandURL.unix	http://<localhost>:8080/servlet/ExecCommand	Valid URL.	URL for executing Exec commands.
netsys.ciscoURL.unix	http://www.cisco.com	Default value only. Cannot be changed.	Cisco URL.
netsys.deleteOldLogs.unix	true	The valid values are: true and false.	True indicates to delete the task logs and false indicates not to delete the task logs.
netsys.retainLogsPeriod.unix	30	The valid values are: 7 to 365.	Indicates the number of days to keep the task log.
netsys.maxTaskLimit	500	The valid values are positive integers.	When the number of runtime tasks exceeds the value specified, the number of tasks in excess are deleted starting with the oldest.
netsys.gtl.
mode	TGS	The valid values are: TGS and ECHO.	TGS uses TGServer for uploading and downloading router configurations; ECHO uses the Repository to get router configurations.
ThreadPoolSize	22	The valid values are: 1 to 100.	The number of threads for processing of router configuration upload and download requests. The size should be more than or equal to <ThreadPoolSize> in netsys.watchdog.\ server.TGServer.cmd.
transportMechanism	TGS_TELNET	The valid values are: TGS_TELNET; TGS_SSH; TGS_TFTP	The transport mechanism for uploading and downloading router configurations is either TGS_TELNET, which uses plain text (telnet); TGS_SSH, which uses Secure Shell (SSH); or TGS_TFTP, which uses tftp.
CopyRunningToStartup	true	The valid values are: true and false.	The value true indicates to copy the running configuration to start up after downloading configlets. The value false indicates not to copy the running configuration.
GTLIOSWarningExpressions	A list of warning messages.	New messages can be added.	These regular expressions are used to detect IOS warning messages. General Transport Library (GTL) cannot distinguish between errors and warnings since both have a % at the beginning of a line.
GTLIOSErrorExpressions	A list of error messages.	New messages can be added.	These regular expressions are used to detect IOS errors that do not begin with a % and as such are not marked as errors by GTL.
netsys.tgs.			Each property is defined for the Telnet Gateway Server (TGS) on the current machine.
myTftpServer	None	IP address of the TFTP server, which is the local host.	IP address of the TFTP server.
myTftpPath	Directory /tftpboot for local host, if myTftpPath is assigned to nothing.	Specify the name of a subdirectory under the directory /tftpboot of the TFTP server to which you have assigned read and write permissions to users, groups, and others.	Subdirectory under the directory /tftpboot of the TFTP server to which the configuration files get copied.
promptTimeout	10	The valid values are positive integers.	The number of seconds in which to prompt a timeout.
opTimeout	1200	The valid values are positive integers.	The number of seconds for an operation to complete before a timeout occurs.
baseSocketport	9000	Valid port address.	The ports that TGS allocates for communicating with expect script output start from this value.
netsys.mtgs.
retries	2	The valid values are 0 to 3.	Number of times a transport request must be retried in case of transient errors.
retryInterval	3	The valid values are 0 or any positive integer.	Number of seconds between each retry of the transport request.
netsys.resourceManager.lockTimeout	120	Do NOT change. (Internal Use Only.)	If a device is locked for more than this number of seconds, it will be automatically unlocked.
netsys.scheduler.			Scheduler threading control.
maxThreads.unix	4	> 0	Defines the maximum number of worker threads to be created.
maxWaitingThreads.unix	2	> 0	Defines the maximum number of worker threads to wait when there is no work to be done.
netsys.scheduler.scanTime	5	Any valid integer.	The scheduler scans the entire Repository every x number of minutes, where x is the number specified for this property.
netsys.cleanTempFiles	true	The valid values are: true and false.	The default true means that log files are deleted after they have been processed. False means that log files are not deleted after they have been processed.
netsys.ciscorouter.unix	The network, name, domain, and role are displayed in the network listing. loginuser | loginpw | enableuser | enablepw	Use any of the following strings: loginuser loginpw enableuser enablepw snmpro snmprw	These target display fields are used to control what additional columns to display in the network window.
netsys.netflowhost.unix	The network, name, domain, and role are displayed in the network listing. loginuser | loginpw | enableuser	Use any of the following strings: loginuser loginpw enableuser enablepw snmpro snmprw	These target display fields are used to control what additional columns to display in the network window.
Watchdog Settings:
netsys.watchdog.
Debug	false	The valid values are: true and false.	For debugging purposes only. True turns on and false turns off global watchdog debugging messages The default is false.
log.Debug	false	The valid values are: true and false.	For debugging only. True causes all logs to also appear to the WatchDog stdout. The default is false, which turns off stdout echoing.
server.Debug	false	The valid values are: true and false.	For debugging only. False turns off and true turns on debugging messages related to servers only.
heartbeat.Debug	false	The valid values are: true and false.	For debugging only. False turns off and true turns on debugging messages related to server heartbeats.
servers	lock_manager \ scheduler \ TGServer \ httpd \ DataSetServer \ log \ EventGateway \ trapcatcher \ rmiregistry \ ReportServerFactory \ poller \ LayoutServer \ VpnInvServer \ VerifyReportServe \ TaskServer \ aggregator \ watchdog_perf \ journal \ ResourceMgr \ TemplateServer	Server names as listed in Table C-1. Reference for Server Information.	Specifies the list of servers the WatchDog should create. Note: Each server can be configured individually using a set of properties prefixed with netsys.watchdog.\ server.\ <SERVER_NAME>
group.repository_users	scheduler \ httpd \ DataSetServer \ log \ ReportServerFactory \ LayoutServer \ VpnInvServer \ TaskServer \ aggregator	Do NOT change. (Internal Use Only.)	Defines a group of Servers that use the repository. This allows the entire group to be started and stopped by using wdclient.
heartbeat.period	120000	Do NOT change. (Internal Use Only.)	Default period (in milliseconds) for server heartbeat detection. Note: This setting is the default for all servers. This setting can be overridden for any specific server.
heartbeat.timeout	15000	5000 - 600000 (5 seconds - 10 minutes)	Default timeout (in milliseconds) for server heartbeat detection. Note: This setting is the default for all servers. This setting can be overridden for any specific server.
