Tip
This is the documentation for the 22.06 version. Looking for the documentation of the latest version? Have a look here.
Commands¶
Mode List¶
Internal Name |
Prompt |
Mode Description |
---|---|---|
access_list |
config-access-list |
Dynamic Routing Accesss List |
acl |
config-acl |
Access Control List |
acl_rule |
config-acl-rule |
ACL Rule |
aspath |
config-aspath |
AS Path ordered rule |
auth |
config-user |
User Authentication |
bfd |
config-bfd |
Bidirectional Forwarding Detection |
bfd_key |
config-bfd-key |
BFD key |
bgp |
config-bgp |
BGP server |
bgp_ip4multi |
config-bgp-ip4multi |
BGP IPv4 Multicast Address Family |
bgp_ip4multi_nbr |
config-bgp-ip4multi-nbr |
BGP IPv4 Multicast Address Family Neighbor |
bgp_ip4uni |
config-bgp-ip4uni |
BGP IPv4 Unicast Address Family |
bgp_ip4uni_nbr |
config-bgp-ip4uni-nbr |
BGP IPv4 Unicast Address Family Neighbor |
bgp_ip6multi |
config-bgp-ip6multi |
BGP IPv6 Multicast Address Family |
bgp_ip6multi_nbr |
config-bgp-ip6multi-nbr |
BGP IPv6 Multicast Address Family Neighbor |
bgp_ip6uni |
config-bgp-ip6uni |
BGP IPv6 Unicast Address Family |
bgp_ip6uni_nbr |
config-bgp-ip6uni-nbr |
BGP IPv6 Unicast Address Family Neighbor |
bgp_neighbor |
config-bgp-neighbor |
BGP Neighbor |
bond |
config-bond |
Interface bonding |
bridge |
config-bridge |
Bridge |
community_list |
config-community-list |
BGP community list |
config |
config |
Configuration |
dns_resolver |
config-dns-resolver |
DNS Resolver |
frr_bgp |
config-frr-bgp |
Dynamic Routing BGP |
frr_ospf |
config-frr-ospf |
Dynamic Routing OSPF |
frr_ospf6 |
config-frr-ospf6 |
Dynamic Routing OSPF6 |
gre |
config-gre |
Generic Route Encapsulation |
host_acl |
config-host-acl |
Host Access List |
host_acl_rule |
config-host-acl-rule |
Host Access List Rule |
host_if |
config-host-if |
Host interface |
ike_authentication |
config-ike-auth |
IKE peer authentication |
ike_authentication_round |
config-ike-auth-round |
IKE peer authentication round |
ike_child |
config-ike-child |
IKE child SA |
ike_child_proposal |
config-ike-child-proposal |
IKE child SA proposal |
ike_identity |
config-ike-identity |
IKE peer identity |
ike_proposal |
config-ike-proposal |
IKE proposal |
interface |
config-interface |
Interface |
ipfix_exporter |
config-ipfix-exporter |
IPFIX Exporter |
ipfix_observation_point |
config-ipfix-obs-pt |
IPFIX Observation Point |
ipfix_selection_process |
config-ipfix-sel-proc |
IPFIX Selection Process |
ipsec_crypto_ike |
config-ipsec-crypto-ike |
IKE |
ipsec_crypto_manual |
config-crypto-manual |
IPsec static keying |
ipsec_tunnel |
config-ipsec-tunnel |
IPsec tunnel |
kea_dhcp4 |
config-kea-dhcp4 |
DHCP4 Server |
kea_dhcp4_log |
config-kea-dhcp4-log |
DHCP4 Log |
kea_dhcp4_log_out |
config-kea-dhcp4-log-out |
DHCP4 Log output |
kea_dhcp4_opt |
config-kea-dhcp4-opt |
DHCP4 option |
kea_dhcp4_optdef |
config-kea-dhcp4-optdef |
DHCP4 option definition |
kea_subnet4 |
config-kea-dhcp4-subnet4 |
DHCP4 subnet4 |
kea_subnet4_opt |
config-kea-subnet4-opt |
DHCP4 subnet4 option |
kea_subnet4_pool |
config-kea-subnet4-pool |
DHCP4 subnet4 pool |
kea_subnet4_pool_opt |
config-kea-subnet4-pool-opt |
DHCP4 subnet4 pool option |
kea_subnet4_reservation |
config-kea-subnet4-reservation |
DHCP4 subnet4 host reservation |
kea_subnet4_reservation_opt |
config-kea-subnet4-reservation-opt |
DHCP4 subnet4 host res option |
loopback |
config-loopback |
Loopback interface |
macip |
config-macip |
MAC/IP access control list |
macip_rule |
config-macip-rule |
MACIP Rule |
map |
config-map |
MAP-E/MAP-T |
map_param |
config-map-param |
MAP-E/MAP-T global parameter |
master |
Initial, priviledged |
|
memif |
config-memif |
Memif interface |
nacm_group |
config-nacm-group |
NACM group |
nacm_rule |
config-nacm-rule |
NACM rule |
nacm_rule_list |
config-nacm-rule-list |
NACM rule list |
ntp |
config-ntp |
NTP |
ntp_restrict |
config-ntp-restrict |
NTP restriction |
ntp_server |
config-ntp-server |
NTP server |
ospf |
config-ospf |
Dynamic routing OSPF Server |
ospf_if |
config-ospf-if |
Dynamic routing OSPF Interface |
ospf6 |
config-ospf6 |
Dynamic routing OSPF Server |
ospf6_if |
config-ospf6-if |
Dynamic routing OSPF Interface |
prefix_list |
config-pref-list |
Dynamic routing prefix list |
restconf |
config-restconf |
RESTCONF server configuration |
route_dynamic_manager |
config-route-dynamic-manager |
Dynamic routing manager |
route_map |
config-route-map |
Route Map |
route_map_rule |
config-route-map-rule |
Route Map Rule |
route_table |
config-route-table |
Static Route Table |
rttbl4_next_hop |
config-rttbl4-next-hop |
IPv4 Next Hop |
rttbl6_next_hop |
config-rttbl6-next-hop |
IPv6 Next Hop |
span |
config-span |
SPAN |
subif |
config-subif |
Sub-interface VLAN |
tap |
config-tap |
Tap |
tunnel_nh_if |
config-tunnel-nh-if |
Tunnel Next Hop |
unbound |
config-unbound |
Unbound DNS Server |
unbound_fwd_zone |
config-unbound-fwd-zone |
Unbound forward-zone |
unbound_local_host |
config-unbound-local-host |
Unbound local host override |
unbound_local_zone |
config-unbound-local-zone |
Unbound local zone override |
vrrp4 |
config-vrrp4 |
IPv4 VRRP |
vrrp6 |
config-vrrp6 |
IPv6 VRRP |
vxlan |
config-vxlan |
VXLAN |
wireguard |
config-wireguard |
WireGuard instances |
wireguard_peer |
config-wireguard-peer |
WireGuard peer instances |
Master Mode Commands¶
tnsr# configure [terminal]
tnsr# debug cli [level <n>]
tnsr# debug tnsr (clear|set|value) <flags>
tnsr# debug vmgmt (clear|set|value) <flags>
tnsr# no debug (cli|tnsr|vmgmt)
tnsr# exit
tnsr# ls [-l]
tnsr# [(host|dataplane)] ping (<dest-host>|<dest-ip>) [ipv4|ipv6]
[interface <if-name>] [source <src-addr>] [count <count>]
[packet-size <bytes>] [ttl <ttl-hops>] [timeout <wait-sec>]
[buffered] [interval <seconds:0.000001-6000>]
tnsr# pwd
tnsr# (host|dataplane) shell [<command>]
tnsr# [(host|dataplane)] traceroute (<dest-host>|<dest-ip>) [ipv4|ipv6]
[interface <if-name>] [source <src-addr>] [packet-size <bytes>]
[no-dns] [ttl <ttl-hos>] [waittime <wait-sec>] [buffered]
tnsr# whoami
Package Management Commands¶
tnsr# package cache-clean
tnsr# package (info|list) [available|installed|updates] [<pkg-glob>]
tnsr# package install <pkg-glob>
tnsr# package reinstall <pkg-glob>
tnsr# package remove <pkg-glob>
tnsr# package search <term>
tnsr# package upgrade <pkg-glob>
Public Key Infrastructure Commands¶
tnsr# pki ca list
tnsr# pki ca <name> (append <source-name>|delete|enter|get|import <file>)
tnsr# pki certificate list
tnsr# pki certificate <name> (delete|enter|get|import <file>)
tnsr# pki private-key list
tnsr# pki private-key <name> (delete|enter|get|import <file>)
tnsr# pki private-key <name> generate [key-length (2048|3072|4096)]
tnsr# pki signing-request list
tnsr# pki signing-request <name> (delete|generate|get|sign (ca-name <ca>|self))
tnsr# pki signing-request set (city|common-name|country|org|org-unit|state) <text>
tnsr# pki signing-request set digest (sha224|sha256|sha384|sha512)
tnsr# pki signing-request settings (clear|show)
tnsr# pki signing-request set subject-alt-names add
(email|hostname|ipv4-address|ipv6-address|uri) <value>
tnsr# pki signing-request set subject-alt-names clear
tnsr# pki signing-request set subject-alt-names delete <name>
Packet Trace Commands¶
tnsr# trace capture node <input-node> [maximum <max>] [verbose] [pre-clear]
tnsr# trace clear
tnsr# trace filter (exclude|include) node <graph-node> [maximum <max>]
tnsr# trace filter none
tnsr# show trace [maximum <max>]
Config Mode Commands¶
tnsr(config)# [no] acl <acl-name>
tnsr(config)# [no] auth user <user-name>
tnsr(config)# bfd conf-key-id <conf-key-id>
tnsr(config)# bfd session <bfd-session>
tnsr(config)# [no] cli history-config (enable|disable)
tnsr(config)# [no] cli history-config lines [<count>]
tnsr(config)# [no] cli option (auto-discard|check-delete-thresholds)
tnsr(config)# configuration candidate clear
tnsr(config)# configuration candidate commit
tnsr(config)# configuration candidate discard
tnsr(config)# configuration candidate load <filename> [(replace|merge)]
tnsr(config)# configuration candidate validate
tnsr(config)# configuration copy candidate startup
tnsr(config)# configuration copy running (candidate|startup)
tnsr(config)# configuration copy startup candidate
tnsr(config)# configuration history (enable|disable)
tnsr(config)# [no] configuration history autosave-period <num>
tnsr(config)# configuration history version (load|save) <version-name>
tnsr(config)# no configuration history [storage]
tnsr(config)# no configuration history version <version-name>
tnsr(config)# configuration rollback timer start minutes <minutes> config-source (running|startup|<filename>)
tnsr(config)# configuration rollback timer restart minutes <minutes>
tnsr(config)# configuration rollback (trigger|cancel)
tnsr(config)# configuration save (candidate|running) <filename>
tnsr(config)# [no] dataplane buffers buffers-per-numa [<buffers-per-numa>]
tnsr(config)# [no] dataplane buffers default-data-size [<default-data-size>]
tnsr(config)# [no] dataplane cpu corelist-workers [<core-first> [- <core-last>]]
tnsr(config)# [no] dataplane cpu coremask-workers <coremask-workers>
tnsr(config)# [no] dataplane cpu main-core <main-core>
tnsr(config)# [no] dataplane cpu skip-cores <skip-cores>
tnsr(config)# [no] dataplane cpu workers <workers>
tnsr(config)# dataplane dpdk dev <pci-id> (crypto|crypto-vf)
tnsr(config)# dataplane dpdk dev (<pci-id>|<vmbus-uuid>) network
[num-rx-queues [<num-rx-queues>]] [num-tx-queues [<num-tx-queues>]]
[num-rx-desc [<num-rx-desc>]] [num-tx-desc [<num-tx-desc>]]
[tso (off|on)] [devargs <name>=<value>]
tnsr(config)# dataplane dpdk dev default network
[num-rx-queues [<num-rx-queues>]] [num-tx-queues [<num-tx-queues>]]
[num-rx-desc [<num-rx-desc>]] [num-tx-desc [<num-tx-desc>]]
[tso (off|on)] [devargs <name>=<value>]
tnsr(config)# dataplane dpdk dev (<pci-id>|<vmbus-uuid>) network name <name>
tnsr(config)# no dataplane dpdk dev (<pci-id>|<vmbus-uuid>|default) [name] [num-rx-queues] [num-tx-queues]
