loopback¶

The list of loopback interfaces on the device.

vsr running config# vrf <vrf> interface loopback <loopback>

<loopback>

An interface name.

mtu¶

Set the max transmission unit size in octets. IPv6 requires an MTU of 1280 octets or greater.

vsr running config# vrf <vrf> interface loopback <loopback>
vsr running loopback <loopback># mtu <uint32>

promiscuous¶

Set promiscuous mode.

vsr running config# vrf <vrf> interface loopback <loopback>
vsr running loopback <loopback># promiscuous true|false

enabled (pushed)¶

The desired (administrative) state of the interface.

vsr running config# vrf <vrf> interface loopback <loopback>
vsr running loopback <loopback># enabled true|false

Default value: true

description¶

A textual description of the interface.

vsr running config# vrf <vrf> interface loopback <loopback>
vsr running loopback <loopback># description <string>

ifindex (state only)¶

System assigned number for each interface. Corresponds to ifIndex object in SNMP Interface MIB.

vsr> show state vrf <vrf> interface loopback <loopback> ifindex

admin-status (state only)¶

The desired state of the interface. In RFC 7223 this leaf has the same read semantics as ifAdminStatus. Here, it reflects the administrative state as set by enabling or disabling the interface.

vsr> show state vrf <vrf> interface loopback <loopback> admin-status

oper-status (state only) (pushed)¶

The current operational state of the interface. This leaf has the same semantics as ifOperStatus.

vsr> show state vrf <vrf> interface loopback <loopback> oper-status

last-change (state only)¶

unit: nanoseconds

This timestamp indicates the time of the last state change of the interface (e.g., up-to-down transition). This corresponds to the ifLastChange object in the standard interface MIB. The value is the timestamp in nanoseconds relative to the Unix Epoch (Jan 1, 1970 00:00:00 UTC).

vsr> show state vrf <vrf> interface loopback <loopback> last-change

ddos-protection (deprecated)¶

Note

requires a DDoS protection License.

Configuration for anti DDoS protection.

vsr running config# vrf <vrf> interface loopback <loopback> ddos-protection

enabled (deprecated)¶

Enable anti-DDoS Protection.

vsr running config# vrf <vrf> interface loopback <loopback> ddos-protection
vsr running ddos-protection# enabled true|false

ipv4¶

Parameters for the IPv4 address family.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4

enabled¶

Controls whether IPv4 is enabled or disabled on this interface. When IPv4 is enabled, this interface is connected to an IPv4 stack, and the interface can send and receive IPv4 packets.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4
vsr running ipv4# enabled true|false

Default value: true

address¶

The list of configured IPv4 addresses on the interface.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4
vsr running ipv4# address <address> peer PEER

`<address>` values	Description
`<ipv4-address>`	An IPv4 address.
`<masked-ipv4-address>`	A masked IPv4 address: address and prefix of that subnet.

peer¶

The IPv4 address of the remote endpoint for point to point interfaces.

peer PEER

PEER

An IPv4 address.

origin (state only)¶

The origin of this address, e.g., statically configured, assigned by DHCP, etc..

vsr> show state vrf <vrf> interface loopback <loopback> ipv4 address <address> origin

neighbor¶

A list of mappings from IPv4 addresses to link-layer addresses. Entries in this list are used as static entries in the ARP Cache.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4
vsr running ipv4# neighbor <neighbor> link-layer-address LINK-LAYER-ADDRESS

<neighbor>

An IPv4 address.

link-layer-address (mandatory)¶

The link-layer address of the neighbor node.

link-layer-address LINK-LAYER-ADDRESS

LINK-LAYER-ADDRESS

An IEEE 802 MAC address.

state (state only)¶

The state of this neighbor entry.

vsr> show state vrf <vrf> interface loopback <loopback> ipv4 neighbor <neighbor> state

dhcp¶

DHCP client configuration.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp

enabled¶

Enable or disable DHCP.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# enabled true|false

Default value: true

timeout¶

Time before deciding that it’s not going to be able to contact a server.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# timeout <uint32>

Default value: 60

retry¶

Time before trying again to contact a DHCP server.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# retry <uint32>

Default value: 300

select-timeout¶

Time at which the client stops waiting for other offers from servers.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# select-timeout <uint32>

Default value: 0

reboot¶

Time after trying to reacquire its old address before trying to discover a new address.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# reboot <uint32>

Default value: 10

initial-interval¶

Time between the first attempt to reach a server and the second attempt to reach a server.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# initial-interval <uint32>

Default value: 10

dhcp-lease-time¶

Requested lease time.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# dhcp-lease-time <uint32>

Default value: 7200

dhcp-client-identifier-ascii¶

DHCP client identifier (ASCII).

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# dhcp-client-identifier-ascii <string>

dhcp-client-identifier-hexa¶

DHCP client identifier (hexadecimal).

