The following commands are added in this release.

• [ no ] aaa server radius dynamic-author

• [ no ] bfd authentication interop

• clear aaa client radius statistics <hostipname>

• clear aaa server radius statistics

• clear ethpm config counter

• clear logging dropcount

• { { [ no ] client <hostipname> { { vrf { management | default | <vrf_name> } [ server-key { 0 <s0> | 7 <s1> | <s2> } ] } | { server-key { 0 <s0> | 7 <s1> | <s2> } [ vrf { management | default | <vrf_name> } ] } } } | { no client <hostipname> } | { no client <hostipname> vrf } | { no client <hostipname> server-key } }

• { [ no ] destination { <ipaddr> } [ use-vrf { <vrf_name> | <vrf-known-name> } ] | no destination }

• [ no ] egress-host <hostip>

• [ no ] egress-interface <interface>

• [ no ] erspan-ip <ip-addr>

• [ no ] feature pnp

• [ no ] hardware access-list tcam region ing-flow-redirect <tcam_size>

• [ no ] hardware profile pbr ecmp paths <maxpath>

• [ no ] hardware profile racl priority toggle

• [ no ] ignore routable

• [ no ] { ip | ipv4 } routing multicast holddown [ <route-holddown-sec> | [ disable-init-phase ] ]

• [ no ] logging rfc-strict { 5424 }

• [ no ] nbm flow policer

• [ no ] nbm flow-definition <group> [ <source> ]

• pnp accelerate

• pnp profile transport { http | https } <ipaddr> <tport> | no pnp profile

• [ no ] policer

• { { [ no ] port <i0> } | { no port } }

• [ no ] qos-mode pipe

• { [ no ] server-key { 0 <s0> | 7 <s1> | <s2> } } | { no server-key }

• set inner mpls { l3-type <l3_type> | label0_lbl <label0_lbl> | label0_ttl <label0_ttl> | label0_sbit <label0_sbit> | label1_lbl <label1_lbl> | label1_ttl <label1_ttl> | label1_sbit <label1_sbit> | label2_lbl <label2_lbl> | label2_ttl <label2_ttl> | label2_sbit <label2_sbit> | label3_lbl <label3_lbl> | label3_ttl <label3_ttl> | label3_sbit <label3_sbit> | label4_lbl <label4_lbl> | label4_ttl <label4_ttl> | label4_sbit <label4_sbit> | label5_lbl <label5_lbl> | label5_ttl <label5_ttl> | label5_sbit <label5_sbit> } +

• set outer mpls { l3-type <l3_type> | label0_lbl <label0_lbl> | label0_ttl <label0_ttl> | label0_sbit <label0_sbit> | label1_lbl <label1_lbl> | label1_ttl <label1_ttl> | label1_sbit <label1_sbit> | label2_lbl <label2_lbl> | label2_ttl <label2_ttl> | label2_sbit <label2_sbit> | label3_lbl <label3_lbl> | label3_ttl <label3_ttl> | label3_sbit <label3_sbit> | label4_lbl <label4_lbl> | label4_ttl <label4_ttl> | label4_sbit <label4_sbit> | label5_lbl <label5_lbl> | label5_ttl <label5_ttl> | label5_sbit <label5_sbit> } +

• set { outer | inner } mpls { l3-type <l3_type> | label0_lbl <label0_lbl> | label0_ttl <label0_ttl> | label0_sbit <label0_sbit> | label1_lbl <label1_lbl> | label1_ttl <label1_ttl> | label1_sbit <label1_sbit> | label2_lbl <label2_lbl> | label2_ttl <label2_ttl> | label2_sbit <label2_sbit> | label3_lbl <label3_lbl> | label3_ttl <label3_ttl> | label3_sbit <label3_sbit> | label4_lbl <label4_lbl> | label4_ttl <label4_ttl> | label4_sbit <label4_sbit> | label5_lbl <label5_lbl> | label5_ttl <label5_ttl> | label5_sbit <label5_sbit> } +

• [ no ] stage-flow

• [ no ] system module failure-action shutdown multibit-parity

• [ no ] system security sudo prompt-password

• [ no ] terminal dont-expunge

• username <username> passphrase { lifetime <ltime> | warntime <wtime> | gracetime <gtime> } +