[num-rx-desc] [num-tx-desc] [devargs <name>=<value>]
tnsr(config)# dataplane dpdk blacklist <vendor-id>:<device-id>
tnsr(config)# dataplane dpdk blacklist (<pci-id>|<vmbus-uuid>)
tnsr(config)# [no] dataplane dpdk decimal-interface-names
tnsr(config)# dataplane dpdk iova-mode (pa|va)
tnsr(config)# [no] dataplane dpdk iova-mode
tnsr(config)# [no] dataplane dpdk log-level (alert|critical|debug|emergency|error|info|notice|warning)
tnsr(config)# [no] dataplane dpdk no-multi-seg
tnsr(config)# [no] dataplane dpdk no-pci
tnsr(config)# [no] dataplane dpdk no-tx-checksum-offload
tnsr(config)# [no] dataplane dpdk tcp-udp-checksum
tnsr(config)# [no] dataplane dpdk uio-driver [<uio-driver>]
tnsr(config)# [no] dataplane ethernet default-mtu <size>
tnsr(config)# [no] dataplane ip6 hash-buckets [<size>]
tnsr(config)# [no] dataplane linux-cp nl-rx-buffer-size <n>
tnsr(config)# [no] dataplane linux-cp nl-batch-size <n>
tnsr(config)# [no] dataplane linux-cp nl-batch-delay-ms <n>
tnsr(config)# [no] dataplane logging (default-log-level|default-syslog-log-level)
(alert|crit|debug|disabled|emerg|err|info|notice|warn)
tnsr(config)# [no] dataplane logging size <message-count>
tnsr(config)# [no] dataplane logging unthrottle-time <seconds>
tnsr(config)# [no] dataplane memory main-heap-size <heap-size>[kKmMgG]
tnsr(config)# [no] dataplane memory main-heap-page-size (default|4k|2m|1g)
tnsr(config)# [no] dataplane statseg heap-size <heap-size>[kKmMgG]
tnsr(config)# [no] dataplane statseg per-node-counters enable
tnsr(config)# [no] dataplane statseg socket-name <socket-name>
tnsr(config)# debug cli [level <n>]
tnsr(config)# debug tnsr (clear|set|value) <flags>
tnsr(config)# debug vmgmt (clear|set|value) <flags>
tnsr(config)# no debug (cli|tnsr|vmgmt)
tnsr(config)# dhcp4 (enable|disable)
tnsr(config)# [no] dhcp4 server
tnsr(config)# exit
tnsr(config)# [no] gre <gre-name>
tnsr(config)# [no] host acl <acl-name>
tnsr(config)# [no] host interface <host-if-name>
tnsr(config)# [no] interface <if-name>
tnsr(config)# interface clear counters [<interface>]
tnsr(config)# [no] interface bond <instance>
tnsr(config)# [no] interface bridge domain <domain-id>
tnsr(config)# [no] interface loopback <name>
tnsr(config)# [no] interface memif socket <socket-id> (filename <file>|interface <if-id>)
tnsr(config)# [no] interface subif <interface> <subid>
tnsr(config)# [no] interface tap <host-name>
tnsr(config)# [no] ip reassembly (full|virtual) (ipv4|ipv6) expire-walk-interval [<interval-ms>]
tnsr(config)# [no] ip reassembly (full|virtual) (ipv4|ipv6) max-reassemblies [<max>]
tnsr(config)# [no] ip reassembly (full|virtual) (ipv4|ipv6) max-reassembly-length [<length>]
tnsr(config)# [no] ip reassembly (full|virtual) (ipv4|ipv6) timeout [<timeout-ms>]
tnsr(config)# [no] ipfix exporter
tnsr(config)# [no] ipfix observation-point <name>
tnsr(config)# [no] ipfix selection-process <name>
tnsr(config)# [no] ipsec tunnel <tunnel-num>
tnsr(config)# [no] lldp system-name <system-name>
tnsr(config)# [no] lldp tx-hold <transmit-hold>
tnsr(config)# [no] lldp tx-interval <transmit-interval>
tnsr(config)# [no] macip <macip-name>
tnsr(config)# nacm (enable|disable)
tnsr(config)# no nacm enable
tnsr(config)# [no] nacm exec-default (deny|permit)
tnsr(config)# [no] nacm group <group-name>
tnsr(config)# [no] nacm read-default (deny|permit)
tnsr(config)# [no] nacm rule-list <rule-list-name>
tnsr(config)# [no] nacm write-default (deny|permit)
tnsr(config)# [no] nat global-options nat44 enabled (true|false)
tnsr(config)# [no] nat global-options nat44 endpoint-dependent (true|false)
tnsr(config)# [no] nat global-options nat44 forwarding (true|false)
tnsr(config)# [no] nat global-options nat44 max-translations-per-thread <n>
tnsr(config)# [no] nat global-options nat44 max-translations-per-user <n>
tnsr(config)# [no] nat global-options nat44 max-users-per-thread <n>
tnsr(config)# [no] nat global-options nat44 out2in-dpo (true|false)
tnsr(config)# [no] nat global-options nat44 static-mapping-only (true|false)
tnsr(config)# [no] nat global-options timeouts (icmp|tcp_established|tcp_transitory|udp) <seconds>
tnsr(config)# [no] nat ipfix logging enable
tnsr(config)# [no] nat ipfix logging domain <domain-id>
tnsr(config)# [no] nat ipfix logging src-port <src-port>
tnsr(config)# [no] nat nat64 map <domain-name>
tnsr(config)# [no] nat nat64 map parameters
tnsr(config)# [no] nat pool address <ip-first> [- <ip-last>] [twice-nat] [route-table <rt-tbl-name>]
tnsr(config)# [no] nat pool interface <if-name> [twice-nat]
tnsr(config)# [no] nat static mapping (icmp|udp|tcp) local <ip-local> [<port-local>]
external (<ip-external>|<if-name>) [<port-external>]
[twice-nat] [out-to-in-only] [route-table <rt-tbl-name>]
tnsr(config)# [no] neighbor <interface> <ip-address> <mac-address> [no-adj-route-table-entry]
tnsr(config)# ntp (enable|disable)
tnsr(config)# no ntp enable
tnsr(config)# ntp namespace (host|dataplane)
tnsr(config)# no ntp namespace
tnsr(config)# [no] ntp server
tnsr(config)# prometheus (host|dataplane) (enable|disable)
tnsr(config)# no prometheus (host|dataplane)
tnsr(config)# [no] prometheus (host|dataplane) filter <regex> [<regex> [...]]
tnsr(config)# reboot (now|<minutes>) [force]
tnsr(config)# reboot cancel
tnsr(config)# restconf
tnsr(config)# [no] route dynamic access-list <access-list-name>
tnsr(config)# route dynamic bgp
tnsr(config)# route dynamic manager
tnsr(config)# route dynamic ospf
tnsr(config)# route dynamic ospf6
tnsr(config)# [no] route dynamic prefix-list <prefix-list-name>
tnsr(config)# [no] route dynamic route-map <route-map-name>
tnsr(config)# no route dynamic route-map [<route-map-name>]
tnsr(config)# [no] route table <name>
tnsr(config)# service
(backend|bgp|dataplane|dhcp4|ike|ntp|ospf|ospf6|restconf|rip|snmp|unbound)
coredump (enable|disable)
tnsr(config)# service bgp (start|stop|restart|status)
tnsr(config)# service dataplane (start|stop|restart|status)
tnsr(config)# service dhcp4 (start|stop|reload|status)
tnsr(config)# service ntp (dataplane|host) (start|stop|restart|status)
tnsr(config)# service prometheus (dataplane|host) (start|stop|restart|status)
tnsr(config)# service restconf (start|stop|restart|status)
tnsr(config)# service snmp (dataplane|host) (start|stop|restart|status)
tnsr(config)# service ssh (dataplane|host) (start|stop|restart|status)
tnsr(config)# service unbound (start|stop|status|restart)
tnsr(config)# snmp (host|dataplane) (enable|disable)
tnsr(config)# [no] snmp access group-name <group-name>
prefix (exact|prefix)
model (any|v1|v2c)
level (noauth|auth|priv)
read <read-view>
write <write-view>
tnsr(config)# snmp community community-name <community-name>
source (<src-prefix>|default)
security-name <security-name>
tnsr(config)# snmp group group-name <group-name>
security-name <security-name>
security-model (any|v1|v2c)
tnsr(config)# snmp view view-name <view-name>
view-type (included|excluded)
oid <oid>
tnsr(config)# [no] span <if-name-src>
tnsr(config)# ssh dataplane (enable|disable)
tnsr(config)# [no] sysctl vm nr_hugepages <u64>
tnsr(config)# [no] sysctl vm max_map_count <u64>
tnsr(config)# [no] sysctl kernel shmmem <u64>
tnsr(config)# [no] system contact <text>
tnsr(config)# [no] system description <text>
tnsr(config)# [no] system location <text>
tnsr(config)# [no] system name <text>
tnsr(config)# [no] system dns-resolver (dataplane|host)
tnsr(config)# [no] unbound server
tnsr(config)# unbound (enable|disable)
tnsr(config)# no unbound enable
tnsr(config)# [no] vxlan <vxlan-name>
Show Commands in Both Master and Config Modes¶
tnsr# show acl [<acl-name>]
tnsr# show bfd
tnsr# show bfd keys [conf-key-id <conf-key-id>]
tnsr# show bfd sessions [conf-key-id <conf-key-id> | peer-ip-addr <peer-addr>]
tnsr# show cli
tnsr# show clock
tnsr# show configuration [(candidate|running|startup) [(xml|json|cli [<section>])]]
tnsr# show configuration history (config|versions)
tnsr# show configuration history log [<entry-name>]
tnsr# show configuration history version-diff <old-version> <new-version>
tnsr# show configuration rollback timer
tnsr# show dataplane cpu threads
tnsr# show gre [<tunnel-name>]
tnsr# show host acl [<acl-name> [rule <seq>]]
tnsr# show host interface (<name>|ipv4|ipv6|link)
tnsr# show host ruleset
tnsr# show interface [<if-name>]
[(access-list|bonding|counters|ip [(nat|vrrp-virtual-router)]|
ipv6 [vrrp-virtual-router]|link|mac-address|rx-queues|subif|vlan tag-rewrite)]
tnsr# show interface bridge domain [<bdi>]
tnsr# show interface loopback [<loopback-name>]
tnsr# show interface memif [<id>]
tnsr# show interface bond [<id>]
tnsr# show interface lacp [<if-name>]
tnsr# show interface tap
tnsr# show ip reassembly [(full|virtual) [(ipv4|ipv6)]]
tnsr# show ipsec tunnel [<tunnel_number> [child|ike|verbose]]
tnsr# show kea [(keactrl|dhcp4) [config-file]]
tnsr# show kea dhcp4 leases
tnsr# show macip [<macip-name>]
tnsr# show map [<map-domain-name>]
tnsr# show nacm [group [<group-name>] | rule-list [<rule-list-name>]]
tnsr# show nat [config|interface-sides|static-mappings]
tnsr# show nat dynamic (addresses|interfaces)
tnsr# show nat sessions [verbose]
tnsr# show neighbor [interface <if-name>]
tnsr# show ntp [(associations|peers) [associd <id>]]
tnsr# show ntp config-file
tnsr# show packet-counters
tnsr# show route dynamic access-list [<access-list-name>]
tnsr# show route dynamic bgp as-path [<as-path-name>]
tnsr# show route dynamic bgp community-list [<community-list-name>]
tnsr# show route dynamic bgp config [<as-number>]
tnsr# show route dynamic bgp [vrf <vrf-name>] (ipv4|ipv6) neighbors [<peer>
[advertised-routes|dampened-routes|flap-statistics|prefix-counts|
received|received-routes|routes]]
tnsr# show route dynamic bgp [vrf <vrf-name>] (ipv4|ipv6) network <prefix>
tnsr# show route dynamic bgp [vrf <vrf-name>] [(ipv4|ipv6)] summary
tnsr# show route dynamic bgp [vrf <vrf-name>] neighbors [<peer>]
tnsr# show route dynamic bgp [vrf <vrf-name>] nexthop [detail]
