Navigation
[edit protocols] Hierarchy Level
The following statements can also be included at the [edit logical-systems logical-system-name] hierarchy level.
protocols {
BGP Global
bgp {accept-remote-nexthop;advertise-external <conditional>;advertise-inactive;(advertise-peer-as | noadvertise-peer-as);authentication-algorithm algorithm;authentication-key key;authentication-key-chain key-chain;bfd-liveness-detection{authentication {algorithm algorithm-name;key-chain key-chain-name;loose-check;}detection-time {threshold milliseconds;}holddown-interval milliseconds;minimum-interval milliseconds;minimum-receive-interval milliseconds;no-adaptation;session-mode (automatic | multihop | single-hop);transmit-interval {threshold milliseconds;minimum-interval milliseconds;}multiplier number;version (1 | automatic);}cluster cluster-identifier;damping;description text-description;disable;export [ policy-names ];family family-name{... family-configuration ...graceful-restart {disable;restart-time seconds;stale-routes-time seconds;}group group-name {... group-configuration ...}hold-time seconds;idle-after-switch-over (seconds | forever);import [ policy-names ];include-mp-next-hop;ipsec-sa ipsec-sa;keep (all | none);local-address address;local-as autonomous-system <private>;local-interface interface-name;local-preference local-preference;log-updown;metric-out (metric | igp (delay-med-update | <metric-offset>) | minimum-igp <metric-offset>);mtu-discovery;multihop {no-nexthop-change;ttl ttl-value;}no-aggregator-id;no-client-reflect;outbound-route-filter{bgp-orf-cisco-mode;prefix-based {accept {(inet | inet6);}}}out-delay seconds;passive;path-selection {(cisco-non-deterministic | always-compare-med | external-router-id);med-plus-igp {igp-multiplier number;med-multiplier number;}}peer-as autonomous-system;preference preference;remove-private;tcp-mss segment-size;traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <flag-modifier> <disable>;}vpn-apply-export;}
BGP Family
family {(inet | inet6 | inet-vpn | inet6-vpn | iso-vpn) {(any | flow | labeled-unicast | multicast | unicast) {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}add-path {send {path-count number;prefix-policy [ policy-names ];}receive;}<loops number>;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}rib-group group-name;}flow{no-validate policy-name;}labeled-unicast {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}aggregate-label {community community-name:}explicit-null {connected-only;}prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}resolve-vpn;rib inet.3;rib-group group-name;}}route-target {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}advertise-default;external-paths number;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}}(inet-mdt | inet-mvpn | inet6-mvpn | l2-vpn) {signaling {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}<loops number>;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}rib-group group-name}}}
BGP Group
group group-name {accept-remote-nexthop;advertise-external <conditional>;advertise-inactive;advertise-peer-as;allow ([ network/mask-length ] | all);as-override;authentication-algorithm algorithm;authentication-key key;authentication-key-chain key-chain;bfd-liveness-detection {authentication {algorithm algorithm-name;key-chain key-chain-name;loose-check;}detection-time {threshold milliseconds;}holddown-interval milliseconds;minimum-interval milliseconds;minimum-receive-interval milliseconds;multiplier number;no-adaptation;session-mode (automatic | multihop | single-hop);transmit-interval {threshold milliseconds;minimum-interval milliseconds;}version (1 | automatic);}cluster cluster-identifier;damping;description text-description;export [ policy-names ];family {(inet | inet6 | inet-vpn | inet6-vpn | iso-vpn) {(any | flow | labeled-unicast | multicast | unicast) {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}add-path {send {path-count number;prefix-policy [ policy-names ];}receive;}<loops number>;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}rib-group group-name;}flow {no-validate policy-name;}labeled-unicast {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}aggregate-label {community community-name:}explicit-null {connected-only;}prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}resolve-vpn;rib inet.3;rib-group group-name;}}route-target {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}advertise-default;external-paths number;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}}(inet-mdt | inet-mvpn | inet6-mvpn | l2-vpn) {signaling {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}<loops number>;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}rib-groupgroup-name}}}graceful-restart {disable;restart-time seconds;stale-routes-time seconds;}hold-time seconds;idle-after-switch-over (seconds | forever);import [ policy-names ];include-mp-next-hop;ipsec-sa ipsec-sa;keep (all | none);local-address address;local-as autonomous-system <private>;local-interface;local-preference local-preference;log-updown;metric-out (metric | minimum-igp <offset> | igp <offset>);mtu-discovery;multihop <ttl-value>;multipath {multiple-as;}no-advertise-peer-as;no-aggregator-id;no-client-reflect;outbound-route-filter {bgp-orf-cisco-mode;prefix-based {accept {(inet | inet6);}}}out-delay seconds;passive;peer-as autonomous-system;preference preference;remove-private;tcp-mss segment-size;traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <flag-modifier> <disable>;}type type;vpn-apply-export;
BGP Neighbor
neighbor address {accept-remote-nexthop;advertise-external <conditional>;advertise-inactive;advertise-peer-as;as-override;authentication-algorithm algorithm;authentication-key key;authentication-key-chain key-chain;bfd-liveness-detection {authentication {algorithm algorithm-name;key-chain key-chain-name;loose-check;}detection-time {threshold milliseconds;}minimum-interval milliseconds;minimum-receive-interval milliseconds;multiplier number;no-adaptation;session-mode (automatic | multihop | single-hop);transmit-interval {threshold milliseconds;minimum-interval milliseconds;}version (1 | automatic);}cluster cluster-identifier;damping;description text-description;export [ policy-names ];family{(inet | inet6 | inet-vpn | inet6-vpn | iso-vpn) {(any | flow | labeled-unicast | multicast | unicast) {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}add-path {send {path-count number;prefix-policy [ policy-names ];}receive;}<loops number>;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}rib-group group-name;}flow {no-validate policy-name;}labeled-unicast {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}aggregate-label {community community-name:}explicit-null {connected-only;}prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}resolve-vpn;rib inet.3;rib-group group-name;}}route-target {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}advertise-default;external-paths number;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}}(inet-mdt | inet-mvpn | inet6-mvpn | l2-vpn) {signaling {accepted-prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}<loops number>;prefix-limit {maximum number;teardown <percentage> <idle-timeout (forever | minutes)>;}rib-group group-name}}}graceful-restart {disable;restart-time seconds;stale-routes-time seconds;}hold-time seconds;idle-after-switch-over (seconds | forever);import [ policy-names ];include-mp-next-hop;ipsec-sa ipsec-sa;keep (all | none);local-address address;local-as autonomous-system <private>;local-interface interface-name;local-preference local-preference;log-updown;metric-out (metric | minimum-igp <offset> | igp <offset>);mtu-discovery;multihop <ttl-value>;multipath {multiple-as;}no-advertise-peer-as;no-aggregator-id;no-client-reflect;out-delay seconds;outbound-route-filter {bgp-orf-cisco-mode;prefix-based {accept {(inet | inet6);}}}passive;peer-as autonomous-system;preference preference;remove-private;tcp-mss segment-size;traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <flag-modifier> <disable>;}vpn-apply-export;
IS-IS
