2.2. show

2.2.1. show vrfs

Note

requires a Product License.

vsr> show vrfs 

Show VRFs on the machine.

Output Data

vrf VRF

VRF name.

VRF

The vrf name.

2.2.2. show summary

vsr> show summary 

Show a summary of the system state.

2.2.3. show interface

vsr> show interface [vrf <string>] [l3vrf <string>] [type <identityref>] [LEVEL] \
...            [name <string>]

Show interface information.

Input Parameters

vrf <string>

VRF to look into.

l3vrf <string>

L3vrf to look into.

type <identityref>

Interface type.

LEVEL

The level of information requested.

LEVEL values

Description

statistics

Display statistics.

details

Display more details.

up

Display UP interfaces only.

hardware-statistics

Display hardware statistics. Implies physical type.

hardware-features

Display hardware features. Implies physical type.

hardware-information

Display hardware information. Implies physical type.

hardware-driver-information

Display hardware driver information. Implies physical type.

name <string>

Display only one interface by this name.

2.2.4. show interface throughput

vsr> show interface throughput [vrf <string>] [type <identityref>] [name <string>] [count <uint16>] \
...            [raw]

Show interface throughput every second.

Input Parameters

vrf <string>

VRF to look into.

type <identityref>

Select all interfaces of this type.

name <string>

Select this specific interface (may be specified multiple times).

count <uint16>

Stop after the given number of seconds. By default, the throughput is displayed every second until the command is interrupted with ctrl-c.

raw

Show the exact number of packets/bits received/transmitted every second instead of human readable values.

2.2.5. show ipv4-routes

vsr> show ipv4-routes [vrf <string>] [l3vrf <string>] [protocol <identityref>] [table <uint32>] \
...            [to TO] [summary]

Show IPv4 routing table.

Input Parameters

vrf <string>

Specify the VRF.

l3vrf <string>

Specify the l3vrf.

protocol <identityref>

Filter routes by protocol.

table <uint32>

Non-main Kernel Routing Table.

to TO

Find the route entry used to reach an IP address or an exact network.

TO values

Description

<A.B.C.D>

An IPv4 address.

<A.B.C.D/M>

An IPv4 prefix: address and CIDR mask.

summary

Summary of all routes.

2.2.6. show ipv6-routes

vsr> show ipv6-routes [vrf <string>] [l3vrf <string>] [protocol <identityref>] [table <uint32>] \
...            [to TO] [summary]

Show IPv6 routing table.

Input Parameters

vrf <string>

Specify the VRF.

l3vrf <string>

Specify the l3vrf.

protocol <identityref>

Filter routes by protocol.

table <uint32>

Non-main Kernel Routing Table.

to TO

Find the route entry used to reach an IPv6 address or an exact network.

TO values

Description

<X:X::X:X>

An IPv6 address.

<X:X::X:X/M>

An IPv6 prefix: address and CIDR mask.

summary

Summary of all routes.

2.2.7. show mpls fec table

Note

requires a Product License.

vsr> show mpls fec table [vrf <string>] [entry ENTRY]

Show MPLS FEC table information.

Input Parameters

vrf <string>

The VRF to look into.

entry ENTRY

The entry to display.

ENTRY values

Description

<A.B.C.D/M>

An IPv4 prefix: address and CIDR mask.

<X:X::X:X/M>

An IPv6 prefix: address and CIDR mask.

2.2.8. show mpls table

Note

requires a Product License.

vsr> show mpls table [vrf <string>] [<uint32>]

Show MPLS table information.

Input Parameters

vrf <string>

Specify the VRF.

<uint32>

LSP to display information about.

2.2.9. show disk

Note

requires a Product License.

vsr> show disk 

Show Linux system disk usage.

Output Data

disk-usage

The disk information per device.

name <string>

The disk name.

label <string>

The disk label.

total <uint64>

The disk total size.

partition

The partition information per disk.

name <string>

The partition name.

label <string>

The partition label.

fstype <string>

The partition filesystem type.

total <uint64>

The partition total size.

available <uint64>

The partition free size.

2.2.10. show bgp

Note

requires a Product License.

vsr> show bgp nexthop-cache [nexthop NEXTHOP] pbr ipset [set <string>] iptable \
...            [chain <string>] [vrf <string>] [l3vrf <string>] [l3vrfs] summary \
...            [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] [neighbors] \
...            neighbor [id ID] unnumbered-neighbor [interface INTERFACE] community-list \
...            large-community-list extcommunity-list as-path-access-list [name <string>] \
...            [route-map <string>] ipv4 ip [VALUE] [bestpath] [multipath] prefix \
...            [value VALUE] [bestpath] [multipath] [longer-prefixes] [cidr-only] \
...            [statistics] summary [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] \
...            community-list [name <string>] [exact-match] community [VALUE] \
...            [exact-match] large-community-list [name <string>] [exact-match] \
...            large-community [VALUE] [exact-match] [route-map <string>] flowspec \
...            ip [VALUE] [bestpath] [multipath] prefix [value VALUE] [bestpath] \
...            [multipath] [longer-prefixes] [detail] [cidr-only] [statistics] \
...            summary [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] community-list \
...            [name <string>] [exact-match] community [VALUE] [exact-match] \
...            large-community-list [name <string>] [exact-match] large-community \
...            [VALUE] [exact-match] [route-map <string>] unicast neighbor [id ID] \
...            [prefix-counts] received [prefix-filter] [dampened-routes] [flap-statistics] \
...            [routes] [advertised-routes] [filtered-routes] [received-routes] \
...            ip [VALUE] [bestpath] [multipath] prefix [value VALUE] [bestpath] \
...            [multipath] [longer-prefixes] [cidr-only] [statistics] summary \
...            [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] community-list \
...            [name <string>] [exact-match] community [VALUE] [exact-match] \
...            large-community-list [name <string>] [exact-match] large-community \
...            [VALUE] [exact-match] [route-map <string>] multicast neighbor \
...            [id ID] [prefix-counts] [dampened-routes] [flap-statistics] [routes] \
...            [advertised-routes] [filtered-routes] [received-routes] ip [VALUE] \
...            [bestpath] [multipath] prefix [value VALUE] [bestpath] [multipath] \
...            [longer-prefixes] [cidr-only] [statistics] summary [STATE] [neighbor NEIGHBOR] \
...            [remote-as REMOTE-AS] community-list [name <string>] [exact-match] \
...            community [VALUE] [exact-match] large-community-list [name <string>] \
...            [exact-match] large-community [VALUE] [exact-match] [route-map <string>] \
...            labeled-unicast neighbor [id ID] [dampened-routes] [flap-statistics] \
...            [routes] [advertised-routes] [filtered-routes] [received-routes] \
...            ip [VALUE] [bestpath] [multipath] prefix [value VALUE] [bestpath] \
...            [multipath] [longer-prefixes] [cidr-only] [statistics] summary \
...            [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] community-list \
...            [name <string>] [exact-match] community [VALUE] [exact-match] \
...            large-community-list [name <string>] [exact-match] large-community \
...            [VALUE] [exact-match] [route-map <string>] vpn [route-distinguisher ROUTE-DISTINGUISHER] \
...            neighbor [id ID] [prefix-counts] [dampened-routes] [flap-statistics] \
...            [routes] [advertised-routes] [filtered-routes] [received-routes] \
...            ip [VALUE] [bestpath] [multipath] prefix [value VALUE] [bestpath] \
...            [multipath] [longer-prefixes] [cidr-only] [statistics] summary \
...            [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] community-list \
...            [name <string>] [exact-match] community [VALUE] [exact-match] \
...            large-community-list [name <string>] [exact-match] large-community \
...            [VALUE] [exact-match] [route-map <string>] neighbor [id ID] [prefix-counts] \
...            received [prefix-filter] [dampened-routes] [flap-statistics] \
...            [routes] [advertised-routes] [filtered-routes] [received-routes] \
...            [neighbors] ipv6 ip [value VALUE] [bestpath] [multipath] prefix \
...            [VALUE] [bestpath] [multipath] [longer-prefixes] [cidr-only] \
...            [statistics] summary [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] \
...            community-list [name <string>] [exact-match] community [VALUE] \
...            [exact-match] large-community-list [name <string>] [exact-match] \
...            large-community [VALUE] [exact-match] [route-map <string>] flowspec \
...            ip [value VALUE] [bestpath] [multipath] prefix [VALUE] [bestpath] \
...            [multipath] [longer-prefixes] [detail] [cidr-only] [statistics] \
...            summary [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] community-list \
...            [name <string>] [exact-match] community [VALUE] [exact-match] \
...            large-community-list [name <string>] [exact-match] large-community \
...            [VALUE] [exact-match] [route-map <string>] unicast neighbor [id ID] \
...            [prefix-counts] received [prefix-filter] [dampened-routes] [flap-statistics] \
...            [routes] [advertised-routes] [filtered-routes] [received-routes] \
...            ip [value VALUE] [bestpath] [multipath] prefix [VALUE] [bestpath] \
...            [multipath] [longer-prefixes] [cidr-only] [statistics] summary \
...            [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] community-list \
...            [name <string>] [exact-match] community [VALUE] [exact-match] \
...            large-community-list [name <string>] [exact-match] large-community \
...            [VALUE] [exact-match] [route-map <string>] multicast neighbor \
...            [id ID] [prefix-counts] [dampened-routes] [flap-statistics] [routes] \
...            [advertised-routes] [filtered-routes] [received-routes] ip [value VALUE] \
...            [bestpath] [multipath] prefix [VALUE] [bestpath] [multipath] \
...            [longer-prefixes] [cidr-only] [statistics] summary [STATE] [neighbor NEIGHBOR] \
...            [remote-as REMOTE-AS] community-list [name <string>] [exact-match] \
...            community [VALUE] [exact-match] large-community-list [name <string>] \
...            [exact-match] large-community [VALUE] [exact-match] [route-map <string>] \
...            labeled-unicast neighbor [id ID] [dampened-routes] [flap-statistics] \
...            [routes] [advertised-routes] [filtered-routes] [received-routes] \
...            ip [value VALUE] [bestpath] [multipath] prefix [VALUE] [bestpath] \
...            [multipath] [longer-prefixes] [cidr-only] [statistics] summary \
...            [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] community-list \
...            [name <string>] [exact-match] community [VALUE] [exact-match] \
...            large-community-list [name <string>] [exact-match] large-community \
...            [VALUE] [exact-match] [route-map <string>] vpn neighbor [id ID] \
...            [prefix-counts] [dampened-routes] [flap-statistics] [routes] \
...            [advertised-routes] [filtered-routes] [received-routes] ip [value VALUE] \
...            [bestpath] [multipath] prefix [VALUE] [bestpath] [multipath] \
...            [longer-prefixes] [cidr-only] [statistics] summary [STATE] [neighbor NEIGHBOR] \
...            [remote-as REMOTE-AS] community-list [name <string>] [exact-match] \
...            community [VALUE] [exact-match] large-community-list [name <string>] \
...            [exact-match] large-community [VALUE] [exact-match] [route-map <string>] \
...            neighbor [id ID] [prefix-counts] received [prefix-filter] [dampened-routes] \
...            [flap-statistics] [routes] [advertised-routes] [filtered-routes] \
...            [received-routes] [neighbors] l2vpn evpn [vnis] [vni VNI] [NET] \
...            summary [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS] [overlay] \
...            [tags] neighbor NEIGHBOR [advertised-routes] [routes] [route-distinguisher ROUTE-DISTINGUISHER] \
...            route [type TYPE] [detail] l3vpn label-exported-nexthop-cache \
...            [detail] label-incoming-nexthop-cache [detail] link-state non-vpn \
...            neighbor [id ID] [advertised-routes] [filtered-routes] [received-routes] \
...            [detail-routes] summary [STATE] [neighbor NEIGHBOR] [remote-as REMOTE-AS]

Show BGP information.

Input Parameters

nexthop-cache

Display the BGP nexthop cache information. This cache lists the BGP nexthops from the incoming BGP updates, and indicates how to reach those nexthops.

nexthop NEXTHOP

Display the detailed information for the given BGP nexthop entry from the BGP nexthop cache. The Paths that use that nexthop are displayed.

NEXTHOP

An IPv4 or IPv6 address.

pbr

Display information about PBR configured by BGP.

ipset

Display information about PBR IPSETs configured by BGP.

set <string>

Display information about this set.

iptable

Display information about PBR IPTables chainsa configured by BGP.

chain <string>

Display information about this chain.

vrf <string>

Specify the VRF.

l3vrf <string>

Specify the L3VRF.

l3vrfs

Show BGP VRFs.

summary

Display summary of BGP neighbor(s) status, this includes the whole bgp context.

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

neighbors

Display information about all BGP neighbors.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

unnumbered-neighbor

Display information about BGP unnumbered neighbor.

interface INTERFACE

Referenced interface name.

INTERFACE

An interface name.

community-list

Display information about BGP community lists (standard and expanded).

large-community-list

Display information about BGP large community lists (standard and expanded).

extcommunity-list

Display information about BGP extcommunity lists (standard and expanded).

as-path-access-list

Display information about AS-path access lists.

name <string>

Display information about a certain AS-Path access list.

route-map <string>

Display information about this route map.

ipv4

Display information about BGP IPv4.

ip

Display this address in the BGP routing table.

VALUE

Display this address in the BGP routing table.

VALUE

An IPv4 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

value VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv4 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

flowspec

Display information for flowspec address family.

ip

Display this address in the BGP routing table.

VALUE

Display this address in the BGP routing table.

VALUE

An IPv4 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

value VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv4 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

detail

Display detailed information on flowspec entries.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

unicast

Display information for unicast address family.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

prefix-counts

Display detailed prefix count information.

received

Display information received from a BGP neighbor.

prefix-filter

Display the prefixlist filter.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

ip

Display this address in the BGP routing table.

VALUE

Display this address in the BGP routing table.

VALUE

An IPv4 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

value VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv4 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

multicast

Display information for multicast address family.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

prefix-counts

Display detailed prefix count information.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

ip

Display this address in the BGP routing table.

VALUE

Display this address in the BGP routing table.

VALUE

An IPv4 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

value VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv4 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

labeled-unicast

Display information for labeled unicast address family.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

ip

Display this address in the BGP routing table.

VALUE

Display this address in the BGP routing table.

VALUE

An IPv4 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

value VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv4 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

vpn

Display information for VPN address family.

route-distinguisher ROUTE-DISTINGUISHER

Display information for a route distinguisher.