tnsr# show route dynamic bgp [vrf <vrf-name>] peer-group <peer-group-name>
tnsr# show route dynamic manager
tnsr# show route dynamic ospf [vrf <vrf-name>] [(border-routers|config|interface|
neighbor [detail]|route|router-info)]
tnsr# show route dynamic ospf [vrf <vrf-name>] database [(asbr-summary|external|
max-age|network|nssa-external|opaque-area|opaque-as|opaque-link|router|
self-originate|summary)]
tnsr# show route dynamic ospf6 [vrf <vrf-name>] area [<area-id>]
tnsr# show route dynamic ospf6 [vrf <vrf-name>] [(area|border-routers|config|
database|interface|linkstate|neighbor [detail]|route-table|spf)]
tnsr# show route dynamic prefix-list [<prefix-list-name>]
tnsr# show route dynamic rip [vrf <vrf-name>] [(config|status)]
tnsr# show route dynamic route-map [<route-map-name>]
tnsr# show route [table <route-table-name> [<prefix> [exact]]] [all]
tnsr# show span
tnsr# show sysctl
tnsr# show system
tnsr# show tunnel next-hops [<tunnel-interface>]
tnsr# show unbound [config-file]
tnsr# show version
tnsr# show wireguard [<instance>]
tnsr# show vxlan [<vxlan-name>]
Access Control List Modes¶
Enter Access Control List Mode¶
tnsr(config)# acl <acl-name>
tnsr(config-acl)#
Access Control List Mode Commands¶
tnsr(config-acl)# rule <seq-number>
Remove Access Control List¶
tnsr(config)# no acl <acl-name>
Enter ACL Rule Mode¶
tnsr(config-acl)# rule <seq-number>
tnsr(config-acl-rule)#
ACL Rule Mode Commands¶
tnsr(config-acl-rule)# action (deny|permit|reflect)
tnsr(config-acl-rule)# ip-version (ipv4|ipv6)
tnsr(config-acl-rule)# no action [deny|permit|reflect]
tnsr(config-acl-rule)# destination address <ip-prefix>
tnsr(config-acl-rule)# no destination address [<ip-prefix>]
tnsr(config-acl-rule)# [no] destination port (any|<first> [- <last>])
tnsr(config-acl-rule)# [no] icmp type (any|<type-first> [- <type-last>])
tnsr(config-acl-rule)# [no] icmp code (any|<code-first> [- <code-last>])
tnsr(config-acl-rule)# protocol (any|icmp|icmpv6|tcp|udp|<proto-number>)
tnsr(config-acl-rule)# no protocol
tnsr(config-acl-rule)# source address <ip-prefix>
tnsr(config-acl-rule)# no source address [<ip-prefix>]
tnsr(config-acl-rule)# [no] source port (any|<first> [- <last>])
tnsr(config-acl-rule)# [no] tcp flags mask <mask> value <value>
tnsr(config-acl-rule)# [no] tcp flags value <value> mask <mask>
Remove ACL Rule¶
tnsr(config-acl)# no rule <seq>
MACIP ACL Mode¶
Enter MACIP ACL Mode¶
tnsr(config)# macip <macip-name>
tnsr(config-macip)#
MACIP ACL Mode Commands¶
tnsr(config-macip)# rule <seq>
Remove MACIP ACL¶
tnsr(config-macip)# no macip <macip-name>
Enter MACIP ACL Rule Mode¶
tnsr(config-macip)# rule <seq-number>
tnsr(config-macip-rule)#
MACIP Rule Mode Commands¶
tnsr(config-macip-rule)# action (deny|permit)
tnsr(config-macip-rule)# no action [deny|permit]
tnsr(config-macip-rule)# ip-version (ipv4|ipv6)
tnsr(config-macip-rule)# address <ip-prefix>
tnsr(config-macip-rule)# no address [<ip-prefix>]
tnsr(config-macip-rule)# mac address <mac-address> [mask <mac-mask>]
tnsr(config-macip-rule)# mac mask <mac-mask> [address <mac-address>]
tnsr(config-macip-rule)# no mac
tnsr(config-macip-rule)# no mac address [<mac-address>] [mask [<mac-mask>]]
tnsr(config-macip-rule)# no mac mask [<mac-mask>] [address [<mac-address>]]
Remove MACIP ACL Rule¶
tnsr(config-macip)# no rule <seq-number>
GRE Mode¶
Enter GRE Mode¶
tnsr(config)# gre <gre-name>
tnsr(config-gre)#
GRE Mode Commands¶
tnsr(config-gre)# encapsulation route-table <rt-table-name>
tnsr(config-gre)# instance <id>
tnsr(config-gre)# destination <ip-address>
tnsr(config-gre)# source <ip-address>
tnsr(config-gre)# tunnel-type erspan session-id <session-id>
tnsr(config-gre)# tunnel-type (l3|teb)
Remove GRE Instance¶
tnsr(config)# no gre <gre-name>
Interface Mode¶
Enter Interface mode¶
tnsr(config)# interface <if-name>
tnsr(config-interface)#
Interface Mode Commands¶
tnsr(config-interface)# access-list (input|output) acl <acl-name> sequence <number>
tnsr(config-interface)# access-list macip <macip-name>
tnsr(config-interface)# no access-list
tnsr(config-interface)# no access-list acl <acl-name>
tnsr(config-interface)# no access-list macip [<macip-name>]
tnsr(config-interface)# no access-list [(input|output) [acl <acl-name> [sequence <number>]]]
tnsr(config-interface)# bond <instance> [long-timeout] [passive]
tnsr(config-interface)# [no] bond <instance>
tnsr(config-interface)# bridge domain <bridge-domain-id> [bvi <bvi>] [shg <shg>]
tnsr(config-interface)# description <string-description>
tnsr(config-interface)# detailed-stats (enable|disable)
tnsr(config-interface)# [no] dhcp client ipv4 [hostname <host-name>]
tnsr(config-interface)# disable
tnsr(config-interface)# [no] enable
tnsr(config-interface)# [no] ip address <ip-prefix>
tnsr(config-interface)# ip mtu <mtu>
tnsr(config-interface)# no ip mtu [<mtu>]
tnsr(config-interface)# [no] ip nat (inside|outside|none)
tnsr(config-interface)# [no] ip reassembly enable
tnsr(config-interface)# [no] ip reassembly type (full|virtual)
tnsr(config-interface)# ip tcp mss <mss-value> (Tx|Rx|TxRx)
tnsr(config-interface)# no ip tcp mss [<mss-value> [Tx|Rx|TxRx]]
tnsr(config-interface)# [no] ip vrrp-virtual-router <vrid>
tnsr(config-interface)# [no] ipv6 address <ipv6-prefix>
tnsr(config-interface)# ipv6 mtu <mtu>
tnsr(config-interface)# no ipv6 mtu [<mtu>]
tnsr(config-interface)# [no] ipv6 reassembly enable
tnsr(config-interface)# [no] ipv6 reassembly type (full|virtual)
tnsr(config-interface)# ipv6 tcp mss <mss-value> (Tx|Rx|TxRx)
tnsr(config-interface)# no ipv6 tcp mss [<mss-value> [Tx|Rx|TxRx]]
tnsr(config-interface)# [no] ipv6 vrrp-virtual-router <vrid>
tnsr(config-interface)# lldp port-name <port-name>
tnsr(config-interface)# lldp management ipv4 <ip-address>
tnsr(config-interface)# lldp management ipv6 <ipv6-address>
tnsr(config-interface)# lldp management oid <oid>
tnsr(config-interface)# map (disable|enable|translate)
tnsr(config-interface)# no map (enable|translate)
tnsr(config-interface)# mac-address <mac-address>
tnsr(config-interface)# mtu <mtu>
tnsr(config-interface)# no mtu [<mtu>]
tnsr(config-interface)# rx-queue <queue_num> cpu <core-id>
tnsr(config-interface)# no rx-queue [<queue_num> [cpu <core-id>]]
tnsr(config-interface)# vlan tag-rewrite (disable|pop-1|pop-2)
tnsr(config-interface)# vlan tag-rewrite push-1 (dot1ad|dot1q) <tag1>
tnsr(config-interface)# vlan tag-rewrite push-2 (dot1ad|dot1q) <tag1> <tag2>
tnsr(config-interface)# vlan tag-rewrite (translate-1-1|translate-2-1) (dot1ad|dot1q) <tag1>
tnsr(config-interface)# vlan tag-rewrite (translate-1-2|translate-2-2) (dot1ad|dot1q) <tag1> <tag2>
tnsr(config-interface)# vrf <vrf-name>
Remove Interface¶
tnsr(config)# no interface <if-name>
Loopback Mode¶
Enter Loopback Mode¶
tnsr(config)# interface loopback <loopback-name>
tnsr(config-loopback)#
Loopback Mode Commands¶
tnsr(config-loopback)# instance <u16>
tnsr(config-loopback)# mac-address <mac-addr>
tnsr(config-loopback)# description <rest>
Remove Loopback interface¶
tnsr(config)# no interface <loop<n>>
tnsr(config)# no interface loopback <loopback-name>
Bridge Mode¶
Enter Bridge Mode¶
tnsr(config)# interface bridge <bdi>
tnsr(config-bridge)#
Bridge Mode commands¶
tnsr(config-bridge)# [no] arp entry ip <ip-addr> mac <mac-addr>
tnsr(config-bridge)# [no] arp term
tnsr(config-bridge)# [no] description <text>
tnsr(config-bridge)# [no] flood
tnsr(config-bridge)# [no] forward
tnsr(config-bridge)# [no] learn
tnsr(config-bridge)# [no] mac-age <mins>
tnsr(config-bridge)# [no] rewrite
tnsr(config-bridge)# [no] uu-flood
Remove Bridge¶
tnsr(config)# no interface bridge <bdi>
NAT Commands in Configure Mode¶
tnsr(config)# [no] nat global-options nat44 forwarding (true|false)
tnsr(config)# [no] nat global-options timeouts (icmp|tcp_established|tcp_transitory|udp) <seconds>
tnsr(config)# [no] nat ipfix logging enable
tnsr(config)# [no] nat ipfix logging domain <domain-id>
tnsr(config)# [no] nat ipfix logging src-port <src-port>
tnsr(config)# [no] nat nat64 map <domain-name>
tnsr(config)# [no] nat nat64 map parameters
tnsr(config)# [no] nat pool address <ip-first> [- <ip-last>] [twice-nat] [route-table <rt-tbl-name>]
tnsr(config)# [no] nat pool interface <if-name> [twice-nat]
tnsr(config)# [no] nat static mapping (icmp|udp|tcp) local <ip-local> [<port-local>]
external (<ip-external>|<if-name>) [<port-external>]
[twice-nat] [out-to-in-only] [route-table <rt-tbl-name>]
Tap Mode¶
Enter Tap Mode¶
tnsr(config)# interface tap <tap-name>
tnsr(config-tap)#
Tap Mode commands¶
tnsr(config-tap)# [no] host bridge <bridge-name>
tnsr(config-tap)# [no] host ipv4 gateway <ipv4-addr>
tnsr(config-tap)# [no] host ipv4 prefix <ipv4-prefix>
tnsr(config-tap)# [no] host ipv6 gateway <ipv6-addr>
tnsr(config-tap)# [no] host ipv6 prefix <ipv6-prefix>
tnsr(config-tap)# [no] host mac-address <host-mac-address>
tnsr(config-tap)# [no] host name-space <netns>
tnsr(config-tap)# [no] instance <instance>
tnsr(config-tap)# [no] mac-address <mac-address>
tnsr(config-tap)# [no] rx-ring-size <size>
tnsr(config-tap)# [no] tx-ring-size <size>
Remove Tap¶
tnsr(config)# no interface tap <tap-name>
BFD Key Mode¶
Enter BFD Key Mode¶
tnsr(config)# bfd conf-key-id <conf-key-id>
tnsr(config-bfd-key)#
BFD Key Mode Commands¶
tnsr(config-bfd-key)# authentication type (keyed-sha1|meticulous-keyed-sha1)
tnsr(config-bfd-key)# secret < (<hex-pair>)[1-20] >
Remove BFD Key Configuration¶
tnsr(config)# no bfd conf-key-id <conf-key-id>
BFD Mode¶
Enter BFD Mode¶
tnsr(config)# bfd session <bfd-session>
tnsr(config-bfd)#
BFD Mode Commands¶
tnsr(config-bfd)# [no] bfd-key-id <bfd-key-id>
tnsr(config-bfd)# [no] conf-key-id <conf-key-id>
tnsr(config-bfd)# delayed (true|false)
tnsr(config-bfd)# desired-min-tx <microseconds>
tnsr(config-bfd)# detect-multiplier <n-packets>
tnsr(config-bfd)# disable
tnsr(config-bfd)# [no] enable (true|false)
tnsr(config-bfd)# interface <if-name>
tnsr(config-bfd)# local address <ip-address>
tnsr(config-bfd)# peer address <ip-address>
tnsr(config-bfd)# remote address <ip-address>