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# dhcp-client-identifier-hexa <string>

host-name¶

DHCP client name.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# host-name <string>

request¶

DHCP requests.

vsr running config# vrf <vrf> interface loopback <loopback> ipv4 dhcp
vsr running dhcp# request REQUEST

`REQUEST` values	Description
`subnet-mask`	Client’s subnet mask.
`broadcast-address`	Broadcast address in use on the client’s subnet.
`time-offset`	Offset of the client’s subnet in seconds from UTC.
`routers`	List of IP addresses for routers on the client’s subnet.
`domain-name`	Domain name used when resolving hostnames with DNS.
`domain-search`	Domain search list used when resolving hostnames with DNS.
`domain-name-servers`	List of DNS name servers available to the client.
`host-name`	Name of the client.
`nis-domain`	Name of the client’s NIS (Sun Network Information Services) domain.
`nis-servers`	List of IP addresses indicating NIS servers available to the client.
`ntp-servers`	List of IP addresses indicating NTP servers available to the client.
`interface-mtu`	MTU to use on this interface.
`netbios-name-servers`	List of RFC 1001/1002 NBNS name servers.
`netbios-scope`	NetBIOS over TCP/IP scope parameter for the client.

Default value: subnet-mask

broadcast-address

time-offset

routers

domain-name

domain-search

domain-name-servers

host-name

nis-domain

nis-servers

ntp-servers

interface-mtu

current-lease (state only)¶

Current lease.

fixed-address (state only)¶

The IPv4 address on the interface.

vsr> show state vrf <vrf> interface loopback <loopback> ipv4 dhcp current-lease fixed-address

renew (state only)¶

Time at which the client should begin trying to contact its server to renew its lease.

vsr> show state vrf <vrf> interface loopback <loopback> ipv4 dhcp current-lease renew

rebind (state only)¶

Time at which the client should begin to try to contact any dhcp server to renew its lease.

vsr> show state vrf <vrf> interface loopback <loopback> ipv4 dhcp current-lease rebind

expire (state only)¶

Time at which the client must stop using a lease if it has not been able to renew it.

vsr> show state vrf <vrf> interface loopback <loopback> ipv4 dhcp current-lease expire

ipv6¶

Parameters for the IPv6 address family.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6

enabled¶

Controls whether IPv6 is enabled or disabled on this interface. When IPv6 is enabled, this interface is connected to an IPv6 stack, and the interface can send and receive IPv6 packets.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6
vsr running ipv6# enabled true|false

Default value: true

address¶

The list of configured IPv6 addresses on the interface.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6
vsr running ipv6# address <address> peer PEER

`<address>` values	Description
`<ipv6-address>`	An IPv6 address.
`<masked-ipv6-address>`	A masked IPv6 address: address and prefix of that subnet.

peer¶

The IPv6 address of the remote endpoint for point to point interfaces.

peer PEER

PEER

An IPv6 address.

origin (state only)¶

The origin of this address, e.g., static, dhcp, etc.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 address <address> origin

status (state only)¶

The status of an address. Most of the states correspond to states from the IPv6 Stateless Address Autoconfiguration protocol.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 address <address> status

neighbor¶

List of IPv6 neighbors.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6
vsr running ipv6# neighbor <neighbor> link-layer-address LINK-LAYER-ADDRESS

<neighbor>

An IPv6 address.

link-layer-address (mandatory)¶

The link-layer address of the neighbor node.

link-layer-address LINK-LAYER-ADDRESS

LINK-LAYER-ADDRESS

An IEEE 802 MAC address.

router (state only)¶

Indicates that the neighbor node acts as a router.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 neighbor <neighbor> router

state (state only)¶

The state of this neighbor entry.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 neighbor <neighbor> state

dhcp¶

DHCPv6 client configuration.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp

enabled¶

Enable or disable DHCPv6.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# enabled true|false

Default value: true

timeout¶

Time before deciding that it’s not going to be able to contact a server.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# timeout <uint32>

Default value: 60

retry¶

Time before trying again to contact a DHCPv6 server.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# retry <uint32>

Default value: 300

select-timeout¶

Time at which the client stops waiting for other offers from servers.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# select-timeout <uint32>

Default value: 0

reboot¶

Time after trying to reacquire its old address before trying to discover a new address.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# reboot <uint32>

Default value: 10

initial-interval¶

Time between the first attempt to reach a server and the second attempt to reach a server.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# initial-interval <uint32>

Default value: 10

dhcp-client-identifier-ascii¶

DHCPv6 client identifier (ASCII).

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# dhcp-client-identifier-ascii <string>

dhcp-client-identifier-hexa¶

DHCPv6 client identifier (hexadecimal).