• no username <username> passphrase { lifetime [ warntime [ gracetime | timevalues ] | gracetime [ warntime | timevalues ] | timevalues ] | warntime [ lifetime [ gracetime | timevalues ] | gracetime [ lifetime | timevalues ] | timevalues ] | gracetime [ lifetime [ warntime | timevalues ] | warntime [ lifetime | timevalues ] | timevalues ] | timevalues }

• userpassphrase { default-lifetime <def-ltime> | default-warntime <def-wtime> | default-gracetime <def-gtime> } +

• no userpassphrase { default-lifetime | default-warntime | default-gracetime | timevalues }

• virtual peer-link destination <dst-ip> source <src-ip> [ dscp <dscp-val> ] | no virtual peer-link

The following commands are changed in this release.

• OLD: [ no ] advertisement-interval <adv-sec>

• NEW: advertisement-interval <adv-sec> | { no | default } advertisement-interval [ <adv-sec> ]

• OLD: bfd move-session target <target_mod> [ <discr> ]

• NEW: bfd move-session target <module> [ <discr> ]

• OLD: bfd multihop hosting-linecard add module <module_num>

• NEW: bfd multihop hosting-linecard add module <module>

• OLD: no bfd multihop hosting-linecard add module <module_num>

• NEW: no bfd multihop hosting-linecard add module <module>

• OLD: event-history xbar category debug { demux | deque | flow | ha | init }

• NEW: event-history xbar category debug { demux | trace | ha | init }

• OLD: event-history xbar no category debug { demux | deque | flow | ha | init }

• NEW: event-history xbar no category debug { demux | trace | ha | init }

• OLD: [ no ] hardware profile [ vxlan | mpls ] module { all | <module> }

• NEW: [ no ] hardware profile [ vxlan | mpls | acl-stats ] module { all | <module> }

• OLD: mac address-table limit { system | vlan <id> } [ <limitcount> ] [ actiondrop ] [ __readonly__ <info_str> ] | no mac address-table limit { system | vlan <id> } [ <limitcount> ] [ actiondrop ]

• NEW: mac address-table limit { system | vlan <id> | interface <interface-name> } { <limitcount> } [ actiondrop ] [ __readonly__ <info_str> ] | no mac address-table limit { system | vlan <id> | interface <interface-name> } [ <limitcount> ] [ actiondrop ]

• OLD: [ no | default ] next-hop-self

• NEW: [ no | default ] next-hop-self [ all ]

• OLD: { [ no ] nxsdk service-name <service-name> }

• NEW: { [ no ] nxsdk service-name <nxsdk-service-name> }

• OLD: [ no ] postcard-telemetry queue-profile <queue_profilename>

• NEW: [ no ] postcard-telemetry queue-profile [ <queue_profilename> | queue-profile-default ]

• OLD: [ no ] { platform | hardware } qos nodrop-queue-thresholds # 4361 ../platform/dc3/pltfm_config/server/pltfm_config.cmd Queue-yellow <q-yellow> Queue-green <q-green>

• NEW: [ no ] { platform | hardware } qos nodrop-queue-thresholds # 4429 ../platform/dc3/pltfm_config/server/pltfm_config.cmd Queue-yellow <q-yellow> Queue-green <q-green>

• OLD: [ no ] { platform | hardware } qos nodrop-queue-thresholds-FX # 4399 ../platform/dc3/pltfm_config/server/pltfm_config.cmd Queue-green <q-green>

• NEW: [ no ] { platform | hardware } qos nodrop-queue-thresholds-FX # 4467 ../platform/dc3/pltfm_config/server/pltfm_config.cmd Queue-green <q-green>

• OLD: [ no ] radius-server host { <hostipname> } test { { username <s0> { [ password <s1> [ idle-time <i1> ] ] | [ idle-time <i1> ] } } | { password <s1> [ idle-time <i1> ] } | { idle-time <i1> } }

• NEW: [ no ] radius-server host { <hostipname> } test { { username <s0> { [ password { <s1> | 0 <s2> | 7 <s7> } [ idle-time <i1> ] ] | [ idle-time <i1> ] } } | { password { <s1> | 0 <s2> | 7 <s7> } [ idle-time <i1> ] } | { idle-time <i1> } }