ROUTE-DISTINGUISHER

Type definition for extended community attributes. Possible formats: <4b AS>:<2b value>, <2b AS>:<4b value> or <4b IPv4>:<2b value> (see RFC4364 section 4.2). <2b AS> or <4b AS> can be expressed in plain, dot and dot+ format.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

prefix-counts

Display detailed prefix count information.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

ip

Display this address in the BGP routing table.

VALUE

Display this address in the BGP routing table.

VALUE

An IPv4 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

value VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv4 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

prefix-counts

Display detailed prefix count information.

received

Display information received from a BGP neighbor.

prefix-filter

Display the prefixlist filter.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

neighbors

Display information about all BGP neighbors.

ipv6

Display information about BGP IPv6.

ip

Display this address in the BGP routing table.

value VALUE

Display this address in the BGP routing table.

VALUE

An IPv6 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv6 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

flowspec

Display information for flowspec address family.

ip

Display this address in the BGP routing table.

value VALUE

Display this address in the BGP routing table.

VALUE

An IPv6 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv6 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

detail

Display detailed information on flowspec entries.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

unicast

Display information for unicast address family.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

prefix-counts

Display detailed prefix count information.

received

Display information received from a BGP neighbor.

prefix-filter

Display the prefixlist filter.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

ip

Display this address in the BGP routing table.

value VALUE

Display this address in the BGP routing table.

VALUE

An IPv6 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv6 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

multicast

Display information for multicast address family.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

prefix-counts

Display detailed prefix count information.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

ip

Display this address in the BGP routing table.

value VALUE

Display this address in the BGP routing table.

VALUE

An IPv6 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv6 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

labeled-unicast

Display information for labeled unicast address family.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

ip

Display this address in the BGP routing table.

value VALUE

Display this address in the BGP routing table.

VALUE

An IPv6 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv6 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

vpn

Display information for VPN address family.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

prefix-counts

Display detailed prefix count information.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

ip

Display this address in the BGP routing table.

value VALUE

Display this address in the BGP routing table.

VALUE

An IPv6 address.

bestpath

Display only the best path.

multipath

Display only multipaths.

prefix

Display this network in the BGP routing table.

VALUE

Display this prefix in the BGP routing table.

VALUE

An IPv6 prefix: address and CIDR mask.

bestpath

Display only the best path.

multipath

Display only multipaths.

longer-prefixes

Display route and more specific routes.

cidr-only

Display only routes with non-natural netmask.

statistics

Display BGP RIB advertisement statistics.

summary

Display summary of BGP IPv4/IPv6 neighbors status. Can be filtered by subsequent address family (SAFI).

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

community-list

Display routes matching the community-list.

name <string>

BGP community list name.

exact-match

Exact match of the communities.

community

Display routes matching the communities.

VALUE

BGP community value.

VALUE

Community attribute.

exact-match

Exact match of the communities.

large-community-list

Display routes matching the large-community-list.

name <string>

BGP large community list name.

exact-match

Exact match of the large communities.

large-community

Display routes matching the large communities.

VALUE

BGP large community value.

VALUE

Large community attribute.

exact-match

Exact match of the large communities.

route-map <string>

Display information about this route map.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

prefix-counts

Display detailed prefix count information.

received

Display information received from a BGP neighbor.

prefix-filter

Display the prefixlist filter.

dampened-routes

Display the dampened routes received from neighbor.

flap-statistics

Display the flap statistics of the routes learned from neighbor.

routes

Display routes learned from neighbor.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

neighbors

Display information about all BGP neighbors.

l2vpn

Display Layer 2 Virtual Private Network information.

evpn

Display Ethernet Virtual Private Network information.

vnis

Display all VNIs information.

vni VNI

Display VNI information.

VNI

Type definition representing VXLAN Segment ID / VXLAN Network Identifier value.

NET

Network in the BGP routing table to display.

NET values

Description

<ip-address>

An IPv4 or IPv6 address.

<ip-prefix>

An IPv4 or IPv6 prefix: address and CIDR mask.

summary

Display the summary of l2vpn BGP neighbors status.

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

overlay

Display BGP Overlay Information for prefixes.

tags

Display BGP tags for prefixes.

neighbor

Detailed information on TCP and BGP neighbor connections.

NEIGHBOR (mandatory)

Neighbor to display information about.

NEIGHBOR values

Description

<ipv4-address>

An IPv4 address.

<ipv6-address>

An IPv6 address.

advertised-routes

Display the routes advertised to a BGP neighbor.

routes

Display routes learned from neighbor.

route-distinguisher ROUTE-DISTINGUISHER

Display information for a route distinguisher.

ROUTE-DISTINGUISHER

Type definition for extended community attributes. Possible formats: <4b AS>:<2b value>, <2b AS>:<4b value> or <4b IPv4>:<2b value> (see RFC4364 section 4.2). <2b AS> or <4b AS> can be expressed in plain, dot and dot+ format.

route

Detailed information BPG L2VPN EVPN routes.

type TYPE

Specify route type.

TYPE values

Description

macip

MAC-IP (Type-2) route.

multicast

Multicast (Type-3) route.

prefix

Prefix (Type-5) route.

detail

Display detail information.

l3vpn

Display Layer 3 Virtual Private Network information.

label-exported-nexthop-cache

Display label nexthop cache for exported nexthops.

detail

Display detail information.

label-incoming-nexthop-cache

Display label nexthop cache for incoming nexthops.

detail

Display detail information.

link-state

Display link-state information.

non-vpn

Display link-state non VPN information.

neighbor

Display information about one BGP neighbor.

id ID

Display information about one BGP neighbor.

ID

An IPv4 or IPv6 address.

advertised-routes

Display the routes advertised to a BGP neighbor.

filtered-routes

Display the filtered routes received from neighbor.

received-routes

Display the received routes from neighbor.

detail-routes

Display link state routes with details.

summary

Display the summary of l2vpn BGP neighbors status.

STATE

The State of BGP neighbor(s).

STATE values

Description

established

Summary of BGP established neighbor(s).

failed

Summary of BGP failed neighbor(s).

neighbor NEIGHBOR

Display information about one BGP neighbor.

NEIGHBOR

An IPv4 or IPv6 address.

remote-as REMOTE-AS

The Summary of BGP remote-as.

REMOTE-AS values

Description

<as-number>

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

external

Summary of BGP external remote-as.

internal

Summary of BGP internal remote-as.

2.2.11. show bgp bmp

vsr> show bgp bmp [vrf <string>]

Show BGP BMP information.

Input Parameters

vrf <string>

VRF to look into.

Output Data

bmp

BGP BMP operational state.

route-mirroring

BGP BMP route mirroring information.

pending-bytes <uint32>

Number of penting bytes.

pending-messages <uint32>

Number of penting messages.

buffer-used <uint32>

Number of bytes used in buffer.

targets

Target group operational state.

name <string>

Name of the BMP target group.

connect

BGP BMP connection operational state.

host HOST

Monitoring station hostname or address.

HOST

The host type represents either an unzoned IP address or a DNS domain name.

port PORT (mandatory)

TCP port number.

PORT

A 16-bit port number used by a transport protocol such as TCP or UDP.

source-ip SOURCE-IP

Source IP address.

SOURCE-IP

An IPv4 or IPv6 address.

state STATE

Connection state.

STATE values

Description

up

Connection is UP.

retry-wait

Wait before retry connecting.

connecting

Connecting in progress.

resolving

Trying to resolve host name.

unknown

Unknown state.

retry-timer <string>

Time before reconnect to the client if previous try has failed (if state is RetryWait).

uptime <string>

Time since the connection has been established (if state is Up).

monitor-sent <uint32>

Number of monitor packets sent.

mirror-sent <uint32>

Number of mirroring packets sent.

mirror-lost <uint32>

Number of times this peer wasn’t fast enough in consuming the mirror queue.

byte-sent <uint32>

Number of bytes sent to the peer.

byte-queue <uint32>

Number of bytes in the output buffer.

byte-kernel-queue <uint32>

Number of bytes in the kernel output buffer.

2.2.12. show bgp rpki cache-connection

Note

requires a Product License.

vsr> show bgp rpki cache-connection [vrf VRF] [l3vrf <string>]

Show which RPKI cache servers have a connection.

Input Parameters

vrf VRF

Specify the VRF.

VRF

The vrf name.

l3vrf <string>

Specify the L3VRF.

2.2.13. show bgp rpki cache-server

Note

requires a Product License.

vsr> show bgp rpki cache-server [vrf VRF] [l3vrf <string>]

Show RPKI configured cache server.

Input Parameters

vrf VRF

Specify the VRF.

VRF

The vrf name.

l3vrf <string>

Specify the L3VRF.

2.2.14. show bgp rpki prefix-table

Note

requires a Product License.

vsr> show bgp rpki prefix-table [vrf VRF] [l3vrf <string>] [PREFIX] [as AS]

Show validated prefixes which were received from RPKI Cache.

Input Parameters

vrf VRF

Specify the VRF.

VRF

The vrf name.

l3vrf <string>

Specify the L3VRF.

PREFIX

Lookup by IPv4/IPv6 prefix.

PREFIX

An IPv4 or IPv6 prefix: address and CIDR mask.

as AS

Lookup by AS number.

AS

A numeric identifier for an autonomous system (AS). An AS is a single domain, under common administrative control, which forms a unit of routing policy. Autonomous systems can be assigned a 2-byte identifier, or a 4-byte identifier which may have public or private scope. Private ASNs are assigned from dedicated ranges. Public ASNs are assigned from ranges allocated by IANA to the regional internet registries (RIRs).

2.2.15. show isis

Note

requires a Product License.

vsr> show isis [vrf <string>] [l3vrf <string>] [hostname] fast-reroute summary \
...            [level-1] [level-2] [summary] database [detail] neighbor [detail] \
...            topology [level-1] [level-2] [flex-algorithm <uint32>] route \
...            [level-1] [level-2] [prefix-sid] [backup] [flex-algorithm <uint32>] \
...            interface [detail] [NAME] segment-routing node [flex-algorithm <uint32>] \
...            te-database [detail] edge [id ID] subnet [id ID] vertex [id <string>] \
...            [te-router] [te-interface] flex-algorithm [<uint32>]

Show IS-IS information.

Input Parameters

vrf <string>

Specify the VRF.

l3vrf <string>

Specify the L3VRF.

hostname

Hostname information.

fast-reroute

Show information about the number of prefixes having LFA protection, and network-wideo LFA coverage.

summary

Show fast-reroute summary.

level-1

Show summary of level 1 IS-IS.

level-2

Show summary of level 2 IS-IS.

summary

Hostname information.

database

Database summary.

detail

Database detail.

neighbor

Neighbors information.

detail

Neighbors detail.

topology

Topology information.

level-1

Level 1 topology.

level-2

Level 2 topology.

flex-algorithm <uint32>

Set Flex-Algorithm numeric identifier.

route

Route information.

level-1

Level 1 topology.

level-2

Level 2 topology.

prefix-sid

Show segment identifier (SID) prefix information.

backup

Show backup routes.

flex-algorithm <uint32>

Set Flex-Algorithm numeric identifier.

interface

Interface information.

detail

Detailed interface traffic information.

NAME

The interface name. If not specified, show all interfaces.

NAME

An interface name.

segment-routing

Show segment routing information.

node

Show detailed information about learned segment routing nodes.

flex-algorithm <uint32>

Set Flex-Algorithm numeric identifier.

te-database

Show information about MPLS-TE database.

detail

Detailed information.

edge

MPLS-TE Edge.

id ID

MPLS-TE Edge ID (as an IPv4 or IPv6 address).

ID

An IPv4 or IPv6 address.

subnet

MPLS-TE Subnet.

id ID

MPLS-TE Subnet ID (as an IPv4 or IPv6 address).

ID

An IPv4 or IPv6 prefix: address and CIDR mask.

vertex

MPLS-TE Vertex.

id <string>

MPLS-TE Vertex ID (as an ISO ID, hostname or “self”).

te-router

Show information about router.

te-interface

Show information about interface.

flex-algorithm

Show the IS-IS Flex-Algorithm definition state of the given or all algorithms.

<uint32>

Set Flex-Algorithm numeric identifier.

2.2.16. show evpn

Note

requires a Product License.

vsr> show evpn [vrf <string>] [arp-cache] [mac] vni VNI [detail]

Show EVPN information.

Input Parameters

vrf <string>

Specify the VRF.

arp-cache

Show ARP and ND cache information.

mac

Show MAC addresses information.

vni VNI (mandatory)

Show EVPN information about a specific VNI or all.

VNI values

Description

all

Show all VNIs.

<vni>

Type definition representing VXLAN Segment ID / VXLAN Network Identifier value.

detail

Detail information on each VNI.

2.2.17. show ospf

Note

requires a Product License.

vsr> show ospf [vrf <string>] [l3vrf <string>] [l3vrfs] [route] database [default] \
...            [max-age] router [ADDRESS] [advertising-router ADVERTISING-ROUTER] \
...            asbr-summary [ADDRESS] [advertising-router ADVERTISING-ROUTER] \
...            external [ADDRESS] [advertising-router ADVERTISING-ROUTER] network \
...            [ADDRESS] [advertising-router ADVERTISING-ROUTER] nssa-external \
...            [ADDRESS] [advertising-router ADVERTISING-ROUTER] opaque-area \
...            [ADDRESS] [advertising-router ADVERTISING-ROUTER] opaque-link \
...            [ADDRESS] [advertising-router ADVERTISING-ROUTER] opaque-as [ADDRESS] \
...            [advertising-router ADVERTISING-ROUTER] summary [ADDRESS] [advertising-router ADVERTISING-ROUTER] \
...            neighbor [ADDRESS] [IFNAME] [detail] interface [traffic] [NAME]

Show OSPF information.

Input Parameters

vrf <string>

Specify the VRF.

l3vrf <string>

Specify the L3VRF.

l3vrfs

Available VRFs.

route

OSPF routing table.

database

Database summary.

default

Database summary.

max-age

Database maximum age.

router

Database Router link states.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

asbr-summary

Database ASBR summary link states.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

external

Database External link states.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

network

Database Network link states.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

nssa-external

Database NSSA external link states.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

opaque-area

Database Opaque link state area.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

opaque-link

Database Opaque link states.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

opaque-as

Database Opaque AS link states.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

summary

Database Summary link states.

ADDRESS

The router address.

ADDRESS values

Description

<ipv4-address>

An IPv4 address.

self-originate

Self-originated link states.

advertising-router ADVERTISING-ROUTER

The advertising router address.

ADVERTISING-ROUTER

An IPv4 address.

neighbor

Neighbors information.

ADDRESS

Neighbor ID.

ADDRESS

An IPv4 address.

IFNAME

The interface name.