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# dhcp-client-identifier-hexa <string>

host-name¶

DHCPv6 client name.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# host-name <string>

prefix-delegation¶

Enable or disable prefix delegation.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# prefix-delegation true|false

Default value: false

request¶

DHCPv6 requests.

vsr running config# vrf <vrf> interface loopback <loopback> ipv6 dhcp
vsr running dhcp# request REQUEST

`REQUEST` values	Description
`name-servers`	Instruct clients about locally available recursive DNS servers.
`domain-search`	Specifies the client’s domain search path to be applied to recursive DNS queries.
`fqdn`	Specifies the client’s fully qualified domain name.
`unicast`	The unicast option is provided by DHCPv6 servers which are willing (or prefer) to receive Renew packets from their clients by exchanging UDP unicasts with them.
`sntp-servers`	Specifies a list of local SNTP servers available for the client to synchronize their clocks.

Default value: name-servers

domain-search

current-lease (state only)¶

Current lease.

ia-address (state only)¶

The IPv6 address on the interface.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 dhcp current-lease ia-address

renew (state only)¶

Time at which the client should begin trying to contact its server to renew its lease.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 dhcp current-lease renew

rebind (state only)¶

Time at which the client should begin to try to contact any dhcp server to renew its lease.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 dhcp current-lease rebind

start (state only)¶

unit: seconds

Time at which the IPv6 address has been assigned (in seconds since EPOCH).

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 dhcp current-lease start

preferred-lifetime (state only)¶

unit: seconds

Preferred lifetime of the lease.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 dhcp current-lease preferred-lifetime

max-lifetime (state only)¶

unit: seconds

Maximum lifetime of the lease.

vsr> show state vrf <vrf> interface loopback <loopback> ipv6 dhcp current-lease max-lifetime

network-stack¶

Network stack parameters for this interface.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack

ipv4¶

IPv4 parameters.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4

send-redirects¶

Send ICMP redirect if host is on the same network than gateway.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4
vsr running ipv4# send-redirects true|false

accept-redirects¶

Accept redirect when acting as a host. It is always disabled when acting as a router. Must be activated at vrf or system level too to be activated.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4
vsr running ipv4# accept-redirects true|false

accept-source-route¶

Accept packets with source route option. Must be activated at vrf or system level too to be activated.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4
vsr running ipv4# accept-source-route true|false

arp-announce¶

Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface. Increasing the restriction level gives more chance for receiving answer from the resolved target while decreasing the level announces more valid sender’s information.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4
vsr running ipv4# arp-announce ARP-ANNOUNCE

`ARP-ANNOUNCE` values	Description
`any`	Use any local address, configured on any interface.
`avoid-not-in-subnet`	Try to avoid local addresses that are not in the target’s subnet for this interface. This mode is useful when target hosts reachable via this interface require the source IP address in ARP requests to be part of their logical network configured on the receiving interface. When we generate the request we will check all our subnets that include the target IP and will preserve the source address if it is from such subnet. If there is no such subnet we select source address according to the rules for level 2, ‘best-local’.
`best-local`	Always use the best local address for this target. In this mode we ignore the source address in the IP packet and try to select local address that we prefer for talks with the target host. Such local address is selected by looking for primary IP addresses on all our subnets on the outgoing interface that include the target IP address. If no suitable local address is found we select the first local address we have on the outgoing interface or on all other interfaces, with the hope we will receive reply for our request and even sometimes no matter the source IP address we announce.

arp-filter¶

Allows to have multiple network interfaces on the same subnet, and have the ARPs for each interface be answered based on whether or not the kernel would route a packet from the ARP’d IP out that interface (therefore you must use source based routing for this to work). In other words it allows control of which cards (usually 1) will respond to an arp request.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4
vsr running ipv4# arp-filter true|false

arp-ignore¶

Define different modes for sending replies in response to received ARP requests that resolve local target IP addresses.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4
vsr running ipv4# arp-ignore ARP-IGNORE

`ARP-IGNORE` values	Description
`any`	Reply for any local target IP address, configured on any interface.
`check-interface`	Reply only if the target IP address is local address configured on the incoming interface.
`check-interface-and-subnet`	Reply only if the target IP address is local address configured on the incoming interface and both with the sender’s IP address are part from same subnet on this interface.
`ignore-scope`	Do not reply for local addresses configured with scope host, only resolutions for global and link addresses are replied.
`ignore-all`	Do not reply for all local addresses.

arp-proxy¶

Enable ARP proxy.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4
vsr running ipv4# arp-proxy true|false

log-invalid-addresses¶

Log packets with impossible addresses.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv4
vsr running ipv4# log-invalid-addresses true|false

ipv6¶

IPv6 parameters.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6

autoconfiguration¶

Autoconfigure addresses using Prefix Information in Router Advertisements.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6
vsr running ipv6# autoconfiguration true|false

accept-duplicate-address-detection¶

Accept Duplicate Address Detection (DAD).