• OLD: [ no ] radius-server test { { username <s0> { [ password <s1> [ idle-time <i1> ] ] | [ idle-time <i1> ] } } | { password <s1> [ idle-time <i1> ] } | { idle-time <i1> } }

• NEW: [ no ] radius-server test { { username <s0> { [ password { <s1> | 0 <s2> | 7 <s7> } [ idle-time <i1> ] ] | [ idle-time <i1> ] } } | { password { <s1> | 0 <s2> | 7 <s7> } [ idle-time <i1> ] } | { idle-time <i1> } }

• OLD: [ no ] set { { discard-class <dis-class-val> } | { { { cos1 cos2 } | { dscp1 dscp2 } | { prec1 prec2 } | { dis-class1 dis-class2 } | { dscp3 mpls-exp-imposition } | { mpls-exp-topmost dscp4 } | { mpls-exp-topmost1 mpls-exp-topmost2 } } table <table-map-name> } | { mpls experimental { { topmost <exp-value> } | { imposition <exp-value-imp> } } } }

• NEW: [ no ] set { { discard-class <dis-class-val> } | { { { cos1 cos2 } | { dscp1 dscp2 } | { prec1 prec2 } | { dis-class1 dis-class2 } | { dscp3 mpls-exp-imposition } | { mpls-exp-topmost dscp4 } | { mpls-exp-topmost1 mpls-exp-topmost2 } } table <table-map-name> } }

• OLD: [ no ] set { { dlb-disable } | { precedence [ prec-tunnel ] { <prec-val> | <prec-enum> } } | { dscp [ tunnel ] { <dscp-val> | <dscp-enum> } } | { cos <cos-val> } | { qos-group <qos-grp-val> } }

• NEW: [ no ] set { { dlb-disable } | { precedence [ prec-tunnel ] { <prec-val> | <prec-enum> } } | { dscp [ tunnel ] { <dscp-val> | <dscp-enum> } } | { cos <cos-val> } | { qos-group <qos-grp-val> } | { mpls experimental { { topmost <exp-value> } | { imposition <exp-value-imp> } } } }

• OLD: [ no ] system { { routing { hierarchical def-max-mode l3 64b-alpm | non-hierarchical [ max-mode l3-nh [ 64b-alpm-nh ] ] | max-mode host | max-mode-tor { l2 | l3 | l2-l3 } | template-overlay-host-scale | template-lpm-heavy | template-lpm-scale-v6-64 | template-dual-stack-host-scale | template-service-provider | template-multicast-heavy | template-multicast-ext-heavy | template-vxlan-scale | template-mpls-heavy | template-internet-peering | template-multicast-nbm | template-l3-heavy } } | { non-hierarchical-routing [ max-l3-mode ] } }

• NEW: [ no ] system { { routing { hierarchical def-max-mode l3 64b-alpm | non-hierarchical [ max-mode l3-nh [ 64b-alpm-nh ] ] | max-mode host | max-mode-tor { l2 | l3 | l2-l3 } | template-overlay-host-scale | template-lpm-heavy | template-l2-heavy | template-lpm-scale-v6-64 | template-dual-stack-host-scale | template-service-provider | template-dual-stack-mcast | template-multicast-heavy | template-multicast-ext-heavy | template-vxlan-scale | template-mpls-heavy | template-internet-peering | template-multicast-nbm | template-l3-heavy | template-l3-heavy-inband-telemetry-transit | template-inband-telemetry-transit } } | { non-hierarchical-routing [ max-l3-mode ] } }

• OLD: [ no ] tacacs-server host <hostipnam> test { { username <s0> { [ password <s1> [ idle-time <i1> ] ] | [ idle-time <i1> ] } } | { password <s1> [ idle-time <i1> ] } | { idle-time <i1> } }

• NEW: [ no ] tacacs-server host <hostipnam> test { { username <s0> { [ password { <s1> | 0 <s2> | 7 <s7> } [ idle-time <i1> ] ] | [ idle-time <i1> ] } } | { password { <s1> | 0 <s2> | 7 <s7> } [ idle-time <i1> ] } | { idle-time <i1> } }