IFNAME

An interface name.

detail

Show detailed neighbor’s information.

interface

Interface information.

traffic

Interface traffic information.

NAME

The interface name. If not specified, show all interfaces.

NAME

An interface name.

2.2.18. show rip

Note

requires a Product License.

vsr> show rip [vrf <string>] [status]

Show RIP information.

Input Parameters

vrf <string>

Specify the VRF.

status

Show RIP status.

2.2.19. show ospf6

Note

requires a Product License.

vsr> show ospf6 [vrf <string>] route [DESTINATION] database [default] [router] \
...            [neighbor] interface [NAME]

Show OSPFv3 information.

Input Parameters

vrf <string>

Specify the VRF.

route

OSPFv3 routing table.

DESTINATION

The route destination.

DESTINATION values

Description

<ipv6-address>

An IPv6 address.

<ipv6-prefix>

An IPv6 prefix: address and CIDR mask.

detail

Detailed information.

external-1

Display Type-1 External routes.

external-2

Display Type-2 External routes.

inter-area

Display Inter-Area routes.

intra-area

Display Intra-Area routes.

summary

Route table summary.

database

Database summary.

default

Database summary.

router

Database Router link states.

neighbor

Neighbor list.

interface

Interface information.

NAME

The interface name. If not specified, show all interfaces.

NAME

An interface name.

2.2.20. show ripng

Note

requires a Product License.

vsr> show ripng [status]

Show RIPng information.

Input Parameters

status

Show RIPng status.

2.2.21. show mpls ldp

Note

requires a Product License.

vsr> show mpls ldp [vrf <string>] discovery [detail] [interface] [capabilities] \
...            neighbor [LSR-ID] [capabilities] [detail] binding [PREFIX] [longer-prefixes] \
...            [local-label <uint32>] [remote-label <uint32>] [neighbor NEIGHBOR] \
...            [detail] [ipv4] [ipv6]

Show MPLS LDP information.

Input Parameters

vrf <string>

Specify the VRF.

discovery

Discovery Hello Information.

detail

Show detailed information.

interface

Interface information.

capabilities

Display neighbor capability information.

neighbor

Neighbor information.

LSR-ID

OSPF routing table.

LSR-ID

An IPv4 address.

capabilities

Display neighbor capability information.

detail

Show detailed information.

binding

Label Information Base (LIB) information.

PREFIX

Destination prefix.

PREFIX values

Description

<ipv4-prefix>

An IPv4 prefix: address and CIDR mask.

<ipv6-prefix>

An IPv6 prefix: address and CIDR mask.

longer-prefixes

Include longer matches.

local-label <uint32>

Locally assigned label value.

remote-label <uint32>

Match remotely assigned label values.

neighbor NEIGHBOR

Display labels from LDP neighbor.

NEIGHBOR

An IPv4 address.

detail

Show detailed information.

ipv4

IPv4 Address Family.

ipv6

IPv6 Address Family.

2.2.22. show bfd

Note

requires a Product License.

vsr> show bfd [vrf VRF] [l3vrf <string>] [address ADDRESS] [HOP-TYPE] [source SOURCE] \
...            [interface INTERFACE] [counters]

Show BFD information.

Input Parameters

vrf VRF

Specify the VRF.

VRF

The vrf name.

l3vrf <string>

Specify the L3VRF.

address ADDRESS

IP address of the peer.

ADDRESS

An IPv4 or IPv6 address.

HOP-TYPE

Show single or multi hop session.

HOP-TYPE values

Description

single-hop

Show single-hop session.

multi-hop

Show multi-hop session.

source SOURCE

Local IP address.

SOURCE values

Description

<ip-address>

An IPv4 or IPv6 address.

any

Accept any source addresses.

interface INTERFACE

Interface used to contact peer.

INTERFACE

An interface name.

counters

Show BFD session counters information.

2.2.23. show path-monitoring

Note

requires a Product License.

vsr> show path-monitoring [vrf VRF] [address ADDRESS] [operational]

Show path monitoring information.

Input Parameters

vrf VRF

Specify the VRF.

VRF

The vrf name.

address ADDRESS

IP address of the peer.

ADDRESS

An IPv4 or IPv6 address.

operational

Show session operational information.

2.2.24. show nhrp

Note

requires a Product License.

vsr> show nhrp [vrf <string>] [cache] [nhs] [opennhrp] [shortcut] [default]

Show NHRP IPv4 information.

Input Parameters

vrf <string>

Specify the VRF.

cache

NHRP forwarding cache information.

nhs

NHRP Next hop server information.

opennhrp

NHRP opennhrpctl style cache dump.

shortcut

NHRP shortcut information.

default

NHRP default information.

2.2.25. show nhrp6

Note

requires a Product License.

vsr> show nhrp6 [vrf <string>] [cache] [nhs] [opennhrp] [shortcut] [default]

Show NHRP IPv6 information.

Input Parameters

vrf <string>

Specify the VRF.

cache

NHRP forwarding cache information.

nhs

NHRP Next hop server information.

opennhrp

NHRP opennhrpctl style cache dump.

shortcut

NHRP shortcut information.

default

NHRP default information.

2.2.26. show pbr

Note

requires a Product License.

vsr> show pbr [family FAMILY] [vrf <string>]

Show policy based routing information.

Input Parameters

family FAMILY

Display the policy based routing rules for this family type.

FAMILY values

Description

ipv4

IPV4 rules only.

ipv6

IPV6 rules only.

<string>

No description.

vrf <string>

The VRF in which to show the policy based routing.

Output Data

ipv4-rule

IPv4 rule state.

priority <string>

Priority of the rule. High number means lower priority.

not

Invert the match.

match

Configure the packet selector.

inbound-interface INBOUND-INTERFACE

Match this incoming interface.

INBOUND-INTERFACE

An interface name.

mark MARK

Match this mark filter.

MARK values

Description

<mark>

Firewall mark.

<mark-mask>

Firewall mark filter.

source SOURCE

Match this source address or prefix.

SOURCE values

Description

<ipv4-address>

An IPv4 address.

<ipv4-prefix>

An IPv4 prefix: address and CIDR mask.

destination DESTINATION

Match this destination address or prefix.

DESTINATION values

Description

<ipv4-address>

An IPv4 address.

<ipv4-prefix>

An IPv4 prefix: address and CIDR mask.

outbound-interface OUTBOUND-INTERFACE

Match this outgoing interface.

OUTBOUND-INTERFACE

An interface name.

tos <uint32>

Match this tos.

l3vrf

Match any l3vrf.

other

Match a specific attribute.

attr <string>

The attribute to match.

value <string>

The value to match.

action

Configure the action for packets matching the selector.

lookup LOOKUP

Lookup in this table.

LOOKUP

Table type.

goto <uint32>

Jump to the specified priority rule.

other OTHER

Other actions.

OTHER

Action to apply for matching packet.

ipv6-rule

IPv6 rule state.

priority <string>

Priority of the rule. High number means lower priority.

not

Invert the match.

match

Configure the packet selector.

inbound-interface INBOUND-INTERFACE

Match this incoming interface.

INBOUND-INTERFACE

An interface name.

mark MARK

Match this mark filter.

MARK values

Description

<mark>

Firewall mark.

<mark-mask>

Firewall mark filter.

source SOURCE

Match this source address or prefix.

SOURCE values

Description

<ipv6-address>

An IPv6 address.

<ipv6-prefix>

An IPv6 prefix: address and CIDR mask.

destination DESTINATION

Match this destination address or prefix.

DESTINATION values

Description

<ipv6-address>

An IPv6 address.

<ipv6-prefix>

An IPv6 prefix: address and CIDR mask.

outbound-interface OUTBOUND-INTERFACE

Match this outgoing interface.

OUTBOUND-INTERFACE

An interface name.

tos <uint32>

Match this tos.

l3vrf

Match any l3vrf.

other

Match a specific attribute.

attr <string>

The attribute to match.

value <string>

The value to match.

action

Configure the action for packets matching the selector.

lookup LOOKUP

Lookup in this table.

LOOKUP

Table type.

goto <uint32>

Goto to the specified priority rule.

other OTHER

Other actions.

OTHER

Action to apply for matching packet.

2.2.27. show log

vsr> show log [max-lines <uint16>] [service <identityref>] [vrf <string>] [facility FACILITY] \
...            level [EQUAL] [greater-or-equal GREATER-OR-EQUAL] not [LEVEL]

Print log.

Input Parameters

max-lines <uint16>

Log max lines.

service <identityref>

Filter logs by service.

vrf <string>

Filter logs by VRF.

facility FACILITY

Filter logs by facility.

FACILITY

Logging facilities.

level

Filter logs by level.

EQUAL

Select levels to show.

EQUAL values

Description

<log-level>

Logging level message levels.

any

Show all messages from this facility.

greater-or-equal GREATER-OR-EQUAL

Filter messages with a greater or equal level than the selected one.

GREATER-OR-EQUAL

Logging level message levels.

not

Select levels to not show.

LEVEL

Do not show messages with this level.

LEVEL

Logging level message levels.

2.2.28. show logins

vsr> show logins [user <string>] [since SINCE] [until UNTIL] [present PRESENT] \
...            [max-lines <uint32>] [status STATUS]

Show login events.

Input Parameters

user <string>

Show login events for this user.

since SINCE

Show login events since that time.

SINCE

A time filter.

until UNTIL

Show login events until that time.

UNTIL

A time filter.

present PRESENT

Show which users were present at that time.

PRESENT

A time filter.

max-lines <uint32>

Limit the number of lines shown.

status STATUS

Show login events with this status.

STATUS values

Description

success

Login succeeded.

failure

Login failed.

Output Data

session

The list of the login events.

entry <uint32>

A number to identify the list element.

user <string>

The user that triggered the event.

source <string>

The source IP used to trigger the event. ‘local’ means from console.

start-time START-TIME

The time when the user session started.

START-TIME

The date-and-time type is a profile of the ISO 8601 standard for representation of dates and times using the Gregorian calendar. The profile is defined by the date-time production in Section 5.6 of RFC 3339. The date-and-time type is compatible with the dateTime XML schema type with the following notable exceptions: (a) The date-and-time type does not allow negative years. (b) The date-and-time time-offset -00:00 indicates an unknown time zone (see RFC 3339) while -00:00 and +00:00 and Z all represent the same time zone in dateTime. (c) The canonical format (see below) of data-and-time values differs from the canonical format used by the dateTime XML schema type, which requires all times to be in UTC using the time-offset ‘Z’. This type is not equivalent to the DateAndTime textual convention of the SMIv2 since RFC 3339 uses a different separator between full-date and full-time and provides higher resolution of time-secfrac. The canonical format for date-and-time values with a known time zone uses a numeric time zone offset that is calculated using the device’s configured known offset to UTC time. A change of the device’s offset to UTC time will cause date-and-time values to change accordingly. Such changes might happen periodically in case a server follows automatically daylight saving time (DST) time zone offset changes. The canonical format for date-and-time values with an unknown time zone (usually referring to the notion of local time) uses the time-offset -00:00.

end-time END-TIME

The time when the user session ended. If omitted, the session is still running.

END-TIME

The date-and-time type is a profile of the ISO 8601 standard for representation of dates and times using the Gregorian calendar. The profile is defined by the date-time production in Section 5.6 of RFC 3339. The date-and-time type is compatible with the dateTime XML schema type with the following notable exceptions: (a) The date-and-time type does not allow negative years. (b) The date-and-time time-offset -00:00 indicates an unknown time zone (see RFC 3339) while -00:00 and +00:00 and Z all represent the same time zone in dateTime. (c) The canonical format (see below) of data-and-time values differs from the canonical format used by the dateTime XML schema type, which requires all times to be in UTC using the time-offset ‘Z’. This type is not equivalent to the DateAndTime textual convention of the SMIv2 since RFC 3339 uses a different separator between full-date and full-time and provides higher resolution of time-secfrac. The canonical format for date-and-time values with a known time zone uses a numeric time zone offset that is calculated using the device’s configured known offset to UTC time. A change of the device’s offset to UTC time will cause date-and-time values to change accordingly. Such changes might happen periodically in case a server follows automatically daylight saving time (DST) time zone offset changes. The canonical format for date-and-time values with an unknown time zone (usually referring to the notion of local time) uses the time-offset -00:00.

status STATUS

The status of the login.

STATUS values

Description

success

Login succeeded.

failure

Login failed.

2.2.29. show ntp

vsr> show ntp [vrf <string>] [details]

Show NTP information.

Input Parameters

vrf <string>

VRF to look into.

details

Show per server details.

Output Data

enabled true|false

Enable or disable the NTP protocol and indicates that the system should attempt to synchronize the system clock with an NTP server from the servers defined in the ‘ntp/server’ list.

server

List of NTP servers to use for system clock synchronization. If ‘/system/ntp/enabled’ is ‘true’, then the system will attempt to contact and utilize the specified NTP servers.

address ADDRESS

The address or hostname of the NTP server.

ADDRESS

The host type represents either an unzoned IP address or a DNS domain name.

version <uint8>

Version number to put in outgoing NTP packets.

association-type ASSOCIATION-TYPE

The desired association type for this NTP server.

ASSOCIATION-TYPE values

Description

SERVER

Use client association mode. This device will not provide synchronization to the configured NTP server.

PEER

Use symmetric active association mode. This device may provide synchronization to the configured NTP server.

POOL

Use client association mode with one or more of the NTP servers found by DNS resolution of the domain name given by the ‘address’ leaf. This device will not provide synchronization to the servers.

LOCAL-CLOCK

Use a local reference clock.

INVALID

Invalid use of the client/symmetric active association mode. This device can not be synchronized or provide synchronization to the servers.

iburst true|false

Indicates whether this server should enable burst synchronization or not.

prefer true|false

Indicates whether this server should be preferred or not.

stratum <uint8>

Indicates the level of the server in the NTP hierarchy. As stratum number increases, the accuracy is degraded. Primary servers are stratum while a maximum value of 16 indicates unsynchronized. The values have the following specific semantics: | 0 | unspecified or invalid | 1 | primary server (e.g., equipped with a GPS receiver) | 2-15 | secondary server (via NTP) | 16 | unsynchronized | 17-255 | reserved.

root-delay <uint32>

The round-trip delay to the server, in milliseconds.

root-dispersion <uint64>

Dispersion (epsilon) represents the maximum error inherent in the measurement.

offset <uint64>

Estimate of the current time offset from the peer. This is the time difference between the local and reference clock.

poll-interval <uint32>

Polling interval of the peer.

synchronized true|false

True if we are synchronized with this server.

state STATE

The server status in the clock selection process.