tnsr(config-bfd)# required-min-rx <microseconds>
Remove BFD Configuration¶
tnsr(config)# no bfd session <bfd-session>
Change BFD Admin State¶
tnsr# bfd session <bfd-session>
tnsr(config-bfd)# enable false
tnsr(config-bfd)# enable true
tnsr(config-bfd)#
Change BFD Authentication¶
tnsr(config)# bfd session <bfd-session>
tnsr(config-bfd)# bfd-key-id <bfd-key-id>
tnsr(config-bfd)# conf-key-id <conf-key-id>
tnsr(config-bfd)# delayed (true|false)
Host Interface Mode¶
Enter Host Interface Mode¶
tnsr(config)# host interface <if-name>
tnsr(config-host-if)#
Host Interface Mode Commands¶
tnsr(config-host-if)# [no] description <text>
tnsr(config-host-if)# disable
tnsr(config-host-if)# [no] enable
tnsr(config-host-if)# [no] ip address <ipv4-prefix>
tnsr(config-host-if)# [no] ipv6 address <ipv6-prefix>
tnsr(config-host-if)# mtu <mtu-value>
Remove Host Interface¶
tnsr(config)# no host interface <if-name>
IPsec Tunnel Mode¶
Enter IPsec Tunnel Mode¶
tnsr(config)# ipsec tunnel <tunnel-num>
tnsr(config-ipsec-tunnel)#
IPsec Tunnel Mode Commands¶
tnsr(config-ipsec-tunnel)# enable
tnsr(config-ipsec-tunnel)# disable
tnsr(config-ipsec-tunnel)# crypto config-type (ike|manual)
tnsr(config-ipsec-tunnel)# crypto (ike|manual)
tnsr(config-ipsec-tunnel)# [no] local-address <ip-address>
tnsr(config-ipsec-tunnel)# [no] remote-address (<ip-address>|<hostname>)
Remove IPsec Tunnel¶
tnsr(config)# no ipsec tunnel <tunnel-num>
IKE mode¶
Enter IKE mode¶
tnsr(config-ipsec-tunnel)# crypto ike
tnsr(config-ipsec-crypto-ike)#
IKE Mode Commands¶
tnsr(config-ipsec-crypto-ike)# [no] authentication (local|remote)
tnsr(config-ipsec-crypto-ike)# [no] child <name>
tnsr(config-ipsec-crypto-ike)# [no] identity (local|remote)
tnsr(config-ipsec-crypto-ike)# lifetime <seconds>
tnsr(config-ipsec-crypto-ike)# no lifetime
tnsr(config-ipsec-crypto-ike)# [no] proposal <number>
tnsr(config-ipsec-crypto-ike)# version (0|1|2)
tnsr(config-ipsec-crypto-ike)# no version
tnsr(config-ipsec-crypto-ike)# [no] udp-encapsulation
Remove IKE configuration¶
tnsr(config-ipsec-tunnel)# no crypto ike
IKE Peer Authentication Mode¶
Enter IKE Peer Authentication Mode¶
tnsr(config-ipsec-crypto-ike)# authentication (local|remote)
tnsr(config-ike-auth)#
IKE Peer Authentication Mode Commands¶
tnsr(config-ike-auth)# [no] round (1|2)
Remove IKE Peer Authentication Configuration¶
tnsr(config-ipsec-crypto-ike)# no authentication (local|remote)
IKE Peer Authentication Round Mode¶
Enter IKE Peer Authentication Round Mode¶
tnsr(config-ike-auth)# round (1|2)
tnsr(config-ike-auth-round)#
IKE Peer Authentication Round Mode Commands¶
tnsr(config-ike-auth-round)# type psk
tnsr(config-ike-auth-round)# no type
tnsr(config-ike-auth-round)# psk <pre-shared-key>
tnsr(config-ike-auth-round)# no psk
Remove IKE Peer Authentication Round Configuration¶
tnsr(config-ike-auth)# no round (1|2)
IKE Child SA Mode¶
Enter IKE Child SA Mode¶
tnsr(config-ipsec-crypto-ike)# child <name>
tnsr(config-ike-child)#
IKE Child SA Mode Commands¶
tnsr(config-ike-child)# lifetime <seconds>
tnsr(config-ike-child)# no lifetime
tnsr(config-ike-child)# [no] proposal <number>
Remove IKE Child SA¶
tnsr(config-ipsec-crypto-ike)# no child <name>
IKE Child SA Proposal Mode¶
Enter IKE Child SA Proposal Mode¶
tnsr(config-ike-child)# proposal <number>
tnsr(config-ike-child-proposal)#
IKE Child SA Proposal Mode Commands¶
tnsr(config-ike-child-proposal)# encryption <crypto-algorithm>
tnsr(config-ike-child-proposal)# no encryption
tnsr(config-ike-child-proposal)# integrity <integrity-algorithm>
tnsr(config-ike-child-proposal)# no integrity
tnsr(config-ike-child-proposal)# group <pfs-group>
tnsr(config-ike-child-proposal)# no group
tnsr(config-ike-child-proposal)# sequence-number (esn|noesn)
tnsr(config-ike-child-proposal)# no sequence-number
Remove IKE Child SA Proposal¶
tnsr(config-ike-child)# no proposal <number>
IKE Peer Identity Mode¶
Enter IKE Peer Identity Mode¶
tnsr(config-ipsec-crypto-ike)# identity (local|remote)
tnsr(config-ike-identity)#
IKE Peer Identity Mode Commands¶
tnsr(config-ike-identity)# type (none|address|email|fqdn|dn|key-id)
tnsr(config-ike-identity)# no type
tnsr(config-ike-identity)# value <identity>
tnsr(config-ike-identity)# no value
Remove IKE Peer Identity Configuration¶
tnsr(config-ipsec-crypto-ike)# no identity (local|remote)
IKE Proposal Mode¶
Enter IKE Proposal Mode¶
tnsr(config-ipsec-crypto-ike)# proposal <number>
tnsr(config-ike-proposal)#
IKE Proposal Mode Commands¶
tnsr(config-ike-proposal)# encryption <crypto-algorithm>
tnsr(config-ike-proposal)# no encryption
tnsr(config-ike-proposal)# integrity <integrity-algorithm>
tnsr(config-ike-proposal)# no integrity
tnsr(config-ike-proposal)# prf <prf-algorithm>
tnsr(config-ike-proposal)# no prf
tnsr(config-ike-proposal)# group <diffie-hellman-group>
tnsr(config-ike-proposal)# no group
Remove IKE Proposal Configuration¶
tnsr(config-ipsec-crypto-ike)# no proposal <number>
Map Mode¶
Enter Map Mode¶
tnsr(config)# nat nat64 map <domain-name>
Map Mode Commands¶
tnsr(config-map)# [no] description <desc>
tnsr(config-map)# [no] embedded-address bit-length <ea-width>
tnsr(config-map)# [no] ipv4 prefix <ip4-prefix>
tnsr(config-map)# [no] ipv6 prefix <ip6-prefix>
tnsr(config-map)# [no] ipv6 source <ip6-src>
tnsr(config-map)# [no] mtu <mtu-val>
tnsr(config-map)# [no] port-set length <psid-length>
tnsr(config-map)# [no] port-set offset <psid-offset>
tnsr(config-map)# [no] rule port-set <psid> ipv6-destination <ip6-address>
Remove Map Entry¶
tnsr(config)# [no] nat nat64 map <domain-name>
Map Parameters Mode¶
Enter Map Parameters Mode¶
tnsr(config)# nat nat64 map parameters
Map Parameters Mode Commands¶
tnsr(config-map-param)# [no] fragment (inner|outer)
tnsr(config-map-param)# [no] fragment ignore-df
tnsr(config-map-param)# [no] icmp source-address <ipv4-address>
tnsr(config-map-param)# [no] icmp6 unreachable-msgs (disable|enable)
tnsr(config-map-param)# [no] pre-resolve (ipv4|ipv6) next-hop <ip46-address>
tnsr(config-map-param)# [no] security-check (disable|enable)
tnsr(config-map-param)# [no] security-check fragments (disable|enable)
tnsr(config-map-param)# [no] traffic-class copy (disable|enable)
tnsr(config-map-param)# [no] traffic-class tc <tc-value>
memif Mode¶
Enter memif Mode¶
tnsr(config)# interface memif socket <socket-id> interface <if-id>
tnsr(config-memif)#
memif mode Commands¶
tnsr(config-memif)# buffer-size <u16>
tnsr(config-memif)# mac-address <mac-addr>
tnsr(config-memif)# mode (ethernet|ip|punt/inject)
tnsr(config-memif)# ring-size <power-of-2>
tnsr(config-memif)# role server
tnsr(config-memif)# role client [rx-queues <u8>|tx-queues <u8>]
tnsr(config-memif)# secret <string-24>
Remove memif Interface¶
tnsr(config)# no interface memif socket <socket-id> interface <if-id>
Dynamic Routing Access List Mode¶
Enter Dynamic Routing Access List Mode¶
tnsr(config)# route dynamic access-list <access-list-name>
tnsr(config-access-list)#
Dynamic Routing Access List Mode Commands¶
tnsr(config-access-list)# [no] remark <text>
tnsr(config-access-list)# sequence <seq> (permit|deny) <ip-prefix>
tnsr(config-access-list)# no sequence <seq> [(permit|deny) [<ip-prefix>]]
Remove Dynamic Routing Access List¶
tnsr(config)# no route dynamic access-list <access-list-name>
Dynamic Routing Prefix List Mode¶
Enter Dynamic Routing Prefix List Mode¶
tnsr(config)# route dynamic prefix-list <pl-name>
tnsr(config-pref-list)#
Dynamic Routing Prefix List Mode Commands¶
tnsr(config-pref-list)# [no] descripton <text>
tnsr(config-pref-list)# sequence <seq> (permit|deny) <prefix> [ge <lower-bound>] [le <upper-bound>]
tnsr(config-pref-list)# no sequence <seq> [(permit|deny) <prefix> [ge <lower-bound>] [le <upper-bound>]]
Remove Dynamic Routing Prefix List¶
tnsr(config)# no route dynamic prefix-list <pl-name>
Dynamic Routing Route Map Mode¶
Enter Dynamic Routing Route Map¶
tnsr(config)# route dynamic route-map <route-map-name>
tnsr(config-route-map)#
Dynamic Routing Route Map Mode Commands¶
tnsr(config-route-map)# [no] description <string>
tnsr(config-route-map)# [no] sequence <number>
Remove Dynamic Routing Route Map¶
tnsr(config-route-map)# no route dynamic route-map <route-map-name>
Enter Dynamic Routing Route Map Rule Mode¶
tnsr(config-route-map)# sequence <number>
tnsr(config-route-map-rule)#
Dynamic Routing Route Map Rule Mode Commands¶
tnsr(config-route-map-rule)# [no] description <string>
tnsr(config-route-map-rule)# [no] policy (deny|permit)
tnsr(config-route-map-rule)# [no] match as-path <as-path-name>
tnsr(config-route-map-rule)# [no] match community <comm-list-name> [exact-match]
tnsr(config-route-map-rule)# [no] match extcommunity <extcomm-list-name>
tnsr(config-route-map-rule)# [no] match interface <if-name>
tnsr(config-route-map-rule)# [no] match ip address access-list <access-list-name>
tnsr(config-route-map-rule)# [no] match ip address prefix-list <prefix-list-name>
tnsr(config-route-map-rule)# [no] match ip next-hop access-list <access-list-name>
tnsr(config-route-map-rule)# [no] match ip next-hop <ipv4-address>
tnsr(config-route-map-rule)# [no] match ip next-hop prefix-list <prefix-list-name>
tnsr(config-route-map-rule)# [no] match ipv6 address access-list <access-list-name>
tnsr(config-route-map-rule)# [no] match ipv6 address prefix-list <prefix-list-name>
tnsr(config-route-map-rule)# [no] match large-community <large-comm-list-name>
tnsr(config-route-map-rule)# [no] match local-preference <preference-uint32>
tnsr(config-route-map-rule)# [no] match metric <metric-uint32>
tnsr(config-route-map-rule)# [no] match origin (egp|igp|incomplete)
tnsr(config-route-map-rule)# [no] match peer <peer-ip-address>
tnsr(config-route-map-rule)# [no] match probability <percent>
tnsr(config-route-map-rule)# [no] match source-protocol <src-protocol>
tnsr(config-route-map-rule)# [no] match tag <value-(1-4294967295)>
tnsr(config-route-map-rule)# [no] set aggregator as <asn> ip address <ipv4-address>
tnsr(config-route-map-rule)# [no] set as-path exclude <string-of-as-numbers>