heartbeat.start.delay	10000	0 - 60000 (0 seconds - 1 minute)	Amount of time (in milliseconds) to wait after executing a server and before attempting the first heartbeat. Note: This setting is the default for all servers. This setting can be overridden for any specific server.
start.timeout	120000	5000 - 600000 (5 seconds - 10 minutes)	Maximum time (in milliseconds) that the WatchDog will wait for a server to start. If the server does not start within this period of time, it is killed and restarted. Note: If this value is less than the quick_die.threshold, there is an interaction with the quick_die properties. Note: This setting is the default for all servers. This setting can be overridden for any specific server.
quick_die.threshold	90000	30000 - 600000 (30 seconds - 10 minutes)	If a server does not stay running for at least the number of milliseconds specified in this parameter, it is considered to have died too quickly. Note: This setting is the default for all servers. This setting can be overridden for any specific server.
quick_die.count	3	1 - 10	If a server quickly dies the number of times specified in this parameter, it is disabled. Note: This setting is the default for all servers. This setting can be overridden for any specific server.
gentle_stop.timeout	10000	1000 - 30000 (1 second - 30 seconds)	This parameter specifies the number of milliseconds to wait after attempting a gentle stop before just killing the server anyway. Note: This setting is the default for all servers. This setting can be overridden for any specific server.
java.flags	None	Valid specification on the command line for the Java virtual machine.	This parameter specifies flags in addition to the default arguments that should be added to all Java servers launched by the watchdog. Note: This setting is the default for all servers. This setting can be overridden for any specific server.
netsys.watchdog.server. \ <SERVER_NAME>.			The properties described below provide a way for the user to override the global Watchdog Settings in netsys.watchdog... for a particular server. For example: netsys.watchdog.\ start.timeout defines the global default value for servers. To override this for the log server, add the property: netsys.watchdog.\ server.log.start.\ timeout with a different value.
class	N/A. See each individual server for its default value.	A valid Java class name.	The Java class that represents the specified server within the watchdog.
cmd	N/A. See each individual server for its default value.	A valid command line.	This command launches the server. If the command starts with the word "java", the watchdog rewords the command line to include a -DPROPERTY_FILE that matches the watchdog's property file and a -DOrbixWeb.config that matches the watchdog's property. In this situation, the command is the same for NT and UNIX.
cmd.nt	None	A valid NT command line.	This specifies the command that launches the server for NT. Not used at this time.
cmd.unix	None	A valid UNIX command line.	This specifies the command that launches the server for UNIX. Not used at this time.
dependencies	None	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the specified server.
putit	None	Valid CORBA Server names.	When this property is set, the watchdog ensures that the specified server is registered with the ORB before this server is started.
debug	false	The valid values are: true and false.	For debugging only. False turns off and true turns on debugging messages related to this server.
quick_die.count	Same default as the watchdog's global quick_die.count value.	1 - 10	If the specified server dies quickly the number of times specified in this parameter, it is disabled.
quick_die.threshold	Same default as the watchdog's global quick_die.threshold value.	30000 - 600000 (30 seconds - 10 minutes)	If the specified server does not stay running for at least the number of milliseconds specified in this parameter, it is considered to have died too quickly.
start.timeout	Same default as the watchdog's global start.timeout value.	5000 - 600000 (5 seconds - 10 minutes)	Maximum time (in milliseconds) after the specified server is executed to restart a server that is not starting properly. After this time, the server is killed and restarted.
heartbeat.timeout	Same default as the watchdog's global heartbeat.timeout value.	5000 - 600000 (5 seconds - 10 minutes)	Default timeout (in milliseconds) for detection of the specified server heartbeat.
heartbeat.period	Same default as the watchdog's global heartbeat.period value.	1000 - 86400000 (1 second - 24 hours)	Default period (in milliseconds) for heartbeat detection of the specified server.
heartbeat.start.delay	Same default as the watchdog's global heartbeat.start.delay value.	0 - 60000 (0 seconds - 1 minute)	Amount of time (in milliseconds) to wait after executing the specified server and before attempting the first heartbeat.
gentle_stop.timeout	Same default as the watchdog's global gentle_stop.timeout value.	1000 - 30000 (1 second - 30 seconds)	If the specified server dies quickly the number of times specified in this parameter, it is disabled.
netsys.watchdog.server.watchdog_perf.			Watchdog performance monitor.
class	netsys.NSWatchDog.servers. \ WDNoHeartbeat	Do NOT change. (Internal Use Only.)	The class that represents the watchdog performance server.
cmd	watchdog_perf -period 60 \ -file_period 60	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch watchdog performance server.
enable	false	The valid values are: true and false.	The value true indicates to generate data for performance monitor; the value false indicates not to generate data for performance monitor.
netsys.watchdog.server.EventGateway.			The EventGateway
class	netsys.NSWatchDog.servers. \ WDEventGateway	Do NOT change. (Internal Use Only.)	The class that represents the EventGateway server.
cmd	java netsys.event.gateway.\ EventGatewayImpl \ -state event_gateway.state \ -name EventGateway \ -ledger event_gateway.ledger \ -bind EventGateway	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch EventGateway server.
putit	EventGateway	Do NOT change. (Internal Use Only.)	When this property is set, the watchdog ensures that the EventGateway server is registered with the ORB before it is started.
netsys.watchdog.server.httpd.			Web server
class	netsys.NSWatchDog.servers. \ WDHttpd	Do NOT change. (Internal Use Only.)	The class that represents the httpd server.
cmd	<ECSP_HOME>/resources/ \ webserver/\ apache/bin/nshttpd	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch httpd server.
dependencies	lock_manager	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the httpd server.
heartbeat.url	http://localhost:8080/	Valid web server URL.	The URL that is used for web server heartbeat testing.
netsys.watchdog.server.lock_manager.			Lock manager
class	netsys.NSWatchDog.servers. \ WDLockManager	Do NOT change. (Internal Use Only.)	The class that represents the lock_manager server.
cmd	lm_ip -a localhost:120<nn> -u \ 1000 -f 1000 -q 8000 -nd where: nn starts with 00 and increments by 1 each time the system is launched.	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch lock_manager server. Add: -l - to the end of the value to turn on debugging for lock manager.