STATE values

Description

rejected

Not synchronized. Indicates sources to which connectivity has been lost or whose packets do not pass all tests.

falsetick

Not synchronized. Indicates a clock which chronyd thinks is a falseticker (i.e. its time is inconsistent with a majority of other sources).

candidate

Not synchronized. Indicates acceptable sources which are combined with the selected source.

system-peer

Synchronized. Indicates the source to which chronyd is currently synchronized.

excluded

Not synchronized. Indicates acceptable sources which are excluded by the combining algorithm.

inconsistent

Not synchronized. Indicates a source whose time appears to have too much variability.

auth-key-id <uint16>

Integer identifier used by the client and server to designate a secret key. The client and server must use the same key id.

2.2.30. show ntp clients

vsr> show ntp clients [vrf <string>] [l3vrf <string>]

Show connected NTP clients.

Input Parameters

vrf <string>

VRF to look into.

l3vrf <string>

Specify the l3vrf.

Output Data

client

NTP client records.

host HOST

Client host.

HOST

The host type represents either an unzoned IP address or a DNS domain name.

ntp-packets <uint32>

Number of NTP packets sent to the server.

dropped-ntp-packets <uint32>

Number of dropped NTP packets to limit response rate.

last-ntp-packet-time <uint32>

Time since the last NTP packet was received.

cmd-packets <uint32>

Number of command packets received from the client.

dropped-cmd-packets <uint32>

Number of command packets dropped to limit response rate.

last-cmd-packet-time <uint32>

Time since the last command packet was received.

2.2.31. show dhcp-relay

Note

requires a Product License.

vsr> show dhcp-relay [vrf VRF] [l3vrf L3VRF] [server SERVER] [TYPE]

Show DHCP relay statistics and leases.

Input Parameters

vrf VRF

VRF to look into.

VRF

The vrf name.

l3vrf L3VRF

Specify the l3vrf.

L3VRF

The l3vrf name.

server SERVER

DHCP server IP to which DHCP queries are relayed.

SERVER

An IPv4 address.

TYPE

Information to show.

TYPE values

Description

statistics

Show DHCP relay statistics.

leases

Show DHCP relay leases.

Output Data

dhcp-server

DHCP relay operational state.

address ADDRESS

IP address of DHCP server to which DHCP queries are relayed.

ADDRESS

An IPv4 address.

dhcp-server-leases

State of leases for DHCP server.

address ADDRESS

Leased IP address.

ADDRESS

An IPv4 address.

starts STARTS (mandatory)

Lease start time.

STARTS

The date-and-time type is a profile of the ISO 8601 standard for representation of dates and times using the Gregorian calendar. The profile is defined by the date-time production in Section 5.6 of RFC 3339. The date-and-time type is compatible with the dateTime XML schema type with the following notable exceptions: (a) The date-and-time type does not allow negative years. (b) The date-and-time time-offset -00:00 indicates an unknown time zone (see RFC 3339) while -00:00 and +00:00 and Z all represent the same time zone in dateTime. (c) The canonical format (see below) of data-and-time values differs from the canonical format used by the dateTime XML schema type, which requires all times to be in UTC using the time-offset ‘Z’. This type is not equivalent to the DateAndTime textual convention of the SMIv2 since RFC 3339 uses a different separator between full-date and full-time and provides higher resolution of time-secfrac. The canonical format for date-and-time values with a known time zone uses a numeric time zone offset that is calculated using the device’s configured known offset to UTC time. A change of the device’s offset to UTC time will cause date-and-time values to change accordingly. Such changes might happen periodically in case a server follows automatically daylight saving time (DST) time zone offset changes. The canonical format for date-and-time values with an unknown time zone (usually referring to the notion of local time) uses the time-offset -00:00.

ends ENDS (mandatory)

Lease end time.

ENDS

The date-and-time type is a profile of the ISO 8601 standard for representation of dates and times using the Gregorian calendar. The profile is defined by the date-time production in Section 5.6 of RFC 3339. The date-and-time type is compatible with the dateTime XML schema type with the following notable exceptions: (a) The date-and-time type does not allow negative years. (b) The date-and-time time-offset -00:00 indicates an unknown time zone (see RFC 3339) while -00:00 and +00:00 and Z all represent the same time zone in dateTime. (c) The canonical format (see below) of data-and-time values differs from the canonical format used by the dateTime XML schema type, which requires all times to be in UTC using the time-offset ‘Z’. This type is not equivalent to the DateAndTime textual convention of the SMIv2 since RFC 3339 uses a different separator between full-date and full-time and provides higher resolution of time-secfrac. The canonical format for date-and-time values with a known time zone uses a numeric time zone offset that is calculated using the device’s configured known offset to UTC time. A change of the device’s offset to UTC time will cause date-and-time values to change accordingly. Such changes might happen periodically in case a server follows automatically daylight saving time (DST) time zone offset changes. The canonical format for date-and-time values with an unknown time zone (usually referring to the notion of local time) uses the time-offset -00:00.

hw-mac-address HW-MAC-ADDRESS (mandatory)

MAC address of the network interface on which the lease will be used.

HW-MAC-ADDRESS

An IEEE 802 MAC address.

uid <string>

Client identifier used by the client to acquire the lease.

client-hostname <string>

Client host name sent using client-hostname statement.

binding-state BINDING-STATE

Lease’s binding state.

BINDING-STATE

Enumeration for a lease binding state.

next-binding-state NEXT-BINDING-STATE

State the lease will move to when the current state expires.

NEXT-BINDING-STATE

Enumeration for a lease binding state.

option-agent-circuit-id <string>

Circuit ID option sent by the relay agent.

option-agent-remote-id <string>

Remote ID option sent by the relay agent.

vendor-class-identifier <string>

Client-supplied Vendor Class Identifier option.

counters

Statistics for DHCP relay.

discover <uint32>

Number of DHCP discover messages.

offer <uint32>

Number of DHCP offer messages.

request <uint32>

Number of DHCP request messages.

decline <uint32>

Number of DHCP decline messages.

ack <uint32>

Number of DHCP ack messages.

nack <uint32>

Number of DHCP nack messages.

release <uint32>

Number of DHCP release messages.

inform <uint32>

Number of DHCP inform messages.

boot-request <uint32>

Number of BOOTP BOOTREQUEST messages.

boot-reply <uint32>

Number of BOOTP BOOTREPLY messages.

2.2.32. show dhcp-server

Note

requires a Product License.

vsr> show dhcp-server [vrf <string>] [l3vrf <string>]

Show DHCP server leases.

Input Parameters

vrf <string>

Specify the VRF.

l3vrf <string>

Specify the l3vrf.

2.2.33. show neighbors

Note

requires a Product License.

vsr> show neighbors [FAMILY] [vrf <string>] [interface <ifname>]

Show neighbors information.

Input Parameters

FAMILY

Display only this layer 3 family.

FAMILY values

Description

ipv4

IPv4 only.

ipv6

IPv6 only.

<string>

No description.

vrf <string>

The VRF in which to show the neighbors.

interface <ifname>

Interface name.

Output Data

neighbor

Neighbor entries in ARP table.

neighbor <string>

IPv4 or IPv6 address.

interface <string>

Interface name.

state <string>

System state (REACHABLE/PERMANENT/STATE/DELAY).

link-layer-address <string>

The link-layer address.

2.2.34. show conntracks

vsr> show conntracks [vrf <string>] [family FAMILY] [protocol PROTOCOL]

Show conntracks.

Input Parameters

vrf <string>

The VRF in which to show the conntracks.

family FAMILY

Display only this layer 3 family.

FAMILY values

Description

ipv4

IPv4 only.

ipv6

IPv6 only.

<string>

No description.

protocol PROTOCOL

Display only this layer 4 protocol.

PROTOCOL values

Description

tcp

TCP only.

udp

UDP only.

<string>

No description.

2.2.35. show product

vsr> show product [name] [version]

Show the product name and version.

Input Parameters

name

Display the product name.

version

Display the product version.

2.2.36. show fast-path cpu-usage

Note

requires a Product License.

vsr> show fast-path cpu-usage 

Show the fast path CPU usage.

2.2.37. show fast-path table-usage

Note

requires a Product License.

vsr> show fast-path table-usage 

Show the fastpath table usage.

2.2.38. show fast-path arp parameters

vsr> show fast-path arp parameters 

Show the fast path ARP parameters.

Output Data

max-queue <uint32>

Maximum number of packets queued for the whole address resolution engine (IPv4 and IPv6).

vrf

List of vrf’s.

name <string>

VRF name.

interface

List of interfaces on the given VRF.

name <string>

Interface name.

enabled true|false

True if fast path ARP is enabled.

reachable-timeout <uint32>

Maximum duration for which an ARP entry may stay in ‘reachable’ state, before becoming ‘stale’.

delay-timeout <uint32>

Maximum duration before sending an ARP Request when exiting the state STALE.

fail-timeout <uint32>

Maximum duration for which an ARP entry may stay in a ‘fail’ state, before being deleted. Fail state begins when the fast path encountered some error with a specific ARP entry.

stale-attempts <uint8>

Maximum number of times that a ‘stale’ state ARP entry can timeout before being deleted.

stale-timeout <uint32>

This value multiplied by ‘stale-attempts’ is the maximum duration for which an ARP entry may stay in a ‘stale’ state.

probe-attempts <uint8>

Maximum number of ARP requests sent for a target IPv4 address.

probe-timeout <uint32>

Maximum duration for which the fast path should wait for a response to an ARP request.

max-queue <uint16>

Maximum number of packets queued for a target IPv4 address.

reply-mode REPLY-MODE

Specifies requests for which a reply is sent.

REPLY-MODE values

Description

all

Reply to all requests.

interface

Reply to request if the requested IP address is configured on the incoming interface.

subnet

Reply to request if the requester is in the configured subnet of the requested IP address.

non-local

Do not reply to requests for host scope IP addresses (not implemented).

none

Do not reply to any request.

port-filter true|false

True if fast path ARP should filter packets for which the reverse path port differs from the incoming port.

accept-gratuitous true|false

True if fast path should update its ARP cache based on received gratuitous ARP packets. Gratuitous ARP packets are used by hosts to update others system’s ARP caches.

notify-gratuitous true|false

True if the fast path should send gratuitous packets to other hosts when its own IP-to-MAC mapping is changed.

proxy true|false

True if proxy for the fast path ARP is enabled. It allows to respond to ARP requests for another IP address, using the current host MAC address. If it is enabled, the fast path ensures routing to the destination IP.

2.2.39. show fast-path statistics

Note

requires a Product License.

vsr> show fast-path statistics [all] [TYPE]

Show fast-path statistics.

Input Parameters

all

Show all fast-path services statistics.

TYPE

Show fast-path services statistics.

TYPE values

Description

neighbor

Show neighbor fast-path service statistics.

ipv4

Show ipv4 fast-path service statistics.

ipv6

Show ipv6 fast-path service statistics.

ipsec-ipv4

Show ipsec ipv4 fast-path service statistics.

ipsec-ipv6

Show ipsec ipv6 fast-path service statistics.

vxlan

Show vxlan fast-path service statistics.

vlan

Show vlan fast-path service statistics.

bridge

Show bridge fast-path service statistics.

lag

Show lag fast-path service statistics.

gre

Show GRE fast-path service statistics.

pppoe

Show PPPoE fast-path service statistics.

mpls

Show MPLS fast-path service statistics.

global

Show global fast-path service statistics.

interface

Show interface fast-path service statistics.

exception

Show exception fast-path service statistics.

qos-sched

Show QoS scheduler fast-path service statistics.

qos-rate-limit

Show QoS rate limit fast-path service statistics.

Output Data

neighbor

ARP/NDP service statistics.

neighbor-arp-request-sent <uint64>

Number of ARP request packets sent (neighArpRequestSent).

neighbor-arp-request-retries <uint64>

Number of ARP request packets re-sent (neighArpRequestRetry).

neighbor-arp-reply-received <uint64>

Number of ARP reply packets received (neighArpReplyReceived).

neighbor-arp-request-received <uint64>

Number of ARP request packets received (neighArpRequestReceived).

neighbor-arp-reply-sent <uint64>

Number of ARP reply packets sent (neighArpReplySent).

neighbor-arp-gratuitous-packets <uint64>

Number of ARP gratuitous packets sent or received (neighArpGratuitous).

neighbor-arp-unhandled-packets <uint64>

Number of ARP packets sent as exception because of an unsupported ARP option (neighArpUnhandled).

neighbor-arp-dropped-not-found <uint64>

Number of unhonored ARP request packets because the IP address was not found or filtered (neighArpNotFound).

neighbor-arp-error-protocol <uint64>

Number of ARP packets that were dropped because they were corrupted (neighErrorProto).

neighbor-arp-error-table-full <uint64>

Number of ARP entries that were dropped because the table was full (neighArpTableFull).

neighbor-ndp-ns-sent <uint64>

Number of NDP neighbor solicitation packets sent (neighNdpNsSent).

neighbor-ndp-ns-retries <uint64>

Number of NDP neighbor solicitation packets re-sent (neighNdpNsRetry).

neighbor-ndp-ns-unicast-received <uint64>

Number of unicast NDP neighbor solicitation packets received (neighNdpNsReceivedUcast).

neighbor-ndp-ns-multicast-received <uint64>

Number of multicast NDP neighbor solicitation packets received (neighNdpNsReceivedMcast).

neighbor-ndp-na-received <uint64>

Number of NDP neighbor advertisement packets received (neighNdpNaReceived).

neighbor-ndp-unhandled-packets <uint64>

Number of NDP packets sent as exception because of an unsupported NDP option (neighNdpUnhandled).

neighbor-ndp-dropped-not-found <uint64>

Number of unhonored NDP request packets because the IP address was not found or filtered (neighNdpNotFound).

neighbor-ndp-error-table-full <uint64>

Number of NDP entries that were dropped because the table was full (neighNdpTableFull).

neighbor-ndp-error-protocol <uint64>

Number of NDP packets that were dropped because they were corrupted (neighNdpErrorProto).

neighbor-error-no-mbuf <uint64>

Number of ARP/NDP packets that could not be sent because no mbuf was available (neighErrorNoMbuf).

neighbor-delayed-packets <uint64>

Number of packets sent after delay (waiting for an neighbor resolution) (neighPacketDelayed).

neighbor-error-no-source-address <uint64>

Number of ARP/NDP packets that were not sent because no IP address was found on the output interface (neighErrorNoAddr).

neighbor-error-internal <uint64>

Number of ARP/NDP packets that were dropped because of an internal processing error (neighErrorInternal).

neighbor-error-queue-full <uint64>

Number of packets that were dropped while waiting for an neighbor resolution, because the queue was full (neighErrorQfull).