• OLD: [ no ] tacacs-server test { { username <s0> { [ password <s1> [ idle-time <i1> ] ] | [ idle-time <i1> ] } } | { password <s1> [ idle-time <i1> ] } | { idle-time <i1> } }

• NEW: [ no ] tacacs-server test { { username <s0> { [ password { <s1> | 0 <s2> | 7 <s7> } [ idle-time <i1> ] ] | [ idle-time <i1> ] } } | { password { <s1> | 0 <s2> | 7 <s7> } [ idle-time <i1> ] } | { idle-time <i1> } }

• OLD: timestamp { ingress id <ingress-source-id> | egress id <egress-source-id> } | timestamp { ingress id <ingress-source-id> egress id <egress-source-id> } | no timestamp

• NEW: timestamp { ingress id <ingress-source-id> [ egress id <egress-source-id> ] } | timestamp { egress id <egress-source-id> [ ingress id <ingress-source-id> ] } | no timestamp

• OLD: { <sequence-no> Access-list <acl-name> { vlan-group <vg-name> | ingress-port-group <ipg-name> } { { egress-port-group <epg-name> [ load-balance { port-channel | algo-based { src-ip | dst-ip } } ] [ reverse-policy | { reverse-port-group <rev-epg-name> [ reverse-port-channel ] } ] } | { egress-device-group <edg-name> [ load-balance { ecmp | algo-based { src-ip | dst-ip } } ] [ reverse-device-group <rev-edg-name> ] } } [ mode <mode> ] } | { no sequence <sequence-no> }

• NEW: { <sequence-no> Access-list <acl-name> { vlan-group <vg-name> | ingress-port-group <ipg-name> } { { egress-port-group <epg-name> [ load-balance { port-channel | algo-based { src-ip | dst-ip } } ] [ reverse-policy | { reverse-port-group <rev-epg-name> [ reverse-port-channel ] } ] } | { egress-device-group <edg-name> [ load-balance { ecmp | algo-based { src-ip | dst-ip } } ] [ reverse-device-group <rev-edg-name> ] } } { [ mode <mode> ] | [ span ] } } | { no sequence <sequence-no> }

• OLD: { [ <seqno> ] | no } <permitdeny> { { ethertype <ethertypeid> } | { <proto_udp> { { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { { [ [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] [ nve vni <vni-id> ] } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> | <dscp_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + | { [ [ fragments ] | [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } } [ nve vni <vni-id> ] } } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + { { [ [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] # 2293 ../feature/acl_mgr/cli/aclmgr.cmd [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ]

• NEW: { [ <seqno> ] | no } <permitdeny> { { ethertype <ethertypeid> } | { <proto_udp> { { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { { [ [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] [ nve vni <vni-id> ] } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> | <dscp_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + | { [ [ fragments ] | [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } } [ nve vni <vni-id> ] } } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + { { [ [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ log ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] # 2308 ../feature/acl_mgr/cli/aclmgr.cmd [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ]

• OLD: { [ <seqnum> ] <permitdeny> { ip { <src_addr> <src_wild> | <src_prefix> | <src_any> | host <src_hostaddr> } { <dst_addr> <dst_wild> | <dst_prefix> | <dst_any> | host <dst_hostaddr> } } } | { no <seqnum> }

• NEW: { [ <seqnum> ] <permitdeny> { ip { <src_addr> <src_wild> | <src_prefix> | <src_any> | host <src_hostaddr> } { <dst_addr> <dst_wild> | <dst_prefix> | <dst_any> | host <dst_hostaddr> } [ udf <udf_name> <udf_val> <udf_mask> ] } } | { [ <seqnum> ] <permitdeny> udf <udf_name1> <udf_val1> <udf_mask1> } | { no <seqnum> }

The following commands are removed in this release.

• { ip | ipv4 } routing multicast holddown { <route-holddown-sec> | <none> } | no { ip | ipv4 } routing multicast holddown [ <route-holddown-sec> | <none> ]

• { ipv6 pim ssm { { range { <group> + | none } } | { route-map <route-map-name> } } | no ipv6 pim ssm { { range { <group> + | none } } | { route-map <route-map-name> } } }

• | validate-json