tnsr(config-route-map-rule)# [no] set as-path prepend <string-of-as-numbers>
tnsr(config-route-map-rule)# [no] set as-path prepend last-as <asn>
tnsr(config-route-map-rule)# [no] set atomic-aggregate
tnsr(config-route-map-rule)# [no] set community none
tnsr(config-route-map-rule)# [no] set community <community-value> [additive]
tnsr(config-route-map-rule)# [no] set comm-list <community-list-name> delete
tnsr(config-route-map-rule)# [no] set extcommunity (rt|soo) <extcommunity-list-name>
tnsr(config-route-map-rule)# [no] set forwarding-address <ipv6-address>
tnsr(config-route-map-rule)# [no] set ip next-hop <ipv4-address>|peer-address|unchanged
tnsr(config-route-map-rule)# [no] set ipv4 vpn next-hop (<ipv4-address>|<ipv6-address>)
tnsr(config-route-map-rule)# [no] set ipv6 next-hop global <ipv6-address>
tnsr(config-route-map-rule)# [no] set ipv6 next-hop local <ipv6-address>
tnsr(config-route-map-rule)# [no] set ipv6 next-hop peer-address
tnsr(config-route-map-rule)# [no] set ipv6 next-hop prefer-global
tnsr(config-route-map-rule)# [no] set ipv6 vpn next-hop (<ipv4-address>|<ipv6-address>)
tnsr(config-route-map-rule)# [no] set large-community none
tnsr(config-route-map-rule)# [no] set large-community <large-community-value> [additive]
tnsr(config-route-map-rule)# [no] set large-comm-list <large-comm-list-name> delete
tnsr(config-route-map-rule)# [no] set local-preference <preference>
tnsr(config-route-map-rule)# [no] set metric [+]<metric-uint32>
tnsr(config-route-map-rule)# [no] set metric-type (type-1|type-2)
tnsr(config-route-map-rule)# [no] set origin (egp|igp|unknown)
tnsr(config-route-map-rule)# [no] set originator <ipv4-addr>
tnsr(config-route-map-rule)# [no] set src <ip-address>
tnsr(config-route-map-rule)# [no] set tag <tag-(1-4294967295)>
tnsr(config-route-map-rule)# [no] set weight <weight>
tnsr(config-route-map-rule)# [no] call <rt-map-name>
tnsr(config-route-map-rule)# [no] on-match next
tnsr(config-route-map-rule)# [no] on-match goto <sequence>
Remove Dynamic Routing Route Map Rule¶
tnsr(config-route-map-rule)# no sequence <sequence>
Dynamic Routing BGP Mode¶
Enter Dynamic Routing BGP Mode¶
tnsr(config)# route dynamic bgp
tnsr(config-frr-bgp)#
Dynamic Routing BGP Mode Commands¶
tnsr(config-frr-bgp)# [no] as-path <as-path-name>
tnsr(config-frr-bgp)# [no] community-list <comm-list-name> (standard|expanded)
[extended|large]
tnsr(config-frr-bgp)# disable
tnsr(config-frr-bgp)# [no] enable
tnsr(config-frr-bgp)# [no] option debug (allow-martians|nht|update-groups)
tnsr(config-frr-bgp)# [no] option debug as4 [segment]
tnsr(config-frr-bgp)# [no] option debug bestpath <ipv6-prefix>
tnsr(config-frr-bgp)# [no] option debug keepalive [<peer>]
tnsr(config-frr-bgp)# [no] option debug neighbor-events [<peer>]
tnsr(config-frr-bgp)# [no] option debug updates
[in <peer>|out <peer>|prefix (<ipv4-prefix>|<ipv6-prefix>)]
tnsr(config-frr-bgp)# [no] option debug zebra [prefix (<ipv4-prefix>|<ipv6-prefix>)]
tnsr(config-frr-bgp)# [no] route-map delay-timer <interval-sec>
tnsr(config-frr-bgp)# [no] server vrf <vrf-name>
tnsr(config-frr-bgp)# session clear [vrf <vrf-name>] (*|<peer>|<asn>) [soft]
Dynamic Routing BGP Server Mode¶
Enter Dynamic Routing BGP Server Mode¶
tnsr(config-frr-bgp)# server vrf <vrf-name>
tnsr(config-bgp)#
Dynamic Routing BGP Server Mode Commands¶
tnsr(config-bgp)# [no] address-family (ipv4|ipv6) (unicast|multicast)
tnsr(config-bgp)# [no] always-compare-med
tnsr(config-bgp)# [no] as-number <asn>
tnsr(config-bgp)# [no] bestpath as-path (confed|ignore|multipath-relax|as-set|no-as-set)
tnsr(config-bgp)# [no] bestpath compare-routerid
tnsr(config-bgp)# [no] bestpath med [confed|missing-as-worst]
tnsr(config-bgp)# [no] client-to-client reflection
tnsr(config-bgp)# [no] cluster-id (<ipv4>|<value>)
tnsr(config-bgp)# [no] coalesce-time <value>
tnsr(config-bgp)# [no] confederation identifier <asn>
tnsr(config-bgp)# [no] confederation peer <asn>
tnsr(config-bgp)# [no] dampening [penalty <value> [reuse <value> [suppress <value>
[maximum <value>]]]]
tnsr(config-bgp)# [no] deterministic-med
tnsr(config-bgp)# [no] disable-ebgp-connected-route-check
tnsr(config-bgp)# [no] ebgp-requires-policy
tnsr(config-bgp)# [no] ipv4-unicast-enabled
tnsr(config-bgp)# [no] listen limit <value>
tnsr(config-bgp)# [no] listen range (<ip4-prefix>|<ip6-prefx>) peer-group <peer-group-name>
tnsr(config-bgp)# [no] log-neighbor-changes
tnsr(config-bgp)# [no] max-med administrative [<med>]
tnsr(config-bgp)# [no] max-med on-startup period <seconds> [<med>]
tnsr(config-bgp)# [no] neighbor <peer>
tnsr(config-bgp)# [no] network import-check
tnsr(config-bgp)# [no] route-reflector allow-outbound-policy
tnsr(config-bgp)# [no] router-id <router-id>
tnsr(config-bgp)# [no] timers keep-alive <interval> hold-time <hold-time>
tnsr(config-bgp)# [no] update-delay <delay>
tnsr(config-bgp)# [no] write-quanta <packets>
Remove Dynamic Routing BGP Server¶
tnsr(config-frr-bgp)# no server vrf <vrf-name>
Dynamic Routing BGP Neighbor Mode¶
Enter Dynamic Routing BGP Neighbor Mode¶
tnsr(config-bgp)# neighbor <peer>
tnsr(config-bgp-neighbor)#
Dynamic Routing BGP Neighbor Mode Commands¶
tnsr(config-bgp-neighbor)# [no] advertisement-interval <interval>
tnsr(config-bgp-neighbor)# [no] bfd enabled (true|false)
tnsr(config-bgp-neighbor)# [no] capability (dynamic|extended-nexthop)
tnsr(config-bgp-neighbor)# [no] description <string>
tnsr(config-bgp-neighbor)# disable
tnsr(config-bgp-neighbor)# [no] disable-connected-check
tnsr(config-bgp-neighbor)# [no] dont-capability-negotiate
tnsr(config-bgp-neighbor)# [no] ebgp-multihop [hop-maximum <hops>]
tnsr(config-bgp-neighbor)# [no] enable
tnsr(config-bgp-neighbor)# [no] enforce-first-as
tnsr(config-bgp-neighbor)# [no] local-as <asn> [no-prepend [replace-as]]
tnsr(config-bgp-neighbor)# [no] override-capability
tnsr(config-bgp-neighbor)# [no] passive
tnsr(config-bgp-neighbor)# [no] password <line>
tnsr(config-bgp-neighbor)# [no] peer-group [<peer-group-name>]
tnsr(config-bgp-neighbor)# [no] port <port>
tnsr(config-bgp-neighbor)# [no] remote-as <asn>
tnsr(config-bgp-neighbor)# [no] solo
tnsr(config-bgp-neighbor)# [no] strict-capability-match
tnsr(config-bgp-neighbor)# [no] timers keepalive <interval> holdtime <hold>
tnsr(config-bgp-neighbor)# [no] timers connect <seconds>
tnsr(config-bgp-neighbor)# [no] ttl-security hops <hops>
tnsr(config-bgp-neighbor)# [no] update-source (<if-name>|<ip-address>)
Remove Dynamic Routing BGP Neighbor¶
tnsr(config-bgp)# no neighbor <peer>
Dynamic Routing BGP Address Family Mode¶
Enter Dynamic Routing BGP Address Family Mode¶
tnsr(config-bgp)# address-family ipv4 unicast
tnsr(config-bgp-ip4uni)#
tnsr(config-bgp)# address-family ipv4 multicast
tnsr(config-bgp-ip4multi)#
tnsr(config-bgp)# address-family ipv6 unicast
tnsr(config-bgp-ip6uni)#
tnsr(config-bgp)# address-family ipv6 multicast
tnsr(config-bgp-ip6multi)#
Dynamic Routing BGP IPv4 Unicast Address Family Mode Commands¶
tnsr(config-bgp-ip4uni)# [no] aggregate-address <ipv4-prefix> [as-set] [summary-only]
tnsr(config-bgp-ip4uni)# [no] distance external <extern> internal <intern> local <local>
tnsr(config-bgp-ip4uni)# [no] distance administrative <dist> prefix <ipv4-prefix>
[access-list <access-list-name>]
tnsr(config-bgp-ip4uni)# [no] maximum-paths <non-ibgp-paths> [igbp <ibgp-paths>
[equal-cluster-length]]
tnsr(config-bgp-ip4uni)# [no] neighbor <existing-neighbor>
tnsr(config-bgp-ip4uni)# [no] network <ipv4-prefix> [route-map <route-map>]
tnsr(config-bgp-ip4uni)# [no] redistribute <route-source> [metric <val>|route-map <route-map-name>]
tnsr(config-bgp-ip4uni)# [no] redistribute ospf [metric <val>|route-map <route-map-name>]
tnsr(config-bgp-ip4uni)# [no] redistribute table id <kernel-table-id> [metric <val>|
route-map <route-map-name>]
tnsr(config-bgp-ip4uni)# [no] table-map <route-map-name>
Dynamic Routing BGP IPv4 Multicast Address Family Mode Commands¶
tnsr(config-bgp-ip4multi)# [no] aggregate-address <ipv4-prefix> [as-set] [summary-only]
tnsr(config-bgp-ip4multi)# [no] distance external <extern> internal <intern> local <local>
tnsr(config-bgp-ip4multi)# [no] distance administrative <dist> prefix <ipv4-prefix>
[access-list <access-list-name>]
tnsr(config-bgp-ip4multi)# [no] neighbor <existing-neighbor>
tnsr(config-bgp-ip4multi)# [no] network <ipv4-prefix> [route-map <route-map>]
tnsr(config-bgp-ip4multi)# [no] table-map <route-map-name>
Dynamic Routing BGP IPv6 Unicast Address Family Mode Commands¶
tnsr(config-bgp-ip6uni)# [no] aggregate-address <ipv6-prefix> [as-set] [summary-only]
tnsr(config-bgp-ip6uni)# [no] distance external <extern> internal <intern> local <local>
tnsr(config-bgp-ip6uni)# [no] distance administrative <dist> prefix <ipv6-prefix>
[access-list <access-list-name>]
tnsr(config-bgp-ip6uni)# [no] maximum-paths <non-ibgp-paths> [igbp <ibgp-paths>
[equal-cluster-length]]
tnsr(config-bgp-ip6uni)# [no] neighbor <existing-neighbor>
tnsr(config-bgp-ip6uni)# [no] network <ipv6-prefix> [route-map <route-map>]
tnsr(config-bgp-ip6uni)# [no] redistribute <route-source> [metric <val>|route-map <route-map-name>]
tnsr(config-bgp-ip6uni)# [no] redistribute ospf [metric <val>|route-map <route-map-name>]
tnsr(config-bgp-ip6uni)# [no] redistribute table id <kernel-table-id> [metric <val>|
route-map <route-map-name>]
tnsr(config-bgp-ip6uni)# [no] table-map <route-map-name>
Dynamic Routing BGP IPv6 Multicast Address Family Mode Commands¶
tnsr(config-bgp-ip6multi)# [no] distance external <extern> internal <intern> local <local>
tnsr(config-bgp-ip6multi)# [no] distance administrative <dist> prefix <ipv6-prefix>
access-list <access-list-name>
tnsr(config-bgp-ip6multi)# [no] neighbor <existing-neighbor>
tnsr(config-bgp-ip6multi)# [no] network <ipv6-prefix> [route-map <route-map>]
Remove Dynamic Routing BGP Address Family¶
tnsr(config-bgp)# no address-family (ipv4|ipv6) (unicast|multicast)
Dynamic Routing BGP Address Family Neighbor Mode¶
Note
Though the samples below indicate IPv4 unicast, the same syntax is used for all address families.