firstport	12000	Range of unused port numbers.	The lock manager port is changed by startwd to avoid problems when stopwd/startwd are run in quick succession.
endport	12009	Range of unused port numbers.	The lock manager port is changed by startwd to avoid problems when stopwd/startwd are run in quick succession.
restart.delay	15000	>0	The lock manager port is changed by startwd to avoid problems when stopwd/startwd are run in quick succession.
heartbeat.start.delay	30000	>0	Amount of time (in milliseconds) to wait after executing the lock_manager server and before attempting the first heartbeat.
netsys.watchdog.server.trapcatcher.			Trap receiver
class	netsys.NSWatchDog.servers. \ WDTrapCatcher	Do NOT change. (Internal Use Only.)	The class that represents the trapcatcher server.
cmd	java netsys.datacollector.\ cct.Traps	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch trapcatcher server.
netsys.watchdog.server.TGServer.			TGServer
class	netsys.NSWatchDog.servers.\ WDTGServer	Do NOT change. (Internal User Only.)	The class that represents the Telnet Gateway Server (TGS).
cmd	TGServer -S TGServer -q 20	<TelnetGateway\ ServerName> is any name that CORBA Naming Service can use. <ThreadPoolSize> can be 1 to 100. If the value exceeds 100, 100 is used. The value is set to 1 for single-threaded mode. The value for <Orbix\ DiagnosticLevel> can be 0 to 255.	-S <TelnetGatewayServerName> is the option to change the name of the TelnetGateway server used by CORBA Naming Service. The value of TelnetGatewayServer\ Name must be a valid TelnetGateway Server name. -q <ThreadPoolSize> is the option to specify the number of threads running. This value is defined for Telnet Gateway Server (TGS) on the current machine. -d <OrbixDiagnostic\ Level> is the level of Orbix Diagnostics, 0 to 255.
dependencies	ResourceMgr	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before TGS.
putit	TGServer	Do NOT change. (Internal User Only.)	When this property is set, the watchdog ensures that the TGServer server is registered with the ORB before it is started.
netsys.watchdog.server.ResourceMgr.
class	netsys.NSWatchdog.servers. WDResourceMgr	Do NOT change. (Internal User Only.)	The class that represents the ResourceMgr server.
cmd	ResourceMgr	Can ONLY change values in command options. Otherwise, make no changes. The only available option is -v for verbose log.	Command to launch ResourceMgr server.
dependencies	lock_manager	Do NOT change. (Internal User Only.)	WatchDog ensures that the dependent servers are started before the ResourceMgr
putit	ResourceMgr	Do NOT change. (Internal User Only.)	Name of ResourceMgr as registered with Orbix daemon.
netsys.watchdog.server.scheduler.			The scheduler
class	netsys.NSWatchDog.servers. \ WDScheduler	Do NOT change. (Internal Use Only.)	The class that represents the scheduler server.
cmd	java -mx64m \ netsys.SCH.netsys_scheduler	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch scheduler server.
dependencies	lock_manager poller	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the scheduler server.
netsys.watchdog.server.DataSetServer.			The DataSetServer
class	netsys.NSWatchDog.servers. \ WDDataSetServer	Do NOT change. (Internal Use Only.)	The class that represents the DataSetServer server.
cmd	java -mx64m \ netsys.datacollection.\ datasetserver.DataSetServer	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch DataSetServer server.
dependencies	lock_manager	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the DataSetServer server.
putit	DataSetServer	Do NOT change. (Internal Use Only.)	When this property is set, the watchdog ensures that the DataSetServer server is registered with the ORB before it is started.
start.timeout	300000	>0	Maximum time (in milliseconds) that the WatchDog will wait for the DataSetServer to start. If the server does not start within this period of time, it is killed and restarted. Note: If this value is less than the quick_die.threshold, there is an interaction with the quick_die properties.
netsys.watchdog.server.log.			The log server
class	netsys.NSWatchDog.servers. \ WDLog	Do NOT change. (Internal Use Only.)	The class that represents the log server.
cmd	java netsys.logmonitor.logSrv. \ logmonitor.LogServer	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch log server.
dependencies	lock_manager	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the log server.
putit	log	Do NOT change. (Internal Use Only.)	When this property is set, the watchdog ensures that the log server is registered with the ORB before it is started.
netsys.watchdog.server. \ CVPIMServer.			VPN Provisioning and Inventory Manager process.
uploadConfig	true	The valid values are: true and false.	True indicates that the provisioning engine uploads a copy of the configuration file from the routers when it processes the Service Request, and false indicates that the provisioning engine does not do this uploading but instead uses copies of the configuration files that were previously collected and stored in the Repository.
netsys.provisioning.
resourceLockWaitTime	20	Number of seconds to wait for the Resource Manager to place a lock on all devices for configuration upload and download.	The Provisioning Engine waits the specified number of seconds to obtain a lock on all devices across all Service Requests being deployed. If the specified value is 0, lock the available devices and return immediately. If the specified value is <0, wait until all devices can be locked.
\ suppressIOSDefaultValueGeneration	false	The valid values are true and false.	Applicable for IPsec only. The value false is the recommended setting (and the default setting), because the IOS default values may change in the future, and false indicates not to generate in configuration files, those commands that have values the same as IOS defaults. The value true indicates that the Provisioning Engine should generate in configuration files, those commands that have values the same as IOS defaults. For example: The absence of the command: crypto ipsec\ security-association\ lifetime seconds in IOS is equivalent to: crypto ipsec\ security-association\ lifetime seconds 3600, because 3600 is the default value for this command in IOS.