neighbor-error-queue-flushed <uint64>

Number of packets that were dropped while waiting for an neighbor resolution, because it failed (neighErrorQflush).

neighbor-unexpected-events <uint64>

Number of unexpected events in the neighbor state machine (neighUnexpEvent).

neighbor-unexpected-packets <uint64>

Number of unexpected packets in the current state of the neighbor state machine, packets are dropped (neighUnexpPacket).

ipv4

IPv4 service statistics.

ip-forwarded-datagrams <uint64>

Number of IP packets forwarded (IpForwDatagrams).

ip-in-delivered <uint64>

Number of IP packets delivered to user-protocols (IpInDelivers).

ip-in-received <uint64>

Number of IP packets received (IpInReceives).

ip-in-truncated-packets <uint64>

Number of IP packets discarded due to a truncate IP header (IpInTruncatedPkts).

ip-in-address-errors <uint64>

Number of IP packets discarded due to invalid IP address (IpInAddrErrors).

ip-in-header-errors <uint64>

Number of IP packets discarded due to errors in header (IpInHdrErrors).

ip-fragment-created <uint64>

Number of IP fragment packets created on fragmentation processing (IpFragCreates).

ip-fragment-ok <uint64>

Number of IP fragment packets sent successfully (IpFragOKs).

ip-fragment-failures <uint64>

Number of IP packets discarded due to failures during fragmentation processing (IpFragFails).

ip-reassembly-ok <uint64>

Number of IP packets successfully reassembled (IpReasmOKs).

ip-reassembly-required <uint64>

Number of IP fragments packets submitted to reassembly processing (IpReasmReqds).

ip-reassembly-exceptions <uint64>

Number of IP fragment packets sent in exception path (IpReasmExceptions).

ip-reassembly-failures <uint64>

Number of IP packets discarded due to failures during reassembly processing (IpReasmFails).

ip-reassembly-dropped-duplicate <uint64>

Number of IP packets dropped during reassembly considered as duplicate (IpReasmDroppedDuplicate).

ip-reassembly-dropped-session-complete <uint64>

Number of IP packets dropped during reassembly because the session is complete (IpReasmDroppedSessionComplete).

ip-reassembly-dropped-session-full <uint64>

Number of IP packets dropped during reassembly because the session is already full (IpReasmDroppedSessionAlreadyFull).

ip-reassembly-error-header-encapsulation <uint64>

Number of IP packets discarded during reassembly due to header encapsulation error (IpReasmErrorHeaderEncap).

ip-reassembly-error-ip-option-unsupported <uint64>

Number of IP packets discarded during reassembly due to unsupported IP option (IpReasmErrorIPOptionUnsupported).

ip-reassembly-error-last-already-received <uint64>

Number of IP packets discarded during reassembly due to receive twice the last fragment (IpReasmErrorLastAlreadyReceived).

ip-reassembly-error-offset-too-large <uint64>

Number of IP packets discarded during reassembly with offset due to an offset too big (IpReasmErrorOffsetTooLarge).

ip-reassembly-error-overlap-next <uint64>

Number of IP packets discarded during reassembly due to receive overlapping fragment with next one (IpReasmErrorOverlapNext).

ip-reassembly-error-overlap-previous <uint64>

Number of IP packets discarded during reassembly due to receive overlapping fragment with previous one (IpReasmErrorOverlapPrevious).

ip-reassembly-error-packet-too-short <uint64>

Number of IP packets discarded during reassembly due to reception of a too short fragment (IpReasmErrorPacketTooShort).

ip-reassembly-error-queue-allocation <uint64>

Number of IP packets discarded during reassembly due to reassembly queue allocation failure (IpReasmErrorQueueAlloc).

ip-reassembly-error-queue-full <uint64>

Number of IP packets discarded during reassembly due to reassembly queue full (too many fragments have been received) (IpReasmErrorQueueFull).

ip-reassembly-error-size-exceed <uint64>

Number of IP packets discarded during reassembly due to total received bytes greater than the maximal authorized value (65535) (IpReasmErrorSizeExceed).

ip-reassembly-error-size-overflow <uint64>

Number of IP packets discarded during reassembly due to total received bytes greater than the expected value (IpReasmErrorSizeOverflow).

ip-reassembly-error-too-many-segments <uint64>

Number of IP packets discarded during reassembly due to too many segments in IP packets (IpReasmErrorTooManySegments).

ip-reassembly-timeout <uint64>

Number of IP packets discarded due to timeout in reassembly processing (IpReasmTimeout).

ip-checksum-errors <uint64>

Number of IP packets discarded due to an invalid checksum (IpCsumErrors).

ip-dropped-blackhole <uint64>

Number of IP packets discarded due to matching blackhole route (IpDroppedBlackhole).

ip-dropped-filtering <uint64>

Number of IP packets discarded by filtering processing (IpDroppedNetfilter).

ip-dropped-forwarding <uint64>

Number of IP packets discarded due to forwarding being disabled (IpDroppedForwarding).

ip-dropped-invalid-interface <uint64>

Number of IP packets discarded due to invalid outgoing interface (IpDroppedInvalidInterface).

ip-dropped-ipsec <uint64>

Number of IP packets discarded by IPsec processing (IpDroppedIPsec).

ip-dropped-no-arp <uint64>

Number of IP packets discarded due to missing ARP resolution (IpDroppedNoArp).

ip-dropped-no-memory <uint64>

Number of IP packets discarded due to memory allocation errors (IpDroppedNoMemory).

ip-dropped-out-operative <uint64>

Number of IP packets discarded because the outgoing interface is down (IPDroppedOutOperative).

ip-dropped-route-exception <uint64>

Number of IP packets sent to exception due to specific route (IpDroppedRouteException).

ip-nhrp-packet <uint64>

Number of IP NHRP packets (IpNhrpPacket).

ip-nhrp-error-send <uint64>

Number of discarded sent IP NHRP packets (IpNhrpErrorSend).

ipv6

IPv6 service statistics.

ip6-forwarded-datagrams <uint64>

Number of IPv6 packets forwarded (IpForwDatagrams).

ip6-in-delivered <uint64>

Number of IPv6 packets delivered to user-protocols (IpInDelivers).

ip6-in-received <uint64>

Number of IPv6 packets received (IpInReceives).

ip6-in-truncated-packets <uint64>

Number of IPv6 packets discarded due to a truncate IP header (IpInTruncatedPkts).

ip6-in-address-errors <uint64>

Number of IPv6 packets discarded due to invalid IPv6 address (IpInAddrErrors).

ip6-in-header-errors <uint64>

Number of IPv6 packets discarded due to errors in header (IpInHdrErrors).

ip6-fragment-created <uint64>

Number of IPv6 fragment packets created on fragmentation processing (IpFragCreates).

ip6-fragment-ok <uint64>

Number of IPv6 fragment packets sent successfully (IpFragOKs).

ip6-fragment-failures <uint64>

Number of IPv6 packets discarded due to failures during fragmentation processing (IpFragFails).

ip6-fragment-reassembly-exceptions <uint64>

Number of IP fragment packets sent in exception path.

ip6-reassembly-ok <uint64>

Number of IPv6 packets successfully reassembled (IpReasmOKs).

ip6-reassembly-required <uint64>

Number of IPv6 fragments packets submitted to reassembly processing (IpReasmReqds).

ip6-reassembly-exceptions <uint64>

Number of IPv6 fragment packets sent in exception path (IpReasmExceptions).

ip6-reassembly-failures <uint64>

Number of IPv6 packets discarded due to failures during reassembly processing (IpReasmFails).

ip6-reassembly-dropped-session-complete <uint64>

Number of IPv6 packets dropped during reassembly because the session is complete (IpReasmDroppedSessionComplete).

ip6-reassembly-dropped-session-full <uint64>

Number of IPv6 packets dropped during reassembly because the session is already full (IpReasmDroppedSessionAlreadyFull).

ip6-reassembly-error-fragment-header <uint64>

Number of IPv6 packets discarded during reassembly due to header reading error (IpReasmErrorFragmentHeader).

ip6-reassembly-error-header-encapsulation <uint64>

Number of IPv6 packets discarded during reassembly due to header encapsulation error (IpReasmErrorHeaderEncap).

ip6-reassembly-error-ip6-option-too-large <uint64>

Number of IPv6 packets discarded during reassembly due to IPv6 option too large (IpReasmErrorIPOptionTooLarge).

ip6-reassembly-error-last-already-received <uint64>

Number of IPv6 packets discarded during reassembly due to receive twice the last fragment (IpReasmErrorLastAlreadyReceived).

ip6-reassembly-error-offset-too-large <uint64>

Number of IPv6 packets discarded during reassembly with offset due to an offset too big (IpReasmErrorOffsetTooLarge).

ip6-reassembly-error-overlap-next <uint64>

Number of IPv6 packets discarded during reassembly due to receive overlapping fragment with next one (IpReasmErrorOverlapNext).

ip6-reassembly-error-overlap-previous <uint64>

Number of IPv6 packets discarded during reassembly due to receive overlapping fragment with previous one (IpReasmErrorOverlapPrevious).

ip6-reassembly-error-packet-too-short <uint64>

Number of IPv6 packets discarded during reassembly due to reception of a too short fragment (IpReasmErrorPacketTooShort).

ip6-reassembly-error-queue-allocation <uint64>

Number of IPv6 packets discarded during reassembly due to reassembly queue allocation failure (IpReasmErrorQueueAlloc).

ip6-reassembly-error-queue-full <uint64>

Number of IPv6 packets discarded during reassembly due to reassembly queue full (too many fragments have been received) (IpReasmErrorQueueFull).

ip6-reassembly-error-size-exceed <uint64>

Number of IPv6 packets discarded during reassembly due to total received bytes greater than the maximal authorized value (65535) (IpReasmErrorSizeExceed).

ip6-reassembly-error-size-overflow <uint64>

Number of IPv6 packets discarded during reassembly due to total received bytes greater than the expected value (IpReasmErrorSizeOverflow).

ip6-reassembly-error-too-many-segments <uint64>

Number of IPv6 packets discarded during reassembly due to too many segments in IP packets (IpReasmErrorTooManySegments).

ip6-reassembly-timeout <uint64>

Number of IPv6 packets discarded due to timeout in reassembly processing (IpReasmTimeout).

ip6-dropped-blackhole <uint64>

Number of IPv6 packets discarded due to matching blackhole route (IpDroppedBlackhole).

ip6-dropped-filtering <uint64>

Number of IPv6 packets discarded by filtering processing (IpDroppedNetfilter).

ip6-dropped-forwarding <uint64>

Number of IPv6 packets discarded due to forwarding being disabled (IpDroppedForwarding).

ip6-dropped-invalid-interface <uint64>

Number of IPv6 packets discarded due to invalid outgoing interface (IpDroppedInvalidInterface).

ip6-dropped-ipsec <uint64>

Number of IPv6 packets discarded by IPsec processing (IpDroppedIPsec).

ip6-dropped-no-arp <uint64>

Number of IPv6 packets discarded due to missing ARP resolution (IpDroppedNoArp).

ip6-dropped-no-memory <uint64>

Number of IPv6 packets discarded due to memory allocation errors (IpDroppedNoMemory).

ip6-dropped-out-operative <uint64>

Number of IPv6 packets discarded because the outgoing interface is down (IPDroppedOutOperative).

ip6-dropped-route-exception <uint64>

Number of IPv6 packets sent to exception due to specific route (IpDroppedRouteException).

ip6-nhrp-packet <uint64>

Number of IPv6 NHRP packets (IpNhrpPacket).

ip6-nhrp-error-send <uint64>

Number of discarded sent IPv6 NHRP packets (IpNhrpErrorSend).

ipsec-ipv4

IPsec service statistics.

ipsec-ipv4-in-sa <uint64>

Number of IPv4 packets decrypted with a security association (IpsecInSA).

ipsec-ipv4-out-sa <uint64>

Number of IPv4 packets encrypted with a security association (IpsecOutSA).

ipsec-ipv6

IPsec IPv6 service statistics.

ipsec-ipv6-in-sa <uint64>

Number of IPv6 packets decrypted with a security association (Ipsec6InSA).

ipsec-ipv6-out-sa <uint64>

Number of IPv6 packets encrypted with a security association (Ipsec6OutSA).

vxlan

VXLAN service statistics.

vxlan-dropped-header-too-short <uint64>

Number of input packets dropped in VXLAN due to a VXLAN header too short (VxlanDroppedHeaderTooShort).

vxlan-dropped-in-operative <uint64>

Number of input packets dropped in VXLAN because the incoming interface is down (VxlanDroppedInOperative).

vxlan-dropped-invalid-ip-family <uint64>

Number of output packets dropped in VXLAN due to a failure to get the VXLAN header (VxlanDroppedInvalidIpFamily).

vxlan-dropped-invalid-ipv4-checksum <uint64>

Number of input packets dropped in IPv4 VXLAN due to an invalid checksum (VxlanDroppedInvalidIPv4Csum).

vxlan-dropped-invalid-ipv4-header <uint64>

Number of input packets dropped in IPv4 VXLAN due to a failure to get the VXLAN header (VxlanDroppedInvalidIPv4Header).

vxlan-dropped-invalid-ipv6-checksum <uint64>

Number of input packets dropped in IPv4 VXLAN due to an invalid checksum (VxlanDroppedInvalidIPv6Csum).

vxlan-dropped-invalid-ipv6-header <uint64>

Number of input packets dropped in IPv6 VXLAN due to a failure to get the VXLAN header (VxlanDroppedInvalidIPv6Header).

vxlan-dropped-ipv4-no-destination <uint64>

Number of output packets dropped in IPv4 VXLAN due to a null destination address (VxlanDroppedIPv4NoDst).

vxlan-dropped-ipv6-no-destination <uint64>

Number of output packets dropped in IPv6 VXLAN due to a null destination address (VxlanDroppedIPv6NoDst).

vxlan-dropped-ovs-no-destination <uint64>

Number of output packets dropped in OVS VXLAN due to a null destination address (VxlanDroppedOvsNoDst).

vxlan-dropped-prepend-ipv4-failure <uint64>

Number of output packets dropped in IPv4 VXLAN due to add IP header (VxlanDroppedPrependIPv4Failure).

vxlan-dropped-prepend-ipv6-failure <uint64>

Number of output packets dropped in IPv6 VXLAN due to add IP header (VxlanDroppedPrependIPv6Failure).

vxlan-dropped-prepend-ovs-failure <uint64>

Number of output packets dropped in OVS VXLAN due to add IP header (VxlanDroppedPrependOvsFailure).