Enter Dynamic Routing BGP Address Family Neighbor Mode¶
tnsr(config-bgp-ip4uni)# neighbor <existing-neighbor>
tnsr(config-bgp-ip4uni-nbr)#
Dynamic Routing BGP Address Family Neighbor Mode Commands¶
tnsr(config-bgp-ip4uni-nbr)# [no] activate
tnsr(config-bgp-ip4uni-nbr)# [no] addpath-tx-all-paths
tnsr(config-bgp-ip4uni-nbr)# [no] addpath-tx-bestpath-per-as
tnsr(config-bgp-ip4uni-nbr)# [no] allowas-in [<occurrence>|origin]
tnsr(config-bgp-ip4uni-nbr)# [no] as-override
tnsr(config-bgp-ip4uni-nbr)# [no] attribute-unchanged [as-path|next-hop|med]
tnsr(config-bgp-ip4uni-nbr)# [no] capability orf prefix-list (send|receive|both)
tnsr(config-bgp-ip4uni-nbr)# [no] default-originate [route-map <route-map>]
tnsr(config-bgp-ip4uni-nbr)# [no] distribute-list <access-list-name> (in|out)
tnsr(config-bgp-ip4uni-nbr)# [no] filter-list <aspath-name> (in|out)
tnsr(config-bgp-ip4uni-nbr)# [no] maximum-prefix limit <val>
tnsr(config-bgp-ip4uni-nbr)# [no] maximum-prefix restart <val>
tnsr(config-bgp-ip4uni-nbr)# [no] maximum-prefix threshold <val>
tnsr(config-bgp-ip4uni-nbr)# [no] maximum-prefix warning-only
tnsr(config-bgp-ip4uni-nbr)# [no] next-hop-self [force]
tnsr(config-bgp-ip4uni-nbr)# [no] prefix-list <prefix-list-name> (in|out)
tnsr(config-bgp-ip4uni-nbr)# [no] remove-private-AS [all] [replace-AS]
tnsr(config-bgp-ip4uni-nbr)# [no] route-map <name> (in|out)
tnsr(config-bgp-ip4uni-nbr)# [no] route-reflector-client
tnsr(config-bgp-ip4uni-nbr)# [no] route-server-client
tnsr(config-bgp-ip4uni-nbr)# [no] send-community (standard|large|extended)
tnsr(config-bgp-ip4uni-nbr)# [no] soft-reconfiguration inbound
tnsr(config-bgp-ip4uni-nbr)# [no] unsuppress-map <route-map>
tnsr(config-bgp-ip4uni-nbr)# [no] weight <weight>
Remove Dynamic Routing BGP Address Family Neighbor¶
tnsr(config-bgp-ip4uni)# no neighbor <existing-neighbor>
Dynamic Routing BGP Community List Mode¶
Enter Dynamic Routing BGP Community List Mode¶
tnsr(config-frr-bgp)# community-list <name> (standard|expanded) [normal|extended|large]
tnsr(config-community-list)#
Dynamic Routing BGP Community List Mode Commands¶
tnsr(config-community-list)# description <text>
tnsr(config-community-list)# sequence <seq> (permit|deny) <community-value>
tnsr(config-community-list)# no description [<text>]
tnsr(config-community-list)# no sequence <seq> [(permit|deny) <community-value>]
Remove Dynamic Routing BGP Community List¶
tnsr(config-frr-bgp)# no community-list <name> (standard|expanded) [extended|large]
Dynamic Routing BGP AS Path Mode¶
Enter Dynamic Routing BGP AS Path Mode¶
tnsr(config-frr-bgp)# as-path <as-path-name>
tnsr(config-aspath)#
Dynamic Routing BGP AS Path Mode Commands¶
tnsr(config-aspath)# [no] rule <seq> (permit|deny) <pattern>
Remove Dynamic Routing BGP AS Path¶
tnsr(config-frr-bgp)# no as-path <as-path-name>
Dynamic Routing OSPF Mode¶
Enter Dynamic Routing OSPF Mode¶
tnsr(config)# route dynamic ospf
tnsr(config-frr-ospf)#
OSPF Mode Commands¶
tnsr(config-frr-ospf)# [no] enable
tnsr(config-frr-ospf)# disable
tnsr(config-frr-ospf)# [no] debug (event|nssa|sr|te)
tnsr(config-frr-ospf)# [no] debug (ism|nsm) (events|status|timers)
tnsr(config-frr-ospf)# [no] debug lsa (flooding|generate|install|refresh)
tnsr(config-frr-ospf)# [no] debug packet (dd|hello|ls-acknowledgment|ls-request|ls-update)
(send|recv) [detail]
tnsr(config-frr-ospf)# [no] debug zebra (interface|redistribute)
tnsr(config-frr-ospf)# [no] interface <if-name>
tnsr(config-frr-ospf)# [no] server vrf <vrf-name>
Dynamic Routing OSPF Server Mode¶
Entering OSPF Server Mode¶
tnsr(config-frr-ospf)# server vrf <vrf-name>
tnsr(config-ospf)#
OSPF Server Mode Commands¶
tnsr(config-ospf)# [no] area <area-id>
tnsr(config-ospf)# [no] auto-cost reference-bandwidth <bw>
tnsr(config-ospf)# [no] capability opaque-lsa
tnsr(config-ospf)# [no] compatible rfc-1583-compatibility
tnsr(config-ospf)# [no] default-information originate
(always|metric <val>|route-map <map>|type <type>)
tnsr(config-ospf)# [no] default-metric <val>
tnsr(config-ospf)# [no] distance [(external|inter-area|intra-area)] <dist>
tnsr(config-ospf)# [no] distribution-list out
(bgp|connected|kernel|static|table)
access-list <name>
tnsr(config-ospf)# [no] log-adjacency-changes [detail]
tnsr(config-ospf)# [no] max-metric router-lsa administrative
tnsr(config-ospf)# [no] max-metric router-lsa (on-shutdown|on-startup) <seconds>
tnsr(config-ospf)# [no] neighbor <ip4-address> [(poll-interval <interval>|priority <prio>)]
tnsr(config-ospf)# [no] ospf abr-type (cisco|ibm|shortcut|standard)
tnsr(config-ospf)# [no] ospf router-id <router-id>
tnsr(config-ospf)# [no] ospf write-multiplier <write>
tnsr(config-ospf)# [no] passive-interface <if-name> [<ip4-address>]
tnsr(config-ospf)# [no] pce address
(<ip4-address>|domain <asn>|flags <bits>|neighbor <asn>|scope <bits>)
tnsr(config-ospf)# [no] redistribute
(bgp|connected|kernel|ospf|static|table)
[(metric <val>|route-map <map>|type <type>)]
tnsr(config-ospf)# [no] refresh timer <time>
tnsr(config-ospf)# [no] router-info as
tnsr(config-ospf)# [no] timers lsa min-arrival <min>
tnsr(config-ospf)# [no] timers throttle lsa all <delay>
tnsr(config-ospf)# [no] timers throttle spf (delay|initial-hold|maximum-hold) <val>
Remove OSPF Server Configuration¶
tnsr(config-frr-ospf)# no server
Dynamic Routing OSPF Interface Mode¶
Enter Dynamic Routing OSPF Interface Mode¶
tnsr(config-frr-ospf)# interface <if-name>
tnsr(config-ospf-if)#
Dynamic Routing OSPF Interface Mode Commands¶
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) area <area-id>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) authentication [message-digest|null]
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) authentication-key <key>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) cost <link-cost>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) dead-interval minimal hello <multiplier>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) dead-interval <time>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) hello-interval <interval>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) message-digest-key key-id <id>
md5-key <key>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) mtu-ignore
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) retransmit-interval <interval>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) priority <priority>
tnsr(config-ospf-if)# [no] ip address (*|<ip4-address>) transmit-delay <delay>
tnsr(config-ospf-if)# [no] ip bfd enabled (true|false)
tnsr(config-ospf-if)# [no] ip network
(broadcast|non-broadcast|point-to-multipoint|point-to-point)
Remove Dynamic Routing OSPF Interface¶
tnsr(config-ospf)# no interface <if-name>
Dynamic Routing OSPF Area Mode¶
Enter Dynamic Routing OSPF Area Mode¶
tnsr(config-ospf)# area <area-id>
tnsr(config-ospf-area)#
Dynamic Routing OSPF Area Mode Commands¶
tnsr(config-ospf-area)# authentication [message-digest]
tnsr(config-ospf-area)# default-cost <cost>
tnsr(config-ospf-area)# export-list <acl-name>
tnsr(config-ospf-area)# filter-list (in|out) prefix-list <prefix-list-name>
tnsr(config-ospf-area)# import-list <acl-name>
tnsr(config-ospf-area)# nssa [(no-summary|translate (always|candidate|never))]
tnsr(config-ospf-area)# range <prefix> [cost <val>|not-advertise|substitute <sub-prefix>]
tnsr(config-ospf-area)# shortcut (default|disable|enable)
tnsr(config-ospf-area)# stub [no-summary]
tnsr(config-ospf-area)# virtual-link <router-id>
Remove Dynamic Routing OSPF Area¶
tnsr(config-ospf)# no area <area-id>
Dynamic Routing OSPF6 Mode¶
Enter Dynamic Routing OSPF6 Mode¶
tnsr(config)# route dynamic ospf6
tnsr(config-frr-ospf6)#
OSPF6 Mode Commands¶
tnsr(config-frr-ospf6)# [no] enable
tnsr(config-frr-ospf6)# disable
tnsr(config-frr-ospf6)# [no] debug (abr|asbr|flooding|interface)
tnsr(config-frr-ospf6)# [no] debug border-routers (area <area-id>|router <router-id>)
tnsr(config-frr-ospf6)# [no] debug lsa (as-external|inter-prefix|inter-router|intra-prefix|link|network|router|unknown) (examine|flooding|originate)
tnsr(config-frr-ospf6)# [no] debug message (dd|hello|ls-acknowledgment|ls-request|ls-update|unknown) (recv|send)
tnsr(config-frr-ospf6)# [no] debug neighbor [(event|state)]
tnsr(config-frr-ospf6)# [no] debug route [(inter-area|intra-area|memory|table)]
tnsr(config-frr-ospf6)# [no] debug spf (database|process|time)
tnsr(config-frr-ospf6)# [no] debug zebra [(recv|send)]
tnsr(config-frr-ospf6)# [no] interface <if-name>
tnsr(config-frr-ospf6)# [no] server vrf <vrf-name>
Dynamic Routing OSPF6 Server Mode¶
Entering OSPF6 Server Mode¶
tnsr(config-frr-ospf6)# server vrf <vrf-name>
tnsr(config-ospf6)#
OSPF6 Server Mode Commands¶
tnsr(config-ospf6)# [no] area <area-id>
tnsr(config-ospf6)# [no] auto-cost reference-bandwidth <bw>
tnsr(config-ospf6)# [no] distance [(external|inter-area|intra-area)] <dist>
tnsr(config-ospf6)# [no] interface <if-name> area <area-id>
tnsr(config-ospf6)# [no] log-adjacency-changes [detail]
tnsr(config-ospf6)# [no] ospf6 router-id <router-id>
tnsr(config-ospf6)# [no] redistribute
(bgp|connected|kernel|static|table) [route-map <map>]
tnsr(config-ospf6)# [no] stub-router administrative
tnsr(config-ospf6)# [no] timers lsa min-arrival <min>
tnsr(config-ospf6)# [no] timers throttle spf (delay|initial-hold|maximum-hold) <val>
Remove OSPF6 Server Configuration¶
tnsr(config-frr-ospf6)# no server
Dynamic Routing OSPF6 Interface Mode¶
Enter Dynamic Routing OSPF6 Interface Mode¶
tnsr(config-frr-ospf6)# interface <if-name>
tnsr(config-ospf6-if)#
Dynamic Routing OSPF6 Interface Mode Commands¶
tnsr(config-ospf6-if)# [no] advertise prefix-list <name>
tnsr(config-ospf6-if)# [no] bfd enabled (true|false)
tnsr(config-ospf6-if)# [no] cost outgoing <outgoing-cost>
tnsr(config-ospf6-if)# [no] dead-interval <time>
tnsr(config-ospf6-if)# [no] hello-interval <interval>
tnsr(config-ospf6-if)# [no] instance-id <value>
tnsr(config-ospf6-if)# [no] mtu <value>
tnsr(config-ospf6-if)# [no] mtu-ignore
tnsr(config-ospf6-if)# [no] network (broadcast|point-to-point)
tnsr(config-ospf6-if)# [no] passive
tnsr(config-ospf6-if)# [no] priority <priority>
tnsr(config-ospf6-if)# [no] retransmit-interval <interval>
tnsr(config-ospf6-if)# [no] transmit-delay <delay>
Remove Dynamic Routing OSPF6 Interface¶
tnsr(config-ospf6)# no interface <if-name>
Dynamic Routing OSPF6 Area Mode¶
Enter Dynamic Routing OSPF6 Area Mode¶
tnsr(config-ospf6)# area <area-id>
tnsr(config-ospf6-area)#
Dynamic Routing OSPF6 Area Mode Commands¶
tnsr(config-ospf6-area)# range <prefix> [cost <val>|not-advertise]
tnsr(config-ospf6-area)# stub [no-summary]
Remove Dynamic Routing OSPF6 Area¶
tnsr(config-ospf6)# no area <area-id>
Dynamic Routing RIP Mode¶
Enter Dynamic Routing RIP Mode¶
tnsr(config)# route dynamic rip
tnsr(config-frr-rip)#
RIP Mode Commands¶
tnsr(config-frr-rip)# [no] enable