\ enableGRETunnelFastSwitching	true	The valid values are true and false.	Applicable for IPsec only. The value true indicates that route cache (fast switching) on GRE tunnel interfaces is enabled. The value false indicates that route cache (fast switching) on GRE tunnel interfaces is not enabled.
ingressAclProtoList	tcp:telnet tcp:ssh udp:snmp	List of IP protocols and ports to be permitted in the ingress ACL (pertaining to the management portion of the ACL) generated by the VPNSC IPsec provisioning engine.	Applicable for IPsec only. Each element of the list is a <protocol[:port]> pair to be permitted in the ingress ACL generated by the VPNSC IPsec provisioning engine. The protocol may be any IP protocol specified either by name or number. If the protocol is TCP or UDP, the port may also be specified by name or number. If the port is not specified, all ports for that protocol are permitted. For example: icmp udp tcp:ssh prints all ICMP, UDP, and SSH traffic. All non-SSH TCP traffic will be denied.
ingressAclSrcIPAddrList	0.0.0.0	List of IP addresses that are permitted as the source address in the ingress ACL (pertaining to the management portion of the ACL) generated by the VPNSC IPsec provisioning engine.	Applicable for IPsec only. Each element in the list of IP addresses is separated by one or more spaces. Each element in the list is either a host IP address or an address range. For example: 209.165.200.225 209.165.201.0/24 permits host 209.165.200.225 and any address in the 209.165.201.0/24 subnet. Note: 0.0.0.0 indicates any IP address.
routingprotocol	none	The routing protocol that has traffic that must be permitted by the ingress ACL generated by the VPNSC IPsec provisioning engine. The valid values are: OSPF, EIGRP, RIP, BGP, and none.	Applicable for IPsec only. When one of the valid routing protocols is specified, the ingress ACL generated by VPNSC will contain an entry permitting that routing protocol's traffic between the CPE and the Service Provider cloud.
nonVpnscIpsecOverride	true	The valid values are true and false.	Applicable for IPsec only. The value true indicates to remove pre-existing non-VPNSC IPsec configuration files from the router. The value false indicates that the override feature is not enabled, therefore pre-existing non-VPNSC IPsec configuration files cannot be removed from the router.
netsys.watchdog.server. \ rmiregistry.			Java RMI Registry
class	netsys.NSWatchDog.servers. \ WDNoHeartbeat	Do NOT change. (Internal Use Only.)	The class that represents the rmiregistry server.
cmd	java \ sun.rmi.registry.RegistryImpl	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch rmiregistry server.
dependencies	None	Do NOT change. (Internal Use Only.)	When this property is set, the watchdog ensures that a defined server is registered with the ORB before it is started.
netsys.watchdog.server. \ LayoutServer.			Java RMI Registry
class	netsys.NSWatchDog.servers. \ WDLayoutServer	Do NOT change. (Internal Use Only.)	The class that represents the LayoutServer server.
cmd	java -Djava.rmi.server.codebase\ =http://<localhost>/Baselines/ \ topology.layout.\ CSRMILayoutServerImp \ LayoutServer	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch LayoutServer server.
dependencies	rmiregistry	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the LayoutServer server.
netsys.watchdog.server. \ ReportServerFactory.			The Report Server Factory
class	netsys.NSWatchDog.servers. \ WDReportServerFactory	Do NOT change. (Internal Use Only.)	The class that represents the ReportServerFactory server.
cmd	java netsys.csm.\ CSMReportServerFactory	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch ReportServerFactory server.
dependencies	lock_manager rmiregistry \ DataSetServer	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the ReportServerFactory server.
netsys.watchdog.server. \ poller.			The Poller
class	netsys.NSWatchDog.servers. \ WDPoller	Do NOT change. (Internal Use Only.)	The class that represents the poller server.
cmd	java netsys.datacollector. \ mibdatacollection.ServerCorba	Can ONLY change values in command options. Otherwise, make no changes	Command to launch poller server.
putit	mibpoller	Do NOT change. (Internal Use Only.)	When this property is set, the watchdog ensures that the poller server is registered with the ORB before it is started.
netsys.watchdog.server. \ VpnInvServer.			CORBA interface to VpnInventory Repository
class	netsys.NSWatchDog.servers. \ WDVpnInvServer	Do NOT change. (Internal Use Only.)	The class that represents the VpnInvServer server.
cmd	VpnInvServer -v	The default value with and without -v are the only valid values.	Command to launch VpnInvServer server. If you want to turn off the verbose mode, remove the -v option.
dependencies	lock_manager	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the VpnInvServer server.
putit	VpnInvServer	Do NOT change. (Internal Use Only.)	When this property is set, the watchdog ensures that the VpnInvServer server is registered with the ORB before it is started.
netsys.watchdog.server. \ TaskServer.			CORBA interface to Task Repository
class	netsys.NSWatchDog.servers. \ WDTaskServer	Do NOT change. (Internal Use Only.)	The class that represents the TaskServer server.
cmd	TaskServer -v	The default value with and without -v are the only valid values.	Command to launch TaskServer server. If you want to turn off the verbose mode, remove the -v option.
dependencies	lock_manager	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the TaskServer server.
putit	TaskServer	Do NOT change. (Internal Use Only.)	When this property is set, the watchdog ensures that the TaskServer server is registered with the ORB before it is started.
netsys.watchdog.server. \ aggregator.			Dataset Aggregator
class	netsys.NSWatchDog.servers. \ WDAggregator	Do NOT change. (Internal Use Only.)	The class that represents the aggregator server.
cmd	java netsys.datacollector. \ aggregator.Aggregator	Do NOT change. (Internal Use Only.)	Command to launch aggregator server.
dependencies	lock_manager poller	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the aggregator server.
SLA.interval	120	>0	Maximum interval (number of minutes) between two consecutive SA Agent aggregation operations.