vxlan-dropped-unknown-iface <uint64>

Number of input packets dropped in VXLAN due to an invalid interface (VxlanDroppedUnknownIface).

vxlan-dropped-unknown-vni <uint64>

Number of input packets dropped in VXLAN due to an invalid VNI (VxlanDroppedUnknownVNI).

vxlan-exception-i-flag-not-set <uint64>

Number of input packets sent to exception by VXLAN due a I flags not set (see rfc 7348) (VxlanExceptionIFlagNotSet).

vxlan-exception-ipv4-mtu-exceeded <uint64>

Number of output packets sent to exception by IPv4 VXLAN due a MTU exceeded the authorized value (VxlanExceptionIPv4MtuExceeded).

vxlan-exception-ipv4-no-multicast-source <uint64>

Number of output packets sent to exception by IPv4 VXLAN due to no valid src address found for a multicast packet (VxlanExceptionIPv4NoMcastSrc).

vxlan-exception-ipv4-route <uint64>

Number of output packets sent to exception by IPv4 VXLAN due to specific route (VxlanExceptionIPv4Route).

vxlan-exception-ipv6-mtu-exceeded <uint64>

Number of output packets sent to exception by IPv6 VXLAN due a MTU exceeded the authorized value (VxlanExceptionIPv6MtuExceeded).

vxlan-exception-ipv6-no-multicast-source <uint64>

Number of output packets sent to exception by IPv6 VXLAN due to no valid src address found for a multicast packet (VxlanExceptionIPv6NoMcastSrc).

vxlan-exception-ipv6-route <uint64>

Number of output packets sent to exception by IPv6 VXLAN due to specific route (VxlanExceptionIPv6Route).

vxlan-exception-no-input-fdb <uint64>

Number of input packets sent to exception by VXLAN due to no valid fdb found (VxlanExceptionNoInputFdb).

vxlan-exception-no-output-fdb <uint64>

Number of output packets sent to exception by VXLAN due to no valid fdb found (VxlanExceptionNoOutputFdb).

vxlan-exception-no-remote <uint64>

Number of output packets sent to exception by VXLAN due to no remote found (VxlanExceptionNoRemote).

vxlan-exception-ovs-mtu-exceeded <uint64>

Number of output packets sent to exception by Ovs VXLAN due a MTU exceeded the authorized value (VxlanExceptionOvsMtuExceeded).

vxlan-exception-ovs-route <uint64>

Number of output packets sent to exception by Ovs VXLAN due to specific route (VxlanExceptionOvsRoute).

vxlan-exception-too-many-flags <uint64>

Number of input packets sent to exception by VXLAN due to a presence of an unsupported flag (neither I and G ones, see rfc 7348) (VxlanExceptionTooManyFlags).

vxlan-fdb-forwarding-duplicate-error <uint64>

Number of failure to duplicate a packet for fdb forwarding (VxlanFdbForwDuplicateError).

vlan

VLAN service statistics.

vlan-dropped-in-operative <uint64>

Number of input packets dropped in VLAN because the incoming interface is down (VlanDroppedInOperative).

vlan-dropped-input-unknown-interface <uint64>

Number of input packets dropped in VLAN due to unknown interface (VlanDroppedInputUnknownIf).

vlan-dropped-invalid-tag <uint64>

Number of input packets dropped in VLAN due to an invalid tag (VlanDroppedInvalidTag).

vlan-dropped-out-operative <uint64>

Number of output packets dropped in VLAN because the outgoing interface is down (VlanDroppedOutOperative).

vlan-dropped-prepend-failure <uint64>

Number of output packets dropped in VLAN due to a failure to add VLAN tag (VlanDroppedPrependFailure).

vlan-output-unknown-interface <uint64>

Number of output packets with unknown interface (VlanOutputUnknownIf).

vlan-unknown-tag <uint64>

Number of packets with unknown VLAN tag (VlanUnknownTag).

bridge

Bridge service statistics.

l2-forwarded-frames <uint64>

Number of packets forwarded at layer 2 (bridging processing) (L2ForwFrames).

bridge-dropped-forwarding-invalid <uint64>

Number of output packets dropped in bridge due to forbidden forwarding (forwarding disable or originating port) (BridgeDroppedFwdInvalid).

bridge-dropped-input-lookup-error <uint64>

Number of input packets dropped in bridge due to a lookup error (BridgeDroppedInputLookupError).

bridge-dropped-invalid-output-port <uint64>

Number of output packets dropped in bridge because output port index is invalid (BridgeDroppedInvalidOutPort).

bridge-dropped-invalid-source <uint64>

Number of input packets dropped in bridge due to invalid mac source (BridgeDroppedInvalidSrc).

bridge-dropped-invalid-state <uint64>

Number of input packets dropped in bridge due to invalid state (not learning or forwarding) of the bridge (BridgeDroppedInvalidState).

bridge-dropped-learning <uint64>

Number of output packets dropped in bridge while it is in learning state (BridgeDroppedLearning).

bridge-dropped-mtu-exceeded <uint64>

Number of output packets dropped in bridge due to MTU greater than the authorized one (BridgeDroppedMtuExceeded).

bridge-dropped-no-output-port <uint64>

Number of output packets dropped in bridge due to no valid output (BridgeDroppedNoOutputPort).

bridge-dropped-output-lookup-error <uint64>

Number of output packets dropped in bridge due to a lookup error (BridgeDroppedOutputLookupError).

bridge-dropped-out-operative <uint64>

Number of output packets dropped in bridge because the outgoing interface is down (BridgeDroppedOutOperative).

bridge-dropped-output-unknown <uint64>

Number of output packets dropped in bridge due to an unknown output (BridgeDroppedOutputUnknown).

bridge-dropped-pause-frame <uint64>

Number of input packets dropped in bridge because it is a pause frame (BridgeDroppedPauseFrame).

bridge-dropped-unknown-interface <uint64>

Number of input packets dropped in bridge due to an invalid interface (BridgeDroppedUnknownIface).

bridge-fdb-synchronization-error <uint64>

Number of packets dropped in bridge due to fdb synchronization error (BridgeFdbSyncError).

lag

Lag service statistics.

lag-dropped-inactive-port <uint64>

Number of LAG dropped inactive ports (LagDroppedInactivePort).

gre

GRE service statistics.

gre-dropped-init-gre-ipv4-header-failure <uint64>

Number of output packets dropped in GRE due to a failure to add the GRE header (GREDroppedInitGreIPv4HeaderFailure).

gre-dropped-init-gre-ipv6-header-failure <uint64>

Number of output packets dropped in GRE6 due to a failure to add the GRE header (GREDroppedInitGreIPv6HeaderFailure).

gre-dropped-init-ipv4-header-failure <uint64>

Number of output packets dropped in GRE due to a failure to add the IPv4 header (GREDroppedInitIPv4HeaderFailure).

gre-dropped-init-ipv6-header-failure <uint64>

Number of output packets dropped in GRE due to a failure to add the IPv4 header (GREDroppedInitIPv6HeaderFailure).

gre-dropped-in-operative <uint64>

Number of input packets dropped in GRE because the ingoing interface is down (GREDroppedInOperative).

gre-dropped-missing-checksum <uint64>

Number of input packets dropped in GRE due to a missing checksum (GREDroppedMissingChecksum).

gre-dropped-out-operative <uint64>

Number of output packets dropped in GRE because the outgoing interface is down (GREDroppedOutOperative).

gre-dropped-parse-ipv4-header-failure <uint64>

Number of input packets dropped in GRE due to failure to parse IPv4 header (GREDroppedParseIPv4HeaderFailure).

gre-dropped-parse-ipv6-header-failure <uint64>

Number of input packets dropped in GRE due to failure to parse IPv6 header (GREDroppedParseIPv6HeaderFailure).

gre-dropped-pullup-ipv4-header-failure <uint64>

Number of input packets dropped in IPv4 GRE due to pullup failure on gre header (GREDroppedPullupIPv4HeaderFailure).

gre-dropped-pullup-ipv6-header-failure <uint64>

Number of input packets dropped in IPv6 GRE due to pullup failure on gre header (GREDroppedPullupIPv6HeaderFailure).

gre-dropped-unexpected-checksum <uint64>

Number of input packets dropped in GRE due to an unexpected checksum (GREDroppedUnexpectedChecksum).

gre-dropped-wrong-checksum <uint64>

Number of input packets dropped in GRE due to an incorrect checksum (GREDroppedWrongChecksum).

gre-exception-input-unsupported-protocol <uint64>

Number of input packets sent to exception by GRE due to unsupported GRE protocol (GREExceptionInputUnsupportedProtocol).

gre-exception-ipv4-route <uint64>

Number of output packets sent to exception by GRE due to specific route (for IPv4 packet) (GREExceptionIPv4Route).

gre-exception-ipv4-source-select-failed <uint64>

Number of output packets sent to exception by GRE due to no src address can be set (for IPv4 packet) (GREExceptionIPv4SourceSelectFailed).

gre-exception-ipv6-route <uint64>

Number of output packets sent to exception by GRE due to specific route (for IPv6 packet) (GREExceptionIPv6Route).

gre-exception-output-unsupported-protocol <uint64>

Number of output packets sent to exception by GRE due to unsupported GRE protocol (GREExceptionOutputUnsupportedProtocol).

gre-exception-unknown-iface <uint64>

Number of output packets sent to exception by GRE due to an invalid GRE interface id (GREExceptionUnknownIface).

gre-exception-unsupported-ethernet-type <uint64>

Number of output packets sent to exception by GRE due to unsupported ethernet type (GREExceptionUnsupportedEtherType).

gre-invalid-header <uint64>

Number of input packets not managed by GRE due to routing flags set (see rfc 1701) or version number different to 0. The packet can be dropped or sent to exception later in other fast path processing part (GREInvalidHeader).

gre-protocol-not-supported <uint64>

Number of input packets not supported by GRE (GREProtocolNotSupported).

gretap-dropped-out-operative <uint64>

Number of output packets dropped in GRETAP because the outgoing interface is down (GRETAPDroppedOutOperative).

gretap-exception-unknown-iface <uint64>

Number of output packets sent to exception by GRETAP due to an invalid GRE interface id (GRETAPExceptionUnknownIface).

mpls

MPLS service statistics.

mpls-forwarding <uint64>

Number of forwarding packets in MPLS (MplsForwarding).

mpls-input <uint64>

Number of input packets in MPLS (MplsInput).

mpls-no-route <uint64>

Number of packets in MPLS with no route (MplsNoRoute).

mpls-push <uint64>

Number of push packets in MPLS (MplsPush).

mpls-in-header-errors <uint64>

Number of packets in MPLS discarded due to errors in header (MplsInHdrErrors).

mpls-received-dropped <uint64>

Number of received dropped packets in MPLS (MplsRxDrop).

mpls-dropped-invalid-interface <uint64>

Number of packets dropped in MPLS due to invalid outgoing interface (MplsDroppedInvalidInterface).

mpls-dropped-mtu <uint64>

Number of packets dropped in MPLS due to MTU greater than the authorized one (MplsDroppedMtu).

mpls-dropped-no-memory <uint64>

Number of packets dropped in MPLS due to memory allocation errors (MplsDroppedNoMem).

mpls-dropped-no-neighbor <uint64>

Number of dropped packets in MPLS due to no neighbor is found (MplsDroppedNoNeigh).

mpls-dropped-ttl-exceed <uint64>

Number of packets dropped in MPLS due to ttl exceeded (MplsDroppedTtlExceed).

global

Global service statistics.

fast-path-dropped <uint64>

Number of packets dropped by fast path (fp_dropped).

fast-path-dropped-neighbor <uint64>

Number of packets dropped by fast path in ARP/NDP (fp_dropped_neigh).

fast-path-dropped-bonding <uint64>

Number of packets dropped by fast path in bonding (fp_dropped_bonding).

fast-path-dropped-bridge <uint64>

Number of packets dropped by fast path in bridge (fp_dropped_bridge).

fast-path-dropped-ebtables <uint64>

Number of packets dropped by fast path in layer 2 filtering (fp_dropped_ebtables).

fast-path-dropped-ethernet <uint64>

Number of packets dropped by fast path at the generic ethernet layer (fp_dropped_ether).

fast-path-dropped-exception <uint64>

Number of packets dropped by fast path in exception path (fp_dropped_excp).

fast-path-dropped-exception-loop <uint64>

Number of packets dropped by fast path due to exception loop (fp_dropped_excloop).

fast-path-dropped-filtering <uint64>

Number of packets dropped by fast path in IPv4 filtering (fp_dropped_netfilter).

fast-path-dropped-filtering-ipv6 <uint64>

Number of packets dropped by fast path in IPv6 filtering (fp_dropped_netfilter6).

fast-path-dropped-gre <uint64>

Number of packets dropped by fast path in GRE (fp_dropped_gre).

fast-path-dropped-ip <uint64>

Number of packets dropped by fast path in generic IPv4 (fp_dropped_ip).

fast-path-dropped-ipsec <uint64>

Number of packets dropped by fast path in IPv4 IPsec (fp_dropped_ipsec).

fast-path-dropped-ipsec-ipv6 <uint64>

Number of packets dropped by fast path in IPv6 IPsec (fp_dropped_ipsec6).

fast-path-dropped-ipv6 <uint64>

Number of packets dropped by fast path in generic IPv6 (fp_dropped_ipv6).

fast-path-dropped-macvlan <uint64>

Number of packets dropped by fast path in MACVLAN (fp_dropped_macvlan).

fast-path-dropped-mpls <uint64>

Number of packets dropped by fast path in MultiProtocol Label Switching (fp_dropped_mpls).

fast-path-dropped-multicast <uint64>

Number of packets dropped by fast path in IPv4 multicast (fp_dropped_mcast).

fast-path-dropped-multicast-ipv6 <uint64>

Number of packets dropped by fast path in IPv6 multicast (fp_dropped_mcast6).

fast-path-dropped-npf <uint64>

Number of packets dropped by fast path in Network Address Translation and Carrier-grade NAT (fp_dropped_npf).

fast-path-dropped-ovs <uint64>

Number of packets dropped by fast path in Open vSwitch (fp_dropped_ovs).

fast-path-dropped-plugins <uint64>

Number of packets dropped by fast path in plugin (fp_dropped_plugins).

fast-path-dropped-qos <uint64>

Number of packets dropped by fast path in QoS (fp_dropped_qos).

fast-path-dropped-reassembly <uint64>

Number of packets dropped by fast path in IPv4 reassembly (fp_dropped_reasm).

fast-path-dropped-reassembly-ipv6 <uint64>

Number of packets dropped by fast path in IPv6 reassembly (fp_dropped_reasm6).