tnsr(config-frr-rip)# disable
tnsr(config-frr-rip)# [no] debug (events|zebra)
tnsr(config-frr-rip)# [no] debug packet (send|recv)
tnsr(config-frr-rip)# [no] key-chain <name>
tnsr(config-frr-rip)# [no] interface <if-name>
tnsr(config-frr-rip)# [no] server vrf <vrf-name>
Dynamic Routing RIP Server Mode¶
Entering RIP Server Mode¶
tnsr(config-frr-rip)# server vrf <vrf-name>
tnsr(config-rip)#
RIP Server Mode Commands¶
tnsr(config-rip)# [no] allow-ecmp
tnsr(config-rip)# [no] default-information originate
tnsr(config-rip)# [no] distance default <value>
tnsr(config-rip)# [no] distance <prefix> distance <value> [access-list <acl-name>]
tnsr(config-rip)# [no] distribution-list interface (*|<if-name>)
(access-list|prefix-list) (in|out) <name>
tnsr(config-rip)# [no] neighbor <ip4-address>
tnsr(config-rip)# [no] network (interface <if-name>|prefix <prefix>)
tnsr(config-rip)# [no] offset-list (*|<if-name>) (in|out) <acl-name>
tnsr(config-rip)# [no] passive-interface (default|<if-name>) [<ip4-address>]
tnsr(config-rip)# [no] redistribute (bgp|connected|kernel|ospf|static)
[(metric <value>|route-map <name>)]
tnsr(config-rip)# [no] route prefix <ip4-prefix>
tnsr(config-rip)# [no] route-map-filter interface (default|<if-name>) (in|out) route-map <name>
tnsr(config-rip)# [no] timers (garbage-collection|table-update|timeout) <value>
tnsr(config-rip)# [no] version (1|2)
Remove RIP Server Configuration¶
tnsr(config-frr-rip)# no server
Dynamic Routing RIP Interface Mode¶
Enter Dynamic Routing RIP Interface Mode¶
tnsr(config-rip)# interface <if-name>
tnsr(config-rip-if)#
Dynamic Routing RIP Interface Mode Commands¶
tnsr(config-rip-if)# [no] authentication key-chain
tnsr(config-rip-if)# [no] authentication mode (md5|text) [auth-length (old-ripd|rfc)]
tnsr(config-rip-if)# [no] authentication string <auth-string>
tnsr(config-rip-if)# [no] receive version (1|2|both)
tnsr(config-rip-if)# [no] send version (1|2|both)
tnsr(config-rip-if)# [no] split-horizon [poisoned-reverse]
tnsr(config-rip-if)# [no] v2-broadcast
Remove Dynamic Routing RIP Interface¶
tnsr(config-rip)# no interface <if-name>
Dynamic Routing RIP Key Chain Mode¶
Enter Dynamic Routing RIP Key Chain Mode¶
tnsr(config-rip)# key-chain <name>
tnsr(config-rip-key-chain)#
Dynamic Routing RIP Key Chain Mode Commands¶
tnsr(config-rip-key-chain)# [no] key <key-id> string <key-string>
Remove Dynamic Routing RIP Key Chain¶
tnsr(config-rip)# no key-chain <name>
Dynamic Routing Manager Mode¶
Enter Dynamic Routing Manager Mode¶
tnsr(config)# route dynamic manager
tnsr(config-route-dynamic-manager)#
Dynamic Routing Manager Mode Commands¶
tnsr(config-route-dynamic-manager)# [no] debug (events|fpm|nht)
tnsr(config-route-dynamic-manager)# [no] debug kernel [msgdump [send|receive]]
tnsr(config-route-dynamic-manager)# [no] debug packet [send|receive] [detail]
tnsr(config-route-dynamic-manager)# [no] debug rib [detailed]
tnsr(config-route-dynamic-manager)# [no] log file <filename> [<level>]
tnsr(config-route-dynamic-manager)# [no] log syslog [<level>]
Route Table Mode¶
Enter Route Table Mode¶
tnsr(config)# route table <name>
tnsr(config-route-table)#
Route Table Mode Commands¶
tnsr(config-route-table)# [no] description <rest-of-line>
tnsr(config-route-table)# [no] id <n>
tnsr(config-route-table)# [no] route <destination-prefix>
Remove Route Table¶
tnsr(config-route-table)# no route table <name>
Route Table Next Hop Mode¶
Enter Route Table Next Hop Mode¶
tnsr(config-route-table)# route <destination-prefix>
tnsr(config-rttbl46-next-hop)#
Route Table Next Hop Mode Commands¶
tnsr(config-rttbl46-next-hop)# [no] description <rest-of-line>
tnsr(config-rttbl46-next-hop)# [no] next-hop <hop-id> via <ip46-addr>
[<if-name>|<next-hop-table <route-table-name>>]
[weight <multi-path-weight>]
[resolve-via-host] [resolve-via-attached]
tnsr(config-rttbl46-next-hop)# [no] next-hop <hop-id> via drop
tnsr(config-rttbl46-next-hop)# [no] next-hop <hop-id> via local
tnsr(config-rttbl46-next-hop)# [no] next-hop <hop-id> via null-send-unreach
tnsr(config-rttbl46-next-hop)# [no] next-hop <hop-id> via null-send-prohibit
tnsr(config-rttbl46-next-hop)# [no] next-hop <hop-id> classify <classify-table-name>
tnsr(config-rttbl46-next-hop)# [no] next-hop <hop-id> lookup [in] route-table <route-table-name>
tnsr(config-rttbl46-next-hop)# [no] priority <admin-priority>
Remove Route Table Next Hop¶
tnsr(config-rttbl46-next-hop)# no next-hop <hop-id>
SPAN Mode¶
Enter SPAN Mode¶
tnsr(config)# span <if-name-src>
tnsr(config-span)#
SPAN Mode Commands¶
tnsr(config-span)# onto <if-name-dst> (hw|l2) (rx|tx|both|disabled)
Remove Single SPAN Destination¶
tnsr(config-span)# no onto <if-name-dst> [(hw|l2)]
Remove SPAN¶
tnsr(config)# no span <if-name-src>
VXLAN Mode¶
Enter VXLAN Mode¶
tnsr(config)# vxlan <tunnel-name>
tnsr(config-vxlan)#
VXLAN Mode Commands¶
tnsr(config-vxlan)# [no] destination <ip-addr>
tnsr(config-vxlan)# [no] encapsulation (ipv4|ipv6) route-table <rt-table-name>
tnsr(config-vxlan)# [no] instance <id>
tnsr(config-vxlan)# [no] multicast interface <if-name>
tnsr(config-vxlan)# [no] source <ip-addr>
tnsr(config-vxlan)# [no] vni <u24>
Remove VXLAN Tunnel¶
tnsr(config)# no vxlan [<tunnel-name>]
User Authentication Configuration Mode¶
Enter User Authentication Configuration Mode¶
tnsr(config)# auth user <user-name>
tnsr(config-user)#
User Authentication Mode Commands¶
tnsr(config-user)# [no] password <user-password>
tnsr(config-user)# [no] user-keys <key-name>
Remove User¶
tnsr(config)# no auth user <user-name>
NTP Configuration Mode¶
Enter NTP Configuration Mode¶
tnsr(config)# ntp server
tnsr(config-ntp)#
NTP Mode Commands¶
tnsr(config-ntp)# [no] disable monitor
tnsr(config-ntp)# [no] enable monitor
tnsr(config-ntp)# [no] driftfile <file-path>
tnsr(config-ntp)# [no] interface sequence <seq> (drop|ignore|listen)
(all|interface <if-name>|prefix <ip-prefix>)
tnsr(config-ntp)# [no] logconfig sequence <seq> (add|delete|set)
(all|clock|peer|sync|sys) (all|events|info|statistics|status)
tnsr(config-ntp)# [no] restrict (default|<fqdn>|<ip-prefix>|source)
tnsr(config-ntp)# [no] server (address <ip-address>|host <fqdn>)
tnsr(config-ntp)# [no] statsdir <directory-path>
tnsr(config-ntp)# [no] tinker panic <n-secs>
tnsr(config-ntp)# [no] tos orphan <stratum>
Remove NTP Server¶
tnsr(config)# no ntp server
NTP Restrict Mode¶
Enter NTP Restrict Mode¶
tnsr(config-ntp)# restrict (default|<fqdn>|<ip-prefix>|source)
NTP Restrict Mode Commands¶
tnsr(config-ntp-restrict)# kod
tnsr(config-ntp-restrict)# limited
tnsr(config-ntp-restrict)# nomodify
tnsr(config-ntp-restrict)# nopeer
tnsr(config-ntp-restrict)# noquery
tnsr(config-ntp-restrict)# noserve
tnsr(config-ntp-restrict)# notrap
Remove NTP Restriction¶
tnsr(config-ntp)# no restrict (default|<fqdn>|<ip-prefix>|source)
NTP Upstream Server Mode¶
Enter NTP Upstream Server Mode¶
tnsr(config-ntp)# server (address <ip-address>|host <fqdn>)
NTP Upstream Server Mode Commands¶
tnsr(config-ntp-server)# iburst
tnsr(config-ntp-server)# maxpoll <power-of-2-sec>
tnsr(config-ntp-server)# noselect
tnsr(config-ntp-server)# operational-mode (pool|server)
tnsr(config-ntp-server)# prefer
Remove NTP Upstream Server¶
tnsr(config-ntp)# no server (address <ip-address>|host <fqdn>)
NACM Group Mode¶
Enter NACM Group Mode¶
tnsr(config)# nacm group <group-name>
tnsr(config-nacm-group)#
NACM Group Mode Commands¶
tnsr(config-nacm-group)# [no] member <user-name>
Remove NACM Group¶
tnsr(config)# no nacm group <group-name>
NACM Rule-list Mode¶
Enter NACM Rule-list Mode¶
tnsr(config)# nacm rule-list <rule-list-name>
tnsr(config-nacm-rule-list)#
NACM Rule-list Mode Commands¶
tnsr(config-nacm-rule-list)# [no] group (*|<group-name>)
tnsr(config-nacm-rule-list)# [no] rule <rule-name>
Remove NACM Rule-list¶
tnsr(config)# no nacm rule-list <rule-list-name>
NACM Rule Mode¶
Enter NACM Rule Mode¶
tnsr(config-nacm-rule-list)# rule <rule-name>
tnsr(config-nacm-rule)#
NACM Rule Mode Commands¶
tnsr(config-nacm-rule)# [no] access-operations *
tnsr(config-nacm-rule)# [no] access-operations [create] [read] [update] [delete] [exec]
tnsr(config-nacm-rule)# [no] action (deny|permit)
tnsr(config-nacm-rule)# [no] module (*|<module-name>)
tnsr(config-nacm-rule)# [no] comment <rest>
tnsr(config-nacm-rule)# [no] rpc (*|<rpc-name>)
tnsr(config-nacm-rule)# [no] notification (*|<notification-name>)
tnsr(config-nacm-rule)# [no] path <node-id>
Remove NACM Rule¶
tnsr(config-nacm-rule-list)# no rule <rule-name>
DHCP IPv4 Server Config Mode¶
Enter DHCP IPv4 Server Mode¶
tnsr(config)# [no] dhcp4 server
tnsr(config)# dhcp4 {disable|enable}
tnsr(config)# no dhcp4 enable
tnsr(config-kea-dhcp4)#
DHCP IPv4 Server Mode Commands¶
tnsr(config-kea-dhcp4)# [no] decline-probation-period <seconds>
tnsr(config-kea-dhcp4)# [no] description <desc>
tnsr(config-kea-dhcp4)# [no] echo-client-id <boolean>
tnsr(config-kea-dhcp4)# [no] interface listen <if-name>
tnsr(config-kea-dhcp4)# [no] interface listen *
tnsr(config-kea-dhcp4)# [no] interface socket (raw|udp)
tnsr(config-kea-dhcp4)# [no] lease filename <filename>
tnsr(config-kea-dhcp4)# [no] lease lfc-interval <seconds>
tnsr(config-kea-dhcp4)# [no] lease persist <boolean>
tnsr(config-kea-dhcp4)# [no] logging <logger-name>
tnsr(config-kea-dhcp4)# [no] match-client-id <boolean>
tnsr(config-kea-dhcp4)# [no] next-server <ipv4-address>
tnsr(config-kea-dhcp4)# [no] option <dhcp4-option>
tnsr(config-kea-dhcp4)# [no] option-def <name>
tnsr(config-kea-dhcp4)# [no] rebind-timer <seconds>
tnsr(config-kea-dhcp4)# [no] renew-timer <seconds>
tnsr(config-kea-dhcp4)# [no] valid-lifetime <seconds>
Remove DHCP IPv4 Server Configuration¶
tnsr(config)# no dhcp4 server
DHCP4 Subnet4 Mode¶
Enter DHCP4 Subnet4 Mode¶
tnsr(config-kea-dhcp4)# subnet <ipv4-prefix>
tnsr(config-kea-subnet4)#
DHCP4 Subnet4 Mode Commands¶
tnsr(config-kea-subnet4)# [no] id <uint32>
tnsr(config-kea-subnet4)# [no] option <dhcp4-option>
tnsr(config-kea-subnet4)# [no] pool <ipv4-prefix>|<ipv4-range>
tnsr(config-kea-subnet4)# [no] interface <if-name>
Remove DHCP4 IPv4 Subnet4 Configuration¶
tnsr(config-kea-dhcp4)# no subnet <ipv4-prefix>|<ipv4-range>
DHCP4 Subnet4 Pool Mode¶
Enter DHCP4 Subnet4 Pool Mode¶
tnsr(config-kea-subnet4)# pool <ipv4-prefix>|<ipv4-range>
tnsr(config-kea-subnet4-pool)#
DHCP4 Subnet4 Pool Mode Commands¶
tnsr(config-kea-subnet4-pool)# [no] option <dhcp4-option>
Remove DHCP4 IPv4 Subnet4 Pool¶
tnsr(config-kea-subnet4)# no pool <ipv4-prefix>|<ipv4-range>
DHCP4 Subnet4 Reservation Mode¶
Enter DHCP4 Subnet4 Reservation Mode¶
tnsr(config-kea-subnet4)# reservation <ipv4-address>
tnsr(config-kea-subnet4-reservation)#
DHCP4 Subnet4 Reservation Mode Commands¶
tnsr(config-kea-subnet4-reservation)# [no] hostname <hostname>
tnsr(config-kea-subnet4-reservation)# mac-address <mac-address>