ACCT.interval	240	>0	Maximum interval (number of minutes) between two consecutive accounting aggregation operations.
netsys.watchdog.server. \ journal.			The journal Server for Repository events.
class	netsys.NSWatchDog.servers.\ WDJournal	Do NOT change. (Internal Use Only.)	The class that represents the journal server.
cmd	java netsys.repository.journal.\ receiver.JournalListener	Do NOT change. (Internal Use Only.)	Command to launch journal server.
dependencies	lock_manager	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the journal server.
aging	24	>0	Number of hours the journal server will back up current journal files.
archiving	7	>0	The number specified indicates the number of days between occurrences when the journal server will create an archive directory for journal files. For example, for the default of 7, the journal will create an archive directory for journal files every 7 days.
netsys.watchdog.server.\ TemplateServer.			The TemplateServer provide a CORBA interface to access the Template System.
class	netsys.NSWatchDog.servers.\ WDTemplateServer	Do NOT change. (Internal Use Only.)	The class that represents the TemplateServer server.
cmd	java -Dnetys.TemplateProvSys.\ TemplatePropFile=\ <ECSP_HOME>/etc/\ Template.properties \ netsys.TemplateServer.Server	Do NOT change. (Internal Use Only.)	Command to launch TemplateServer server.
dependencies	None	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the TemplateServer server.
putit	TemplateServer	Do NOT change. (Internal Use Only.)	When this property is set, the watchdog ensures that the TemplateServer server is registered with the ORB before it is started.
netsys.watchdog.server. \ VerifyReportServer.			The VerifyReportServer generates verify reports.
class	netsys.NSWatchDog.servers. \ WDVerifyReportServer	Do NOT change. (Internal Use Only.)	The class that represents the VerifyReportServer server.
cmd	java netsys.datacollection.\ datasetmanagers.\ DCDSMVerifyMgr.sdf.\ RemoteVerifyReportServer	Can ONLY change values in command options. Otherwise, make no changes.	Command to launch VerifyReportServer server. If you do not want the verbose mode, remove the -v option.
dependencies	DataSetServer lock_manager \ rmiregistry	Do NOT change. (Internal Use Only.)	Watchdog ensures that the dependent servers are started before the VerifyReportServer server.
netsys.watchdog.			Configuration for e-mail notification when servers restart and for disk space warning.
email.host	Blank (This causes the WatchDog machine name to be used.)	Set during installation.	This parameter specifies the hostname of the SMTP connection for sending e-mail. If this parameter remains blank, the machine name that watchdog is launched from is the hostname used.
email.from	No default.	Set during installation.	This parameter indicates what is specified in the From: header in the e-mail.
email.server	No default.	Set during installation.	This parameter specifies a list of users who are notified when the state of servers changes.
email.stable_seconds	60000	>0	This parameter specifies the amount of time (in milliseconds) that the state of the servers must remain stable before an e-mail is generated.
disks.high	20%	0 - 100% or 0 - <maximum capacity of volume>M	Maximum value of free disk space before e-mail message is sent to address indicated by netsys.watchdog.email.disk.
disks.low	10%	0 - 100% or 0- <maximum capacity of volume>M	Minimum value of free disk space before e-mail message is sent to address indicated by netsys.watchdog.email.disk.
email.disk	No default.	Set during installation. Any valid e-mail address.	The list of users to which to send e-mail when free disk space rises above the netsys.watchdog.disks.\ high level or drops below the netsys.watchdog.disks.\ low level.
MediatorPerfLog related properties:
netsys.mediatorPerfLog.			MediatorPerfLog related properties
jvmStatusPeriod	60000	10000 - 86400000 (10 seconds - 24 hours)	This parameter specifies the interval (in milliseconds) for server jvmStatus log entries.
logFileDuration	300000	300000 - 86400000 (5 minutes - 24 hours)	This parameter specifies the interval (in milliseconds) for creating new server log files.
Poller related properties:
poller.			Poller related properties.
SC.Enabled.unix	no	Do NOT change. (Internal Use Only.)
SC.Enabled.nt	no	Do NOT change. (Internal Use Only.)
debuglevel.unix	1	The valid values are 1 and 2.	The value 1 indicates error warnings. The value 2 indicates error warnings plus debug messages.
debuglevel.nt	1	The valid values are 1 and 2.	The value 1 indicates error warnings. The value 2 indicates error warnings plus debug messages.
maxThreads.unix	5	>0	Maximum number of threads spawned by poller on UNIX.
maxThreads.nt	5	>0	Maximum number of threads spawned by poller on NT.
netsys.vpn.
ServiceRequest.\ showTemplates	false	The valid values are: true and false.	This property is for MPLS mode only. The value true indicates to enable the template steps used by the Service Request wizard. The value false indicates to disable the template steps used by the Service Request wizard.
SLA.showInRunningConfig	true	The valid values are: true and false.	The value true indicates that the created SLAs appear in the router running configuration; and the value false indicates that the created SLAs do not appear in the router running configuration.
SLA.\ copyRunningConfigToStartup	true	The valid values are: true and false.	This property is only valid if netsys.vpn.SLA.\ showInRunningConfig is set to true. The value true indicates to copy the running configuration file to the startup configuration file after changing the SA Agent configuration on the router (SLA creation, SLA deletion, traps enabling/disabling). The value false indicates not to copy the running configuration file to the startup configuration file after changing the SA Agent configuration on the router (SLA creation, SLA deletion, traps enabling/disabling).
netsys.vpn.autoProbeConfig.			NOTE: All properties in this category are applicable for IPsec only.
rttTypes	udpecho	The valid values are: echo; tcpconnect; udpecho; jitter; dns; http; dhcp	The list of probe types (space delimited) that are to be configured on each CPE.
enableSNMPTraps	false	The valid values are: true and false. List of flags that enable/disable SNMP traps for each of the probes in the rttTypes list.	A list of flags (space delimited) that correlates one-to-one to the string of probe types specified in rttTypes. If there are fewer values in this string than in the string for rttTypes, the missing values default to false. The value true indicates to enable that probe type; and the value false indicates to disable that probe type.
keepHistory	false	The valid values are: true and false.	A list of flags (space delimited) that correlates one-to-one to the string of probe types specified in rttTypes. If there are fewer values in this string than in the string for rttTypes, the missing values default to false. The value true indicates that raw history data and aggregated data will be kept for that probe type (not applicable for HTTP and jitter); and the value false indicates that only aggregated data will be kept for that probe type.
securityLevel	authNoPriv	The valid values are: noAuthNoPriv; authNoPriv; authPriv	The security levels are: noAuthNoPriv, which specifies no authorization and no encryption (SNMPv2); authNoPriv, which specifies authorization and no encryption (SNMPv3); authPriv, which specifies authorization and encryption (SNMPv3).
rttLife	-1	The valid values are integers. The value -1 indicates no expiration.	The integer value indicates the operational life of the probe in seconds.