fast-path-dropped-system <uint64>

Number of packets dropped by fast path in internal processing (fp_dropped_system).

fast-path-dropped-tc <uint64>

Number of packets dropped by fast path in generic traffic conditioning (fp_dropped_tc).

fast-path-dropped-tc-erl <uint64>

Number of packets dropped by fast path in traffic conditioning by exception rate limitation (fp_dropped_tc_erl).

fast-path-dropped-tunnel <uint64>

Number of packets dropped by fast path in IPinIP tunnel (fp_dropped_tunnel).

fast-path-dropped-vethernet <uint64>

Number of packets dropped by fast path in vEthernet (fp_dropped_veth).

fast-path-dropped-vlan <uint64>

Number of packets dropped by fast path in VLAN (fp_dropped_vlan).

fast-path-dropped-vxlan <uint64>

Number of packets dropped by fast path in VXLAN (fp_dropped_vxlan).

fast-path-missing-ipsec-license <uint64>

Number of packets dropped in fast path due to missing ipsec license (fp_missing_ipsec_license).

fast-path-missing-product-license <uint64>

Number of packets dropped in fast path due to missing product license (fp_missing_product_license).

interface

Interface statistics.

name <string>

Interface name.

accelerated true|false

True if the interface is managed by the fast-path, else false.

input-bytes <uint64>

The number of input received bytes (ifs_ibytes).

input-errors <uint64>

The number of input received errors (ifs_ierrors).

input-last-error <uint64>

The number of input received last errors (ifs_ilasterror).

input-multicasts <uint64>

The number of input received multicast packets (ifs_imcasts).

input-no-mbuf <uint64>

The number of input packets dropped because no mbuf was available (ifs_inombuf).

input-packets <uint64>

The number of input received packets (ifs_ipackets).

missed-input-packets <uint64>

The number of missed input packets (ifs_imissed).

multicasts <uint64>

The number of multicasts (ifs_mcasts).

output-bytes <uint64>

The number of output sent bytes (ifs_obytes).

output-errors <uint64>

The number of output sent errors (ifs_oerrors).

output-packets <uint64>

The number of ouput sent packets (ifs_opackets).

exception

Exception service statistics.

exception-by-module

Exceptions by module statistics.

fast-path-exception-bonding <uint64>

Number of packets send in exception in bonding (fp_exception_bonding).

fast-path-exception-bridge <uint64>

Number of packets send in exception in bridge (fp_exception_bridge).

fast-path-exception-ebtables <uint64>

Number of packets send in exception in layer 2 filtering (fp_exception_ebtables).

fast-path-exception-ethernet <uint64>

Number of packets send in exception in generic layer 2 (fp_exception_ether).

fast-path-exception-filtering <uint64>

Number of packets send in exception in IPv4 filtering (fp_exception_netfilter).

fast-path-exception-filtering-ipv6 <uint64>

Number of packets send in exception in IPv6 filtering (fp_exception_netfilter6).

fast-path-exception-gre <uint64>

Number of packets send in exception in GRE (fp_exception_gre).

fast-path-exception-ifnet <uint64>

Number of packets send in exception by a virtual interface (fp_exception_ifnet).

fast-path-exception-ip <uint64>

Number of packets send in exception in generic IPv4 (fp_exception_ip).

fast-path-exception-ipsec <uint64>

Number of packets send in exception in IPv4 IPsec (fp_exception_ipsec).

fast-path-exception-ipsec-ipv6 <uint64>

Number of packets send in exception in IPv6 IPsec (fp_exception_ipsec6).

fast-path-exception-ipv6 <uint64>

Number of packets send in exception in generic IPv6 (fp_exception_ipv6).

fast-path-exception-macvlan <uint64>

Number of packets send in exception in MACVLAN (fp_exception_macvlan).

fast-path-exception-mpls <uint64>

Number of packets send in exception in MPLS (fp_exception_mpls).

fast-path-exception-npf <uint64>

Number of packets send in exception in NPF (fp_exception_npf).

fast-path-exception-reassembly <uint64>

Number of packets send in exception in IPv4 reassembly (fp_exception_reass).

fast-path-exception-sflow <uint64>

Number of packets sent in exception in sflow (fp_exception_sflow).

fast-path-exception-syslog <uint64>

Number of packets send in exception for logging (for system without syslog) (fp_exception_syslog).

fast-path-exception-tap <uint64>

Number of packets send in exception in eBPF (Enhanced Berkeley Packet Filtering), typically when there is a tcpdump or sflow (fp_exception_tap).

fast-path-exception-tunnel <uint64>

Number of packets send in exception in IPinIP tunnel (fp_exception_tunnel).

fast-path-exception-unknown-ifnet <uint64>

Number of packets sent in exception due to unknown ifnet (fp_exception_unknown_ifnet).

fast-path-exception-vethernet <uint64>

Number of packets sent in exception in vEthernet (fp_exception_veth).

fast-path-exception-vlan <uint64>

Number of packets sent in exception in VLAN (fp_exception_vlan).

fast-path-exception-vxlan <uint64>

Number of packets send in exception in VXLAN (fp_exception_vxlan).

exception-dropped-fp-to-linux-add-mark-failure <uint64>

Number of exception packets to Linux dropped due to a tag addition failure (ExcpDroppedFpToLinuxAddMarkFailure).

exception-dropped-fp-to-linux-fptun-failure <uint64>

Number of ExcpDroppedFpToLinuxFptunFailure exceptions (ExcpDroppedFpToLinuxFptunFailure).

exception-dropped-fp-to-linux-no-ipv4-route-local <uint64>

Number of exception packets to Linux dropped due to a failure to find the IPv4 route (ExcpDroppedFpToLinuxNoIPv4RouteLocal).

exception-dropped-fp-to-linux-no-ipv6-route-local <uint64>

Number of exception packets to Linux dropped due to a failure to find the IPv6 route (ExcpDroppedFpToLinuxNoIPv6RouteLocal).

exception-dropped-fp-to-linux-prepend-failure <uint64>

Number of ExcpDroppedFpToLinuxPrependFailure exceptions (ExcpDroppedFpToLinuxPrependFailure).

exception-dropped-fp-to-linux-prepend-failure-detailed

Detailed exceptions of the packets dropped from fast-path to linux with prepend failure.

exception-dropped-fp-to-linux-ecmp-prepend-failure <uint64>

Number of ExcpDroppedFpToLinuxEcmpPrependFailure exceptions (ExcpDroppedFpToLinuxEcmpPrependFailure).

exception-dropped-fp-to-linux-ecmp6-prepend-failure <uint64>

Number of ExcpDroppedFpToLinuxEcmp6PrependFailure exceptions (ExcpDroppedFpToLinuxEcmp6PrependFailure).

exception-dropped-fp-to-linux-eth-fptun-prepend-failure <uint64>

Number of ExcpDroppedFpToLinuxEthFptunPrependFailure exceptions (ExcpDroppedFpToLinuxEthFptunPrependFailure).

exception-dropped-fp-to-linux-eth-prepend-failure <uint64>

Number of ExcpDroppedFpToLinuxEthPrependFailure exceptions (ExcpDroppedFpToLinuxEthPrependFailure).

exception-dropped-fp-to-linux-ipsec-prepend-failure <uint64>

Number of ExcpDroppedFpToLinuxIPsecPrependFailure exceptions (ExcpDroppedFpToLinuxIPsecPrependFailure).

exception-dropped-fp-to-linux-restore-failure <uint64>

Number of ExcpDroppedFpToLinuxRestoreFailure exceptions (ExcpDroppedFpToLinuxRestoreFailure).

exception-dropped-fp-to-linux-tuple-prepend-failure <uint64>

Number of ExcpDroppedFpToLinuxTuplePrependFailure exceptions (ExcpDroppedFpToLinuxTuplePrependFailure).

exception-dropped-invalid-mtag <uint64>

Number of ExcpDroppedInvalidMtag exceptions (ExcpDroppedInvalidMtag).

exception-dropped-linux-to-fp-generic-command-failure <uint64>

Number of packets from Linux dropped due to a FPTUN internal error (ExcpDroppedLinuxToFpGenericCommandFailure).

exception-dropped-linux-to-fp-invalid-port-id <uint64>

Number of packets from Linux dropped due to a reception of a FPTUN message on an unexpected port (ExcpDroppedLinuxToFpInvalidPortId).

exception-dropped-linux-to-fp-invalid-version <uint64>

Number of packets from Linux dropped due to an invalid FPTUN version (ExcpDroppedLinuxToFpInvalidVersion).

exception-dropped-linux-to-fp-ipv4-pullup-failure <uint64>

Number of packets from Linux dropped due to a failure when getting the IPv4 header of the FPTUN message (ExcpDroppedLinuxToFpIPv4PullupFailure).

exception-dropped-linux-to-fp-ipv6-pullup-failure <uint64>

Number of packets from Linux dropped due to a failure when getting the IPv6 header of the FPTUN message (ExcpDroppedLinuxToFpIPv6PullupFailure).

exception-dropped-linux-to-fp-msg-too-short <uint64>

Number of packets from Linux dropped due to an incomplete FPTUN message (ExcpDroppedLinuxToFpMsgTooShort).

exception-dropped-linux-to-fp-no-output-function <uint64>

Number of packets from Linux dropped because no TX function has been registered (ExcpDroppedLinuxToFpNoOutputFunction).

exception-dropped-linux-to-fp-other-host <uint64>

Number of packets from Linux dropped due to a reception of a FPTUN message marked as PACKET_OTHERHOST (ExcpDroppedLinuxToFpOtherHost).

exception-dropped-linux-to-fp-out-operative <uint64>

Number of packets from Linux dropped because the destination interface is down (ExcpDroppedLinuxToFpOutOperative).

exception-dropped-linux-to-fp-tproxy-failure <uint64>

Number of ExcpDroppedLinuxToFpTproxyFailure exceptions (ExcpDroppedLinuxToFpTproxyFailure).

exception-dropped-linux-to-fp-unknown-command <uint64>

Number of packets from Linux dropped due to an invalid FPTUN command (ExcpDroppedLinuxToFpUnknownCommand).

exception-dropped-linux-to-fp-unknown-interface-uid <uint64>

Number of packets from Linux dropped due to an invalid interface id for FPTUN (ExcpDroppedLinuxToFpUnknownIfUid).

exception-dropped-no-conntrack <uint64>

Number of ExcpDroppedNoConntrack exceptions (ExcpDroppedNoConntrack).

local-basic-exceptions <uint64>

The number of local basic exceptions (LocalBasicExceptions).

local-exception-class

Local exception class statistics.

fptun-exception-ecmp-ndisc-needed <uint64>

The number of FPTUN_EXC_ECMP_NDISC_NEEDED exceptions (FPTUN_EXC_ECMP_NDISC_NEEDED).

fptun-exception-ether-dst <uint64>

The number of FPTUN_EXC_ETHER_DST exceptions (FPTUN_EXC_ETHER_DST).

fptun-exception-fpc <uint64>

The number of FPTUN_EXC_FPC exceptions (FPTUN_EXC_FPC).

fptun-exception-icmp-needed <uint64>

The number of FPTUN_EXC_ICMP_NEEDED exceptions (FPTUN_EXC_ICMP_NEEDED).

fptun-exception-ike-needed <uint64>

The number of FPTUN_EXC_IKE_NEEDED exceptions (FPTUN_EXC_IKE_NEEDED).

fptun-exception-ip-dst <uint64>

The number of FPTUN_EXC_IP_DST exceptions (FPTUN_EXC_IP_DST).

fptun-exception-ip-pmtu <uint64>

The number of FPTUN_EXC_IP_PMTU exceptions (FPTUN_EXC_IP_PMTU).

fptun-exception-ndisc-needed <uint64>

The number of FPTUN_EXC_NDISC_NEEDED exceptions (FPTUN_EXC_NDISC_NEEDED).

fptun-exception-nf-func <uint64>

The number of FPTUN_EXC_NF_FUNC exceptions (FPTUN_EXC_NF_FUNC).

fptun-exception-replaywin <uint64>

The number of FPTUN_EXC_REPLAYWIN exceptions (FPTUN_EXC_REPLAYWIN).

fptun-exception-socket <uint64>

The number of FPTUN_EXC_SOCKET exceptions (FPTUN_EXC_SOCKET).

fptun-exception-sp-func <uint64>

The number of FPTUN_EXC_SP_FUNC exceptions (FPTUN_EXC_SP_FUNC).

fptun-exception-tap <uint64>

The number of FPTUN_EXC_TAP exceptions (FPTUN_EXC_TAP).

fptun-exception-undef <uint64>

The number of FPTUN_EXC_UNDEF exceptions (FPTUN_EXC_UNDEF).

fptun-exception-vnb-to-vnb <uint64>

The number of FPTUN_EXC_VNB_TO_VNB exceptions (FPTUN_EXC_VNB_TO_VNB).

local-exception-type

Local exception types statistics.

fptun-basic-exception <uint64>

Number of basic exception packets for Linux reception processing (FPTUN_BASIC_EXCEPT).

fptun-eth-input-exception <uint64>

Number of FPTUN exception packets for Linux ethernet input processing (FPTUN_ETH_INPUT_EXCEPT).

fptun-eth-novnb-input-exception <uint64>

Number of FPTUN exception packets for Linux processing skipping VNB (FPTUN_ETH_NOVNB_INPUT_EXCEPT).

fptun-eth-sp-output-req <uint64>

Number of FPTUN exception packets from Linux for fast path ethernet processing (FPTUN_ETH_SP_OUTPUT_REQ).

fptun-iface-input-exception <uint64>

Number of FPTUN exception packets for Linux VNB iface processing (FPTUN_IFACE_INPUT_EXCEPT).

fptun-ipsec-sp-output-req <uint64>

Number of FPTUN exception packets from Linux for fast path IPsec processing (FPTUN_IPSEC_SP_OUTPUT_REQ).

fptun-ipv4-ipsecdone-input-exception <uint64>

Number of FPTUN exception packets for Linux IPv4 input after IPsec processing (FPTUN_IPV4_IPSECDONE_INPUT_EXCEPT).

fptun-ipv4-ipsecdone-output-exception <uint64>

Number of FPTUN exception packets for Linux IPv4 output after IPsec processing (FPTUN_IPV4_IPSECDONE_OUTPUT_EXCEPT).

fptun-ipv4-natdone-input-exception <uint64>

Number of FPTUN exception packets for Linux IPv4 input after NAT processing (FPTUN_IPV4_NATDONE_INPUT_EXCEPT).

fptun-ipv4-output-exception <uint64>

Number of FPTUN exception packets for Linux IPv4 output (FPTUN_IPV4_OUTPUT_EXCEPT).