tnsr(config-kea-subnet4-reservation)# [no] option <dhcp4-option>
Remove DHCP4 IPv4 Subnet4 Reservation¶
tnsr(config-kea-subnet4)# no reservation <ipv4-address>
Kea DHCP4, Subnet4, Pool, or Reservation Option Mode¶
Enter DHCP4 Option Mode¶
tnsr(config-kea-*)# option <dhcp4-option|option-def-nam>
tnsr(config-kea-*-opt)#
DHCP4 Option Mode Commands¶
tnsr(config-kea-*-opt)# [no] always-send <boolean>
tnsr(config-kea-*-opt)# [no] csv-format <boolean>
tnsr(config-kea-*-opt)# [no] data <option-data>
tnsr(config-kea-*-opt)# [no] space <space-name>
Remove DHCP4 Option Configuration¶
tnsr(config-kea-*)# no option <dhcp4-option>
Kea DHCP4 Option Definition Mode¶
Enter DHCP4 Option Definition Mode¶
tnsr(config-kea-dhcp4)# option-def <name>
tnsr(config-kea-dhcp4-optdef)#
DHCP4 Option Definition Mode Commands¶
tnsr(config-kea-dhcp4-optdef)# array <array-val>
tnsr(config-kea-dhcp4-optdef)# code <code-val>
tnsr(config-kea-dhcp4-optdef)# encapsulate <encap>
tnsr(config-kea-dhcp4-optdef)# record-types <types>
tnsr(config-kea-dhcp4-optdef)# space <space-name>
tnsr(config-kea-dhcp4-optdef)# type <type>
Remove DHCP4 Option Definition¶
tnsr(config-kea-dhcp4)# no option-def <name>
DHCP4 Log Mode¶
Enter DHCP4 Log Mode¶
tnsr(config-kea-dhcp4)# logging <logger-name>
tnsr(config-kea-dhcp4-log)#
DHCP4 Log Mode Commands¶
tnsr(config-kea-dhcp4-log)# [no] debug-level <level>
tnsr(config-kea-dhcp4-log)# [no] output <location>
tnsr(config-kea-dhcp4-log)# [no] severity (debug|error|fatal|info|warn)
Remove DHCP4 Log Configuration¶
tnsr(config-kea-dhcp4)# no logging <logger-name>
DHCP4 Log Output Mode¶
Enter DHCP4 Log Output Mode¶
tnsr(config-kea-dhcp4-log)# output <location>
tnsr(config-kea-dhcp4-log-out)#
DHCP4 Log Output Mode Commands¶
tnsr(config-kea-dhcp4-log-out)# [no] flush (false|true)
tnsr(config-kea-dhcp4-log-out)# [no] maxsize <size>
tnsr(config-kea-dhcp4-log-out)# [no] maxver <rotate>
Remove DHCP4 Log Output Configuration¶
tnsr(config-kea-dhcp4-log)# no output [<location>]
Unbound Server Mode¶
Enter Unbound Server Mode¶
tnsr(config)# unbound server
tnsr(config-unbound)#
Unbound Server Mode Commands¶
tnsr(config-unbound)# [no] caps-for-id
tnsr(config-unbound)# [no] do-ip4
tnsr(config-unbound)# [no] do-ip6
tnsr(config-unbound)# [no] do-tcp
tnsr(config-unbound)# [no] do-udp
tnsr(config-unbound)# [no] edns reassembly size <s>
tnsr(config-unbound)# [no] forward-zone <zone-name>
tnsr(config-unbound)# [no] harden (dnssec-stripped|glue)
tnsr(config-unbound)# [no] hide (version|identity)
tnsr(config-unbound)# [no] host cache (num-hosts <num> | slabs <s> | ttl <t>)
tnsr(config-unbound)# [no] interface <ip4-address>
tnsr(config-unbound)# [no] jostle timeout <t>
tnsr(config-unbound)# [no] key cache slabs <s>
tnsr(config-unbound)# [no] key prefetch
tnsr(config-unbound)# [no] message cache (size <s> | slabs <s>)
tnsr(config-unbound)# [no] message prefetch
tnsr(config-unbound)# [no] outgoing-interface <ip-address>
tnsr(config-unbound)# [no] port outgoing range <n>
tnsr(config-unbound)# [no] rrset cache (size <s> | slabs <s>)
tnsr(config-unbound)# [no] rrset-message cache ttl (minimum <min> | maximum <max>)
tnsr(config-unbound)# [no] serve-expired
tnsr(config-unbound)# [no] socket receive-buffer size <s>
tnsr(config-unbound)# [no] tcp buffers (incoming <n> | outgoing <n>)
tnsr(config-unbound)# [no] thread (num-queries <n> | num-threads <n> |
unwanted-reply-threshold <threshold>)
tnsr(config-unbound)# [no] verbosity <level-0..5>
Remove Unbound Server¶
tnsr(config)# no unbound server
Unbound Forward-Zone Mode¶
Enter Unbound Forward-Zone Mode¶
tnsr(config-unbound)# forward-zone <zone-name>
tnsr(config-unbound-fwd-zone)#
Unbound Forward-Zone Mode Commands¶
tnsr(config-unbound-fwd-zone)# [no] forward-first
tnsr(config-unbound-fwd-zone)# [no] forward-tls-upstream
tnsr(config-unbound-fwd-zone)# [no] nameserver address <ip-address> [port <port>] [auth-name <name>]
tnsr(config-unbound-fwd-zone)# [no] nameserver host <host-name>
Remove Unbound Forward-Zone¶
tnsr(config-unbound)# no forward-zone <zone-name>
Subif Mode¶
Enter Subif Mode¶
tnsr(config)# interface subif <if-name> <subid>
tnsr(config-subif)#
Subif Mode Commands¶
tnsr(config-subif)# default
tnsr(config-subif)# dot1q (<outer-vlan-id>|any)
tnsr(config-subif)# exact-match
tnsr(config-subif)# inner-dot1q (inner-vlan-id>|any)
tnsr(config-subif)# outer-dot1ad (<outer-vlan-id>|any)
tnsr(config-subif)# outer-dot1q (<outer-vlan-id>|any)
Remove Subif¶
tnsr(config)# no interface subif <if-name> <subid>
Bond Mode¶
Enter Bond Mode¶
tnsr(config)# interface bond <instance>
tnsr(config-bond)#
Bond Mode Commands¶
tnsr(config-bond)# [no] load-balance (l2|l23|l34)
tnsr(config-bond)# [no] mode (round-robin|active-backup|xor|broadcast|lacp)
tnsr(config-bond)# [no] mac-address <mac-address>
Remove Bond¶
tnsr(config)# no interface bond <instance>
Host ACL Mode¶
Enter Host ACL Mode¶
tnsr(config)# host acl <acl-name>
tnsr(config-host-acl)#
Host ACL Mode Commands¶
tnsr(config-host-acl)# [no] description <text>
tnsr(config-host-acl)# [no] rule <rule-seq>
tnsr(config-host-acl)# [no] sequence <acl-seq>
Remove Host ACL¶
tnsr(config)# no host acl <acl-name>
Host ACL Rule Mode¶
Enter Host ACL Rule Mode¶
tnsr(config-host-acl)# rule <rule-seq>
tnsr(config-host-acl-rule)#
Host ACL Rule Mode Commands¶
tnsr(config-host-acl-rule)# [no] action (deny|permit)
tnsr(config-host-acl-rule)# [no] description <text>
tnsr(config-host-acl-rule)# [no] match input-interface <host-interface>
tnsr(config-host-acl-rule)# [no] match ip address (source|destination) <prefix>
tnsr(config-host-acl-rule)# [no] match ip icmp type
(address-mask-reply|address-mask-request|destination-unreachable|
echo-reply|echo-request|info-reply|info-request|parameter-problem|
redirect|router-advertisement|router-solicitation|source-quench|
time-exceeded|timestamp-reply|timestamp-request) [code <code>]
tnsr(config-host-acl-rule)# [no] match ip icmpv6 type
(destination-unreachable|echo-reply|echo-request|
mld-listener-query|mld-listener-reduction|mld-listener-report|
nd-neighbor-advert|nd-neighbor-solicit|nd-redirect|
nd-router-advert|nd-router-solicit|packet-too-big|
parameter-problem|router-renumbering|time-exceeded) [code <code>]
tnsr(config-host-acl-rule)# [no] match ip port (source|destination) <port-num>
tnsr(config-host-acl-rule)# [no] match ip port (source|destination) range start <low-port-num>
[end <high-port-num>]
tnsr(config-host-acl-rule)# [no] match ip protocol (icmp|tcp|udp|<proto-number>)
tnsr(config-host-acl-rule)# [no] match ip tcp flag (ack|cwr|ece|fin|psh|rst|syn|urg)
tnsr(config-host-acl-rule)# [no] match ip version (4|6)
tnsr(config-host-acl-rule)# [no] match mac address (source|destination) <mac>
Remove Host ACL Rule¶
tnsr(config-host-acl)# no rule <rule-seq>
VRRP Mode¶
Enter VRRP Mode¶
IPv4:
tnsr(config-interface)# ip vrrp-virtual-router <vrid>
tnsr(config-vrrp4)#
IPv6:
tnsr(config-interface)# ipv6 vrrp-virtual-router <vrid>
tnsr(config-vrrp6)#
VRRP Mode Commands¶
tnsr(config-vrrp46)# [no] accept-mode (false|true)
tnsr(config-vrrp46)# [no] preempt (false|true)
tnsr(config-vrrp46)# [no] priority <priority>
tnsr(config-vrrp46)# [no] track-interface <interface> priority-decrement <value>
tnsr(config-vrrp46)# [no] v3-advertisement-interval <advertise-interval-centi-sec>
tnsr(config-vrrp46)# [no] virtual-address <ipv4-address>
Remove VRRP¶
IPv4:
tnsr(config-interface)# no ip vrrp-virtual-router [<vrid>]
IPv6:
tnsr(config-interface)# no ipv6 vrrp-virtual-router [<vrid>]
DNS Resolver Mode¶
Enter DNS Resolver Mode¶
tnsr(config)# system dns-resolver (dataplane|host)
tnsr(config-dns-resolver)#
DNS Resolver Mode Commands¶
tnsr(config-dns-resolver)# [no] search <domain>
tnsr(config-dns-resolver)# [no] server <name> <ip-addr>
Remove DNS Resolver Configuration¶
tnsr(config)# no system dns-resolver (dataplane|host)
IPFIX Exporter Mode¶
Enter IPFIX Exporter Mode¶
tnsr(config)# ipfix exporter <name>
tnsr(config-ipfix-exporter)#
IPFIX Exporter Mode Commands¶
tnsr(config-ipfix-exporter)# [no] checksum (true|false)
tnsr(config-ipfix-exporter)# [no] collector <ip4-addr> port <port>
tnsr(config-ipfix-exporter)# [no] pmtu <mtu:68-1450>
tnsr(config-ipfix-exporter)# [no] source <ip4-addr>
tnsr(config-ipfix-exporter)# [no] template-interval <sec>
tnsr(config-ipfix-exporter)# [no] vrf <vrf-name>
Remove IPFIX Exporter Configuration¶
tnsr(config)# no ipfix exporter <name>
IPFIX Observation Point Mode¶
Enter IPFIX Observation Point Mode¶
tnsr(config)# ipfix observation-point <name>
tnsr(config-ipfix-obs-pt)#
IPFIX Observation Point Mode Commands¶
tnsr(config-ipfix-obs-pt)# direction (both|egress|ingress)
tnsr(config-ipfix-obs-pt)# interface <if-name>
Remove IPFIX Observation Point Configuration¶
tnsr(config)# no ipfix observation-point <name>
IPFIX Selection Process Mode¶
Enter IPFIX Selection Process Mode¶
tnsr(config)# ipfix selection-process <name>
tnsr(config-ipfix-sel-proc)#
IPFIX Selection Process Mode Commands¶
tnsr(config-ipfix-sel-proc)# selector (all|ipv4|ipv6)
Remove IPFIX Selection Process Configuration¶
tnsr(config)# no ipfix selection-process <name>
RESTCONF mode¶
Enter RESTCONF mode¶
tnsr(config)# restconf
tnsr(config-restconf)#
RESTCONF Mode Commands¶
tnsr(config-restconf)# enable (true|false)
tnsr(config-restconf)# global authentication-type (client-certificate|user)
tnsr(config-restconf)# global server-ca-cert-path <ca-name>
tnsr(config-restconf)# global server-certificate <cert-name>
tnsr(config-restconf)# global server-key <key-name>
tnsr(config-restconf)# server (host|dataplane) <ip-address> <port> (true|false)
WireGuard Mode¶
Enter WireGuard Mode¶
tnsr(config)# interface wireguard <instance>
tnsr(config-wireguard)#
WireGuard Mode Commands¶
tnsr(config-wireguard)# description <desc>
tnsr(config-wireguard)# peer <peer-id>
tnsr(config-wireguard)# port <port-value>
tnsr(config-wireguard)# private-key base64 <key>
tnsr(config-wireguard)# private-key generate
tnsr(config-wireguard)# source-address <ip-addr>
WireGuard Peer Mode¶
Enter WireGuard Peer Mode¶
tnsr(config-wireguard)# peer <peer-id>
tnsr(config-wireguard-peer)#
WireGuard Peer Mode Commands¶
tnsr(config-wireguard-peer)# allowed-prefix <prefix>
tnsr(config-wireguard-peer)# description <desc>
tnsr(config-wireguard-peer)# endpoint-address <endpoint-addr>
tnsr(config-wireguard-peer)# keep-alive <interval>
tnsr(config-wireguard-peer)# public-key base64 <key>
tnsr(config-wireguard-peer)# route-table <table-name>
Tunnel Next Hop Mode¶
Enter Tunnel Next Hop Mode¶
tnsr(config)# [no] tunnel next-hops <interface>
Tunnel Next Hop Mode Commands¶
tnsr(config-tunnel-nh-if)# [no] ipv4-tunnel-destination <inner-address> ipv4-next-hop-address <outer-address>
tnsr(config-tunnel-nh-if)# [no] ipv6-tunnel-destination <inner-address> ipv6-next-hop-address <outer-address>