risingThreshold	5000	The valid values are positive integers up to the maximum value for a 32-bit integer.	The maximum acceptable time in milliseconds for an SA Agent operation to complete.
fallingThreshold	3000	The valid values are positive integers up to the maximum value for a 32-bit integer. This value should be less than the specified value for the risingThreshold.	This value is only enabled when enableSNMPTraps is set to true. This value indicates a second threshold below the rising threshold in milliseconds. When the round-trip time falls below this value for the first time after the rising threshold was exceeded, a trap is sent indicating service is back within the agreement.
timeout	5000	The valid values are positive integers.This value must be less than the value for frequency.	The maximum number of milliseconds to wait for an SA Agent operation to complete.
frequency	60	The valid values are positive integers.	The number of seconds between SA Agent operations.
tos	0	The valid values are 0 to 7.	The values indicate different types of service.
numBuckets	36	The valid values are positive integers.	This property is only valid if keepHistory is set to true. The number of raw history values that will be saved on the router.
echo.requestSize	28	The valid values are positive integers.	Packet data size for ICMP Echo in bytes.
tcpconnect.targetPort	23	A valid tcpconnect destination port number.	The tcpconnect port number on the destination device.
tcpconnect.requestSize	1	The valid values are positive integers.	Packet data size for tcpconnect in bytes.
udpecho.targetPort	7	A valid udpecho destination port number.	The udpecho port number on the destination device.
udpecho.requestSize	16	The valid values are 4 to 1500.	Packet data size for udpecho in bytes.
jitter.targetPort	8000	A valid jitter destination port number.	The jitter port number on the destination device.
jitter.requestSize	32	The valid values are 16 to 1500.	Packet data size for jitter in bytes.
jitter.numPackets	10	The valid values are positive integers.	Number of jitter packets to be sent in each jitter request.
jitter.interval	20	The valid values are 0 to 60000.	The delay between packets in a single jitter request in milliseconds.
dns.dnsAddress	None	Valid dns domain name server IP address in string or dotted address format.	The name of the domain name server to be accessed.
dns.nameToResolve	None	Valid dns name or IP address to be resolved in string or dotted address format.	The string sent to the device name server to be resolved.
dns.requestSize	1	Valid size of dns packet data in bytes.	Packet data size for dns in bytes.
http.version	1.0	Valid HTTP version.	The version number of the HTTP request format.
http.url	None	URL to be accessed.	URL for the web server to be used.
http.cache	true	The valid values are: true and false.	The value true indicates to download cached pages; the value false indicates not to download cached pages.
http.proxyServer	None	Valid URL of proxy server.	URL of proxy server, if needed to get to web server.
http.dnsAddress	None	Valid HTTP domain name server IP address in dotted format.	Domain name server to be used by HTTP.
http.operation	HTTPGet	The valid values are: HTTPGet and HTTPRaw.	The value indicates the HTTP operation to be performed, either HTTPGet or HTTPRaw.
http.rawOperation	None	Valid HTTP operation.	This indicates the raw HTTP operation to be performed if HTTPRaw was selected in http.operation
http.requestSize	28	The valid values are positive integers.	Packet data size for HTTP in bytes.
Configure the data set server:
netsys.datasetserver.			Configuring the data set server.
managers	Directory Baseline \ RouteTableIP \ RouterConfig SlaBrowser CCT \ Acct VFIT Verify MediatorPerf	Do NOT change. (Internal Use Only.)	The data set managers that are to be started by DataSetServer.
manager.Directory.class	netsys.datacollection.\ DCDirectory.\ DirectoryManagerImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.Baseline.class	netsys.datacollection.\ datasetmanagers.\ DCDSMBaselineMgr.\ BaselineManagerImp1	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.RouteTableIP.class	netsys.datacollection\ datasetmanagers.\ DCDSMRouteTableIPMgr.\ RouteTableIPManagerImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.RouterConfig.class	netsys.datacollection.\ datasetmanagers.\ DCDSMRouterConfigMgr.\ RouterConfigManagerImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.SlaBrowser.class	netsys.sla.CiscoSlaMonitor.\ SlaBrowserImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.CCT.class	netsys.datacollection.\ datasetmanagers.\ DCDSMCCTMgr.\ CCTManagerImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.Acct.class	netsys.acct.CiscoAcctMonitor.\ AcctMonitorImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.VFIT.class	netsys.datacollection.\ datasetmanagers.\ DCDSMVFITMgr.\ VFITManagerImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.Verify.class	netsys.datacollection.\ datasetmanagers.\ DCDSMVerifyMgr.\ VerifyManagerImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
manager.MediatorPerf.class	netsys.datacollection.\ datasetmanagers.\ DCDSMMediatorPerfMgr.\ MediatorPerfManagerImpl	Do NOT change. (Internal Use Only.)	Classes that implement each data set manager.
netsys.datasetserver.managers.timeout	300000 (the equivalent of 5 minutes)	0 to 18000000 (milliseconds)	Any object passed from the DataSetServer through the CORBA APIs to the client is removed from the server after being inactive for the number of milliseconds specified. The objective is to free resources from the server if the client does not disconnect or release the objects.
Cell color properties in Accounting reports:
netsys.datasetserver.manager.Acct.		These properties control the color schemes of the following reports: -CE2CECustomer\ TrafficVolume is a CE-CE Customer Traffic Volume Report. -PE2PENetwork\ TrafficVolume is a PE-PE Network Traffic Volume Report. -PE2CETraffic Volume is a PE-CE Traffic Volume Report. A valid time period is: -hourly -daily -weekly -monthly -yearly A valid measure is: -packets -bytes (in K bytes) A valid color property is one of the following: -white -lightgray -gray -darkgray -black -blue -cyan -green -magenta -orange -pink -red -yellow	These properties are used to specify cell colors in Accounting reports. The range properties and color properties go in pairs to define a color scheme. New ranges can be added. You can also specify range3 and color3; range4 and color4... The reports display different colors depending on the value in the cells. The property names all start with netsys.datasetserver.\manager.Acct followed by all of the following: - a report name - a time period - a measure - a range or color. The range and color numbers must be a matching pair. For example, for range1 there must be a color1. The number of pairs is unlimited. However, the range and color numbers must start from 1 and be in consecutive integer order. The range property is a number range (which is inclusive). The range must be two numbers separated by a space, or substitute a number with a dash to indicate there is no lower or upper limit.