isis {clns-routing;disable;export [ policy-names ];graceful-restart {disable;helper-disable;restart-duration seconds;}ignore-attached-bit;interface (all | interface-name) {bfd-liveness-detection {authentication {algorithm algorithm-name;key-chain key-chain-name;loose-check;}detection-time {threshold milliseconds;}minimum-interval milliseconds;minimum-receive-interval milliseconds;transmit-interval {threshold milliseconds;minimum-interval milliseconds;}multiplier number;}checksum;csnp-interval (seconds | disable);disable;hello-padding (adaptive | loose | strict);ldp-synchronization {disable;hold-time seconds;}level level-number {disable;hello-authentication-key key;hello-authentication-key-chain key-chain-name;hello-authentication-type authentication;hello-interval seconds;hold-time seconds;ipv4-multicast-metric number;ipv6-multicast-metric number;ipv6-unicast-metric number;metric metric;passive;priority number;te-metric metric;}link-protection;lsp-interval milliseconds;mesh-group (value | blocked);no-adjacency-holddown;no-eligible-backup;no-ipv4-multicast;no-ipv6-multicast;no-ipv6-unicast;no-unicast-topology;node-link-protection;passive;point-to-point;}label-switched-path namelevel level metric metric;level level-number {authentication-key key;authentication-key-chain (Protocols IS-IS) key-chain-name;authentication-type authentication;external-preference preference;ipv6-multicast-metric number;no-csnp-authentication;no-hello-authentication;no-psnp-authentication;preference preference;prefix-export-limit number;wide-metrics-only;}loose-authentication-check;lsp-lifetime seconds;max-areas number;no-adjacency-holddown;no-authentication-check;no-ipv4-routing;no-ipv6-routing;overload {advertise-high-metrics;timeout seconds;}reference-bandwidth reference-bandwidth;rib-group {inet group--name;inet6 group--name;}spf-options {delay milliseconds;holddown milliseconds;rapid-runs number;}topologies {ipv4-multicast;ipv6-multicast;ipv6-unicast;}traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <flag-modifier> <disable>;}traffic-engineering {disable;family inet {shortcuts <ignore-lsp-metrics> {multicast-rpf-routes;}}family inet6 {shortcuts;}}}
OSPF
ospf {disable;export [ policy-names ];external-preference preference;graceful-restart {disable;helper-disable;notify-duration seconds;restart-duration seconds;}import [ policy-names ];no-nssa-abr;overload {timeout seconds;}preference preference;reference-bandwidth reference-bandwidth;rib-group group-name;sham-link {local address;}spf-options {delay milliseconds;holddown milliseconds;rapid-runs milliseconds;}traffic-engineering {accept-unnumbered-interfaces;multicast-rpf-routes;no-topology;shortcuts {ignore-lsp-metrics;lsp-metric-into-summary;}}traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <flag-modifier> <disable>;}area area-id {area-range network/mask-length <restrict> <exact> <override-metric metric>;interface interface-name {demand-circuit;disable;bfd-liveness-detection {authentication {algorithm algorithm-name;key-chain key-chain-name;loose-check;}detection-time {threshold milliseconds;}minimum-interval milliseconds;minimum-receive-interval milliseconds;multiplier number;no-adaptation;transmit-interval {threshold milliseconds;minimum-interval milliseconds;}version (1 | automatic);}ipsec-sa name;}no-interface-state-traps;authentication {md5 key-id {key [ key-values ];}simple-password key-id;}dead-interval seconds;hello-interval seconds;interface-type type;ldp-synchronization {disable;hold-time seconds;}metric metric;neighbor address <eligible>;network-summary-export [ policy-names ];network-summary-import [ policy-names ];passive;poll-interval seconds;priority number;retransmit-interval seconds;te-metric metric;transit-delay seconds;}label-switched-path name metric metric;nssa {area-range network/mask-length <restrict> <exact> <override-metric metric>;default-lsa {default-metric metric;metric-type type;type-7;}(no-summaries | summaries);}peer-interface interface-name {disable;dead-interval seconds;hello-interval seconds;retransmit-interval seconds;transit-delay seconds;}sham-link-remote address {ipsec-sa name;}demand-circuit;metric metric;}stub <default-metric metric> <(no-summaries | summaries)>;virtual-link neighbor-id router-id transit-area area-id {disable;ipsec-sa name;}authentication {md5 key-id;simple-password key-id;}dead-interval seconds;hello-interval seconds;retransmit-interval seconds;transit-delay seconds;
OSPFv3