fptun-ipv4-sp-output-req <uint64>

Number of FPTUN exception packets from Linux for fast path IPv4 processing (FPTUN_IPV4_SP_OUTPUT_REQ).

fptun-ipv6-ipsecdone-input-exception <uint64>

Number of FPTUN exception packets for Linux IPv6 input after IPsec processing (FPTUN_IPV6_IPSECDONE_INPUT_EXCEPT).

fptun-ipv6-ipsecdone-output-exception <uint64>

Number of FPTUN exception packets for Linux IPv6 output after IPsec processing (FPTUN_IPV6_IPSECDONE_OUTPUT_EXCEPT).

fptun-ipv6-output-exception <uint64>

Number of FPTUN exception packets for Linux IPv6 output (FPTUN_IPV6_OUTPUT_EXCEPT).

fptun-ipv6-sp-output-req <uint64>

Number of FPTUN exception packets from Linux for fast path IPv6 processing (FPTUN_IPV6_SP_OUTPUT_REQ).

fptun-output-exception <uint64>

Number of FPTUN exception packets for Linux interface output processing (FPTUN_OUTPUT_EXCEPT).

fptun-rfps-update <uint64>

Number of FPTUN exception packets for fast path statistics processing (FPTUN_RFPS_UPDATE).

fptun-tap <uint64>

Number of FPTUN exception packets for Linux TAP (tcpdump) (FPTUN_TAP).

fptun-traffic-generator-msg <uint64>

Number of FPTUN exception packets for fast path traffic generator processing (FPTUN_TRAFFIC_GEN_MSG).

fptun-vnb2vnb-fp-to-linux-exception <uint64>

Number of FPTUN VNB exception packets for Linux VNB input processing (FPTUN_VNB2VNB_FP_TO_LINUX_EXCEPT).

fptun-vnb2vnb-linux-to-fp-exception <uint64>

Number of FPTUN exception packets for Linux VNB processing (FPTUN_VNB2VNB_LINUX_TO_FP_EXCEPT).

local-fptun-exceptions <uint64>

The number of local fptun exceptions (LocalFPTunExceptions).

qos-sched

QoS scheduler service statistics.

interface

Interface QoS statistics.

name <string>

Interface name.

index <uint64>

Interface index.

vrfid <uint64>

Vrf Id.

enqueue-drop-no-class-packets <uint64>

The number of packets that were dropped because they matched no class (enq_drop_noclass_pkts).

enqueue-drop-policer-packets <uint64>

The number of packets that were dropped by a policer (enq_drop_meter_pkts).

enqueue-drop-queue-full-packets <uint64>

The number of packets that were dropped because a queue was full (enq_drop_qfull_pkts).

enqueue-success-packets <uint64>

The number of packets that were enqueued (enq_ok_pkts).

transmit-drop-packets <uint64>

The number of packets that were dropped during transmission (xmit_drop_pkts).

transmit-success-packets <uint64>

The number of packets that were transmitted (xmit_ok_pkts).

class

Fast-path class statistics.

class-id <uint64>

Class Id.

index <uint64>

Class index.

enqueue-drop-policer-packets <uint64>

The number of packets that were dropped by a policer (enq_drop_meter_pkts).

enqueue-drop-queue-full-packets <uint64>

The number of packets that were dropped because a queue was full (enq_drop_qfull_pkts).

enqueue-success-packets <uint64>

The number of packets that were enqueued (enq_ok_pkts).

transmit-drop-packets <uint64>

The number of packets that were dropped during transmission (xmit_drop_pkts).

transmit-success-packets <uint64>

The number of packets that were transmitted (xmit_ok_pkts).

qos-rate-limit

QoS rate limit service statistics.

green

Green statistics.

packets <uint64>

Number of green packets.

bytes <uint64>

Number of green bytes.

yellow

Yellow statistics.

packets <uint64>

Number of yellow packets.

bytes <uint64>

Number of yellow bytes.

red

Red statistics.

packets <uint64>

Number of red packets.

bytes <uint64>

Number of red bytes.

pppoe

PPPoE service statistics.

exc-in-unknown-channel <uint64>

Number of input packets sent in exception due to an unknown channel (PppoeExcInUnknownChannel).

exc-out-unknown-ethernet <uint64>

Number of output packets sent in exception due to an unknown ethernet interface (PppoeExcOutUnknownEthernet).

dropped-in-malformed-ppp-frame <uint64>

Number of input packets dropped due to a malformed PPP frame (PppoeDroppedInMalformedPppFrame).

dropped-out-prepend-failure <uint64>

Number of output packets dropped due to an mbuf prepend failure (PppoeDroppedOutPrependFailure).

dropped-in-operative <uint64>

Number of input packets dropped due to an inoperative interface (PppoeDroppedInOperative).

dropped-out-operative <uint64>

Number of output packets dropped due to an inoperative interface (PppoeDroppedOutOperative).

2.2.40. show ike

Note

requires a IPsec Application License.

vsr> show ike [vrf VRF] counters [vpn <string>] ike-sa [details] [with-keys] \
...            [vpn <string>] [remote-ip <string>] [remote-id <string>] [state STATE] \
...            ike-sa-count [state STATE] ipsec-sa-count [fastpath] ipsec-sa \
...            [source-ip <string>] [destination-ip <string>] [protocol PROTOCOL] \
...            [spi SPI] [mode MODE] [svti-id SVTI-ID] [with-keys] [fastpath] \
...            ipsec-sp [direction DIRECTION] [svti-id SVTI-ID] [fastpath]

Show filtered SA state or general information.

Input Parameters

vrf VRF

Show objects in selected netns only.

VRF

The vrf name.

counters

Show IKE counters.

vpn <string>

Show counters for selected VPN.

ike-sa

Show SA state.

details

Show detailed output.

with-keys

Show detailed output with IKE and IPsec keys.

vpn <string>

Show SA for selected VPN.

remote-ip <string>

Show SAs to selected remote-ip.

remote-id <string>

Show SAs to selected remote-id.

state STATE

Show SAs in selected state.

STATE

IKE SA state type.

ike-sa-count

Show SA count.

state STATE

Only count SAs in selected state.

STATE

IKE SA state type.

ipsec-sa-count

Show IPsec SA count (default is from Linux).

fastpath

Show IPsec SA count from Fast-Path.

ipsec-sa

Show IPsec SAs (default is from Linux).

source-ip <string>

Show SAs with specified source IP.

destination-ip <string>

Show SAs with specified destination IP.

protocol PROTOCOL

Show SAs with specified IPsec protocol.

PROTOCOL

IPsec protocol type.

spi SPI

Show SAs with specified Security Parameters Index.

SPI

Integer (uint32) encoded in decimal or hexadecimal.

mode MODE

Show SAs with specified IPsec mode.

MODE

IPsec mode.

svti-id SVTI-ID

Show SAs with the specified SVTI ID.

SVTI-ID values

Description

<uint32-dec-hex-t>

Integer (uint32) encoded in decimal or hexadecimal.

any

Show SVTI SAs with any SVTI ID.

none

Show non-SVTI SAs.

with-keys

Show IPsec keys.

fastpath

Show IPsec SAs from Fast-Path.

ipsec-sp

Show IPsec SPs (default is from Linux).

direction DIRECTION

Show SPs in the specified direction.

DIRECTION values

Description

out

Outbound SPs.

in

Inbound SPs.

forward

Forward SPs.

svti-id SVTI-ID

Show SPs with the specified SVTI ID.

SVTI-ID values

Description

<uint32-dec-hex-t>

Integer (uint32) encoded in decimal or hexadecimal.

any

Show SVTI SPs with any SVTI ID.

none

Show non-SVTI SPs.

fastpath

Show IPsec SPs from Fast-Path.

2.2.41. show ha-neighbor

Note

requires a Product License.

vsr> show ha-neighbor [vrf VRF] state

Show high-availability neighbor state.

Input Parameters

vrf VRF

Specify the VRF.

VRF

The vrf name.

state (mandatory)

Show high-availability neighbor state.

2.2.42. show ha-conntrack

Note

requires a Product License.

vsr> show ha-conntrack [vrf VRF] [state] [cache CACHE]

Show high-availability conntrack state.

Input Parameters

vrf VRF

Specify the VRF.

VRF

The vrf name.

state

Show high-availability conntrack state.

cache CACHE

Display cache content.

CACHE values

Description

internal

Display content of the internal cache.

external

Display content of the external cache.

2.2.43. show vxlan fdb

vsr> show vxlan fdb [vrf <string>] [name NAME]

Show VXLAN FDB information.

Input Parameters

vrf <string>

VRF to look into.

name NAME

Show FDB per interface.

NAME

An interface name.

Output Data

vxlan

VXLAN interface list.

name NAME

VXLAN interface name.

NAME

An interface name.

ipv4

IPv4 FDB operational state data.

fdb

IPv4 FDB operational state data.

link-layer-address LINK-LAYER-ADDRESS

The link-layer address of the FDB node.

LINK-LAYER-ADDRESS

An IEEE 802 MAC address.

ip IP (mandatory)

The IP address of the destination VXLAN tunnel endpoint where the Ethernet MAC ADDRESS resides.

IP

An IPv4 address.

link-interface LINK-INTERFACE

The outgoing interface for the VXLAN device driver to reach the remote VXLAN tunnel endpoint.

LINK-INTERFACE

An interface name.

port PORT

The UDP destination PORT number to use to connect to the remote VXLAN tunnel endpoint (default: the VXLAN dst).

PORT

A 16-bit port number used by a transport protocol such as TCP or UDP.

vni VNI

The VXLAN VNI Network Identifier (or VXLAN Segment ID) to use to connect to the remote VXLAN tunnel endpoint (default: the VXLAN vni).

VNI

Type definition representing VXLAN Segment ID / VXLAN Network Identifier value.

state STATE

FDB operational state.

STATE

FDB operational state.

ipv6

IPv4 FDB operational state data.

fdb

IPv6 FDB operational state data.

link-layer-address LINK-LAYER-ADDRESS

The link-layer address of the FDB node.

LINK-LAYER-ADDRESS

An IEEE 802 MAC address.

ip IP (mandatory)

The IP address of the destination VXLAN tunnel endpoint where the Ethernet MAC ADDRESS resides.

IP

An IPv6 address.

link-interface LINK-INTERFACE

The outgoing interface for the VXLAN device driver to reach the remote VXLAN tunnel endpoint.

LINK-INTERFACE

An interface name.

port PORT

The UDP destination PORT number to use to connect to the remote VXLAN tunnel endpoint (default: the VXLAN dst).

PORT

A 16-bit port number used by a transport protocol such as TCP or UDP.

vni VNI

The VXLAN VNI Network Identifier (or VXLAN Segment ID) to use to connect to the remote VXLAN tunnel endpoint (default: the VXLAN vni).

VNI

Type definition representing VXLAN Segment ID / VXLAN Network Identifier value.

state STATE

FDB operational state.

STATE

FDB operational state.

2.2.44. show bridge fdb

vsr> show bridge fdb [vrf <string>] [name NAME]

Show bridge FDB information.

Input Parameters

vrf <string>

The VRF to look into.

name NAME

The name of the interface for which the FDB will be displayed.

NAME

An interface name.

Output Data

bridge

Bridge interface list.

name NAME

The bridge interface name.

NAME

An interface name.

fdb

FDB operational state data.

link-layer-address LINK-LAYER-ADDRESS

The link-layer address of the FDB node.

LINK-LAYER-ADDRESS

An IEEE 802 MAC address.

link-interface LINK-INTERFACE

The slave interface of this bridge.

LINK-INTERFACE

An interface name.

state STATE

The FDB operational state.

STATE

FDB operational state.

2.2.45. show dns-server

Note

requires a Product License.

vsr> show dns-server [vrf <string>] [l3vrf <string>]

Show DNS server information.

Input Parameters

vrf <string>

VRF to look into.

l3vrf <string>

Specify the l3vrf.

Output Data

cache

DNS server cache operational state data.

size <uint32>

DNS server cache size in bytes.

inserted <uint32>

Number of records that have been inserted into the cache.

query

DNS server query operation state data.

total <uint32>

Number of queries.

forwarded <uint32>

Number of forwarded queries.

local <uint32>

Number of queries answered locally.

tls <uint32>

Number of TLS queries.

https <uint32>

Number of HTTPS queries.

unwanted <uint32>

Replies that were unwanted or unsolicited. Could have been random traffic, delayed duplicates, very late answers, or could be spoofing attempts. Some low level of late answers and delayed duplicates are to be expected with the UDP protocol. Very high values could indicate a threat (spoofing).

2.2.46. show certificate list

Note

requires a Product License.

vsr> show certificate list 

Show X509 certificates list.

2.2.47. show certificate

vsr> show certificate name NAME [base64]

Show X509 certificate details.

Input Parameters

name NAME (mandatory)

The name of the certificate.

NAME

Certificate name.

base64

Show the certificate in base64 format.

2.2.48. show certificate key

Note

requires a Product License.

vsr> show certificate key name NAME

Show X509 certificate private key.

Input Parameters

name NAME (mandatory)

The name of the certificate.

NAME

Certificate name.

2.2.49. show commit

vsr> show commit 

Show committed configurations.

Output Data

commit-history

Commit information.

id <uint32>

ID of the commit in the list.

date DATE

Date and time of the commit.

DATE

The date-and-time type is a profile of the ISO 8601 standard for representation of dates and times using the Gregorian calendar. The profile is defined by the date-time production in Section 5.6 of RFC 3339. The date-and-time type is compatible with the dateTime XML schema type with the following notable exceptions: (a) The date-and-time type does not allow negative years. (b) The date-and-time time-offset -00:00 indicates an unknown time zone (see RFC 3339) while -00:00 and +00:00 and Z all represent the same time zone in dateTime. (c) The canonical format (see below) of data-and-time values differs from the canonical format used by the dateTime XML schema type, which requires all times to be in UTC using the time-offset ‘Z’. This type is not equivalent to the DateAndTime textual convention of the SMIv2 since RFC 3339 uses a different separator between full-date and full-time and provides higher resolution of time-secfrac. The canonical format for date-and-time values with a known time zone uses a numeric time zone offset that is calculated using the device’s configured known offset to UTC time. A change of the device’s offset to UTC time will cause date-and-time values to change accordingly. Such changes might happen periodically in case a server follows automatically daylight saving time (DST) time zone offset changes. The canonical format for date-and-time values with an unknown time zone (usually referring to the notion of local time) uses the time-offset -00:00.

user <string>

User who make the commit.

description <string>

The description of the commit.