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6
vsr running ipv6# accept-duplicate-address-detection ACCEPT-DUPLICATE-ADDRESS-DETECTION

`ACCEPT-DUPLICATE-ADDRESS-DETECTION` values	Description
`never`	Disable DAD.
`always`	Enable DAD.
`disable-ipv6-on-dad-fail`	Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found.

accept-router-advert¶

Accept Router Advertisements.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6
vsr running ipv6# accept-router-advert ACCEPT-ROUTER-ADVERT

`ACCEPT-ROUTER-ADVERT` values	Description
`never`	Do not accept Router Advertisements.
`norouter-mode`	Accept Router Advertisements if forwarding is disabled.
`always`	Accept Router Advertisements even if forwarding is enabled.

accept-redirects¶

Accept redirect when acting as a host. It is always disabled when acting as a router.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6
vsr running ipv6# accept-redirects true|false

accept-segment-routing¶

Accept Segment Routing IPv6 packets.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6
vsr running ipv6# accept-segment-routing true|false

accept-source-route¶

Accept packets with source route option.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6
vsr running ipv6# accept-source-route true|false

router-solicitations¶

Number of Router Solicitations to send until assuming no routers are present.

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6
vsr running ipv6# router-solicitations <-1-8192>

use-temporary-addresses¶

Preference for Privacy Extensions (RFC4941). Not applied to point-to- point and loopback devices (always 0).

vsr running config# vrf <vrf> interface loopback <loopback> network-stack ipv6
vsr running ipv6# use-temporary-addresses USE-TEMPORARY-ADDRESSES

`USE-TEMPORARY-ADDRESSES` values	Description
`never`	Disable Privacy Extensions, i.e. use the public address, subnet prefix/interface id, where interface id is always the same.
`prefer-public-addresses`	Enable Privacy Extensions, but prefer public addresses over temporary addresses.
`always`	Enable Privacy Extensions and prefer temporary addresses over public addresses.

ethernet¶

Top-level container for Ethernet configuration.

vsr running config# vrf <vrf> interface loopback <loopback> ethernet

mac-address (pushed)¶

Assigns a MAC address to the Ethernet interface. If not specified, the corresponding operational state leaf is expected to show the system-assigned MAC address.

vsr running config# vrf <vrf> interface loopback <loopback> ethernet
vsr running ethernet# mac-address MAC-ADDRESS

MAC-ADDRESS

An IEEE 802 unicast MAC address i.e. the second digit is an even number. Moreover the mac address must not be 00:00:00:00:00:00.

counters (state only)¶

A collection of interface-related statistics objects.

in-octets (state only)¶

The total number of octets received on the interface, including framing characters. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ‘last-clear’.

vsr> show state vrf <vrf> interface loopback <loopback> counters in-octets

in-unicast-pkts (state only)¶

The number of packets, delivered by this sub-layer to a higher (sub-)layer, that were not addressed to a multicast or broadcast address at this sub-layer. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ‘last-clear’.

vsr> show state vrf <vrf> interface loopback <loopback> counters in-unicast-pkts

in-discards (state only)¶

The number of inbound packets that were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. One possible reason for discarding such a packet could be to free up buffer space. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ‘last-clear’.

vsr> show state vrf <vrf> interface loopback <loopback> counters in-discards

in-errors (state only)¶

For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher- layer protocol. For character- oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re- initialization of the management system, and at other times as indicated by the value of ‘last-clear’.

vsr> show state vrf <vrf> interface loopback <loopback> counters in-errors

out-octets (state only)¶

The total number of octets transmitted out of the interface, including framing characters. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ‘last-clear’.

vsr> show state vrf <vrf> interface loopback <loopback> counters out-octets

out-unicast-pkts (state only)¶

The total number of packets that higher-level protocols requested be transmitted, and that were not addressed to a multicast or broadcast address at this sub-layer, including those that were discarded or not sent. Discontinuities in the value of this counter can occur at re- initialization of the management system, and at other times as indicated by the value of ‘last-clear’.

vsr> show state vrf <vrf> interface loopback <loopback> counters out-unicast-pkts

out-discards (state only)¶

The number of outbound packets that were chosen to be discarded even though no errors had been detected to prevent their being transmitted. One possible reason for discarding such a packet could be to free up buffer space. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ‘last-clear’.

vsr> show state vrf <vrf> interface loopback <loopback> counters out-discards

out-errors (state only)¶

For packet-oriented interfaces, the number of outbound packets that could not be transmitted because of errors. For character-oriented or fixed-length interfaces, the number of outbound transmission units that could not be transmitted because of errors. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ‘last-clear’.

vsr> show state vrf <vrf> interface loopback <loopback> counters out-errors