ospf3 {disable;export [ policy-names ];external-preference preference;import [ policy-names ];overload {timeout seconds;}preference preference;reference-bandwidth reference-bandwidth;rib-group group-name;spf-options {delay milliseconds;holddown milliseconds;rapid-runs number;}traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <flag-modifier> <disable>;}area area-id {area-range network/mask-length <restrict> <exact> <override-metric metric>;interface interface-name {disable;dead-interval seconds;hello-interval seconds;ipsec-sa name;metric metric;neighbor address <eligible>;passive;priority number;retransmit-interval seconds;transit-delay seconds;}inter-area-prefix-export [policy-names ];inter-area-prefix-import [ policy-names ];nssa {area-range network/mask-length <restrict> <exact> <override-metric metric>;default-lsa {default-metric metric;metric-type type;type-7;}(no-summaries | summaries);}stub <default-metric metric> <(no-summaries | summaries)>;virtual-link neighbor-id router-id transit-area area-id {disable;dead-interval seconds;hello-interval seconds;ipsec-sa name;retransmit-interval seconds;transit-delay seconds;}}}
RIP
rip {any-sender;authentication-key password;authentication-type type;(check-zero | no-check-zero);graceful-restart {disable;restart-time seconds;}holddown seconds;import [ policy-names ];message-size number;metric-in metric;receive receive-options;rib-group group-name;route-timeout seconds;send send-options;update-interval seconds;traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <flag-modifier> <disable>;}group group-name {bfd-liveness-detection {authentication {algorithm algorithm-name;key-chain key-chain-name;loose-check;}detection-time {threshold milliseconds;}minimum-interval milliseconds;minimum-receive-interval milliseconds;multiplier number;no-adaptation;transmit-interval {threshold milliseconds;minimum-interval milliseconds;}version (0 | 1 | automatic);}export [ policy-names ];metric-out metric;preference preference;route-timeout seconds;update-interval seconds;neighbor neighbor-name {authentication-key password;authentication-type type;bfd-liveness-detection {authentication {algorithm algorithm-name;key-chain key-chain-name;loose-check;}detection-time {threshold milliseconds;}minimum-interval milliseconds;minimum-receive-interval milliseconds;transmit-interval {threshold milliseconds;minimum-interval milliseconds;}multiplier number;version (1 | automatic);}(check-zero | no-check-zero);import [ policy-names ];message-size number;metric-in metric;receive receive-options;route-timeout seconds;send send-options;update-interval seconds;}}}
RIPng
ripng {graceful-restart {disable;restart-time seconds;}holddown seconds;import [ policy-names ];metric-in metric;receive <none>;route-timeout seconds;send <none>;update-interval seconds;traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <flag-modifier> <disable>;}group group-name {export [ policy-names ];metric-out metric;preference number;route-timeout seconds;update-interval seconds;neighbor neighbor-name {import [ policy-names ];metric-in metric;receive <none>;route-timeout seconds;send <none>;update-interval seconds;}}}
Router Advertisement
neighbor discoveryconfiguration statementsrouter-advertisement {interface interface-name {current-hop-limit number;default-lifetime seconds;(link-mtu | no-link-mtu);(managed-configuration | no-managed-configuration);max-advertisement-interval seconds;min-advertisement-interval seconds;(other-stateful-configuration | no-other-stateful-configuration);prefix prefix {(autonomous | no-autonomous);(on-link | no-on-link);preferred-lifetime seconds;valid-lifetime seconds;}reachable-time milliseconds;retransmit-timer milliseconds;traceoptions {file filename <files number> <size size> <world-readable | no-world-readable>;flag flag <detail> <disable>;}}}
Router Discovery
router-discovery {disable;interface interface-name {min-advertisement-interval seconds;max-advertisement-interval seconds;lifetime seconds;}address address {(advertise | ignore);(broadcast | multicast);(priority number | ineligible);}}
Secure Neighbor Discovery
neighbor-discovery {secure {security-level {(default | secure-messages-only);}cryptographic-address {key-length number;key-pair pathname;}timestamp {clock-drift number;known-peer-window seconds;new-peer-window seconds;}traceoptions {file filename <files number> <match regular-expression> <size size> <world-readable | no-world-readable>;flag flag;no-remote-trace;}}}