Customer Traffic Volume Report (CE-CE):
CE2CECustomerTrafficVolume. \ hourly.packets.range1	5000 49999
CE2CECustomerTrafficVolume. \ hourly.packets.color1	yellow
CE2CECustomerTrafficVolume. \ hourly.packets.range2	50000 -
CE2CECustomerTrafficVolume. \ hourly.packets.color2	red
CE2CECustomerTrafficVolume. \ hourly.bytes.range1	5000000 49999999
CE2CECustomerTrafficVolume. \ hourly.bytes.color1	yellow
CE2CECustomerTrafficVolume. \ hourly.bytes.range2	50000000 -
CE2CECustomerTrafficVolume. \ hourly.bytes.color2	red
CE2CECustomerTrafficVolume. \ daily.packets.range1	120000 1199999
CE2CECustomerTrafficVolume. \ daily.packets.color1	yellow
CE2CECustomerTrafficVolume. \ daily.packets.range2	1200000 -
CE2CECustomerTrafficVolume. \ daily.packets.color2	red
CE2CECustomerTrafficVolume. \ daily.bytes.range1	120000000 1199999999
CE2CECustomerTrafficVolume. \ daily.bytes.color1	yellow
CE2CECustomerTrafficVolume. \ daily.bytes.range2	1200000000 -
CE2CECustomerTrafficVolume. \ daily.bytes.color2	red
CE2CECustomerTrafficVolume. \ weekly.packets.range1	840000 8399999
CE2CECustomerTrafficVolume. \ weekly.packets.color1	yellow
CE2CECustomerTrafficVolume. \ weekly.packets.range2	8400000 -
CE2CECustomerTrafficVolume. \ weekly.packets.color2	red
CE2CECustomerTrafficVolume. \ weekly.bytes.range1	840000000 8399999999
CE2CECustomerTrafficVolume. \ weekly.bytes.color1	yellow
CE2CECustomerTrafficVolume. \ weekly.bytes.range2	8400000000 -
CE2CECustomerTrafficVolume. \ weekly.bytes.color2	red
CE2CECustomerTrafficVolume. \ monthly.packets.range1	3600000 35999999
CE2CECustomerTrafficVolume. \ monthly.packets.color1	yellow
CE2CECustomerTrafficVolume. \ monthly.packets.range2	36000000 -
CE2CECustomerTrafficVolume. \ monthly.packets.color2	red
CE2CECustomerTrafficVolume. \ monthly.bytes.range1	3600000000 35999999999
CE2CECustomerTrafficVolume. \ monthly.bytes.color1	yellow
CE2CECustomerTrafficVolume. \ monthly.bytes.range2	36000000000 -
CE2CECustomerTrafficVolume. \ monthly.bytes.color2	red
CE2CECustomerTrafficVolume. \ yearly.packets.range1	43200000 431999999
CE2CECustomerTrafficVolume. \ yearly.packets.color1	yellow
CE2CECustomerTrafficVolume. \ yearly.packets.range2	432000000 -
CE2CECustomerTrafficVolume. \ yearly.packets.color2	red
CE2CECustomerTrafficVolume. \ yearly.bytes.range1	43200000000 431999999999
CE2CECustomerTrafficVolume. \ yearly.bytes.color1	yellow
CE2CECustomerTrafficVolume. \ yearly.bytes.range2	432000000000-
CE2CECustomerTrafficVolume. \ yearly.bytes.color2	red
Network Traffic Volume Report (PE-PE):
PE2PENetworkTrafficVolume. \ hourly.packets.range1	5000 49999
PE2PENetworkTrafficVolume. \ hourly.packets.color1	yellow
PE2PENetworkTrafficVolume. \ hourly.packets.range2	50000 -
PE2PENetworkTrafficVolume. \ hourly.packets.color2	red
PE2PENetworkTrafficVolume. \ hourly.bytes.range1	5000000 49999999
PE2PENetworkTrafficVolume. \ hourly.bytes.color1	yellow
PE2PENetworkTrafficVolume. \ hourly.bytes.range2	50000000 -
PE2PENetworkTrafficVolume. \ hourly.bytes.color2	red
PE2PENetworkTrafficVolume. \ daily.packets.range1	120000 1199999
PE2PENetworkTrafficVolume. \ daily.packets.color1	yellow
PE2PENetworkTrafficVolume. \ daily.packets.range2	1200000 -
PE2PENetworkTrafficVolume. \ daily.packets.color2	red
PE2PENetworkTrafficVolume. \ daily.bytes.range1	120000000 1199999999
PE2PENetworkTrafficVolume. \ daily.bytes.color1	yellow
PE2PENetworkTrafficVolume. \ daily.bytes.range2	1200000000 -
PE2PENetworkTrafficVolume. \ daily.bytes.color2	red
PE2PENetworkTrafficVolume. \ weekly.packets.range1	840000 8399999
PE2PENetworkTrafficVolume. \ weekly.packets.color1	yellow
PE2PENetworkTrafficVolume. \ weekly.packets.range2	8400000 -
PE2PENetworkTrafficVolume. \ weekly.packets.color2	red
PE2PENetworkTrafficVolume. \ weekly.bytes.range1	840000000 8399999999
PE2PENetworkTrafficVolume. \ weekly.bytes.color1	yellow
PE2PENetworkTrafficVolume. \ weekly.bytes.range2	8400000000 -
PE2PENetworkTrafficVolume. \ weekly.bytes.color2	red
PE2PENetworkTrafficVolume. \ monthly.packets.range1	3600000 35999999
PE2PENetworkTrafficVolume. \ monthly.packets.color1	yellow
PE2PENetworkTrafficVolume. \ monthly.packets.range2	36000000 -
PE2PENetworkTrafficVolume. \ monthly.packets.color2	red
PE2PENetworkTrafficVolume. \ monthly.bytes.range1	3600000000 35999999999
PE2PENetworkTrafficVolume. \ monthly.bytes.color1	yellow
PE2PENetworkTrafficVolume. \ monthly.bytes.range2	36000000000 -
PE2PENetworkTrafficVolume. \ monthly.bytes.color2	red
PE2PENetworkTrafficVolume. \ yearly.packets.range1	43200000 431999999
PE2PENetworkTrafficVolume. \ yearly.packets.color1	yellow
PE2PENetworkTrafficVolume. \ yearly.packets.range2	432000000 -
PE2PENetworkTrafficVolume. \ yearly.packets.color2	red
PE2PENetworkTrafficVolume. \ yearly.bytes.range1	43200000000 431999999999
PE2PENetworkTrafficVolume. \ yearly.bytes.color1	yellow
PE2PENetworkTrafficVolume. \ yearly.bytes.range2	432000000000 -
PE2PENetworkTrafficVolume. \ yearly.bytes.color2	red
Traffic Volume Report (PE-CE):
PE2CETrafficVolume. \ hourly.packets.range1	5000 49999
PE2CETrafficVolume. \ hourly.packets.color1	yellow
PE2CETrafficVolume. \ hourly.packets.range2	50000 -
PE2CETrafficVolume. \ hourly.packets.color2	red
PE2CETrafficVolume. \ hourly.bytes.range1	5000000 49999999
PE2CETrafficVolume. \ hourly.bytes.color1	yellow
PE2CETrafficVolume. \ hourly.bytes.range2	50000000 -
PE2CETrafficVolume. \ hourly.bytes.color2	red
PE2CETrafficVolume. \ daily.packets.range1	120000 1199999
PE2CETrafficVolume. \ daily.packets.color1	yellow
PE2CETrafficVolume. \ daily.packets.range2	1200000 -
PE2CETrafficVolume. \ daily.packets.color2	red
PE2CETrafficVolume. \ daily.bytes.range1	120000000 1199999999
PE2CETrafficVolume. \ daily.bytes.color1	yellow
PE2CETrafficVolume. \ daily.bytes.range2	1200000000 -
PE2CETrafficVolume. \ daily.bytes.color2	red
PE2CETrafficVolume. \ weekly.packets.range1	840000 8399999
PE2CETrafficVolume. \ weekly.packets.color1	yellow
PE2CETrafficVolume. \ weekly.packets.range2	8400000 -
PE2CETrafficVolume. \ weekly.packets.color2	red
PE2CETrafficVolume. \ weekly.bytes.range1	840000000 8399999999
PE2CETrafficVolume. \ weekly.bytes.color1	yellow
PE2CETrafficVolume. \ weekly.bytes.range2	8400000000 -
PE2CETrafficVolume. \ weekly.bytes.color2	red
PE2CETrafficVolume. \ monthly.packets.range1	3600000 35999999
PE2CETrafficVolume. \ monthly.packets.color1	yellow
PE2CETrafficVolume. \ monthly.packets.range2	36000000 -
PE2CETrafficVolume. \ monthly.packets.color2	red
PE2CETrafficVolume. \ monthly.bytes.range1	3600000000 35999999999
PE2CETrafficVolume. \ monthly.bytes.color1	yellow
PE2CETrafficVolume. \ monthly.bytes.range2	36000000000 -
PE2CETrafficVolume. \ monthly.bytes.color2	red
PE2CETrafficVolume. \ yearly.packets.range1	43200000 431999999
PE2CETrafficVolume. \ yearly.packets.color1	yellow
PE2CETrafficVolume. \ yearly.packets.range2	432000000 -
PE2CETrafficVolume. \ yearly.packets.color2	red
PE2CETrafficVolume. \ yearly.bytes.range1	43200000000 431999999999
PE2CETrafficVolume. \ yearly.bytes.color1	yellow
PE2CETrafficVolume. \ yearly.bytes.range2	432000000000-
PE2CETrafficVolume. \ yearly.bytes.color2	red
netsys.SLA.reports.
tosValues	0, 1, 2, 3, 4, 5, 6, 7	Any subset of the numeric values 0 through 7 can be defined to override the default values.	Indicates the valid Type of Service values to be used by SLA reports (for MPLS and IPsec: the SLA Definition report; for MPLS only: the Customer and Network reports).
tosTitles	Class 4/Out, Class 3/Out, Class 2/Out, Class 1/Out, Class 4/In, Class 3/In, Class 2/In, Class 1/In	Any list of alphanumeric titles can be defined to override the default values. The list size must be the same as the netsys.SLA.\ reports.tosValues list size.	Indicates the valid titles to be used by SLA reports (for MPLS and IPsec: the SLA Definition report; for MPLS only: the Customer and Network reports).
netsys.srvc.VRFRDOverride.unix	false	The valid values are true and false.	Manual modification of VRF and RD. The value true indicates to allow manual modification of VRF and RD. The value false indicates not to allow manual modification of VRF and RD.
netsys.access.logfile.unix	vpnUserAccess.log	Any valid file name.	VPN user access log file name. Default to tmp directory if not an absolute file path.
netsys.sr.list.mode.unix	showAll	The valid value is showAll. Otherwise comment out this property.	Set to showAll if you want the user to see all Service Requests created by the login user. Comment out this property to set the Service Request List report to only show the Service Requests created by the login user.
netsys.htpasswd.unix	<APACHE_HOME>/bin/\ htpasswd	Valid location of an htpasswd executable.	Absolute path to the htpasswd executable, which is part of the Apache web-server package.
netsys.web.refresh.period.unix	20	The valid values are -1 and any positive integer (indicating seconds). To be sure you don't refresh too frequently, we recommend a minimum of 5 when enabled. -1 indicates to disable.	Task log automatic refresh period in seconds.
netsys.watchdog.server.CVPIMServer.\ frameRelayLmiType	None	The valid values are: none; ansi; cisco; q933a.	This value specifies the frame-relay Imi type on Frame Relay CE Interfaces.
netsys.close.sr.option.unix	Off	The valid values are: On and Off.	Set On to enable the Close SR button; set Off to disable the Close SR button.
netsys.configlet.export.unix	<ECSP_HOME>	Any valid directory to which you will export configuration files.	This property indicates a default directory to which you will export configuration files.