New Commands

The following configuration commands are added.

• [ no ] area <area-id-ip> authentication { disable | ipsec spi <spi_id> { md5 <akey> | sha1 <akey> } } }

• [ no ] authentication { disable | ipsec spi <spi_id> { md5 <akey> | sha1 <akey> } } }

• [ no ] authentication { ipsec spi <spi_id> { md5 <akey> | sha1 <akey> } } }

• clear aaa user blocked { username <s0> | all }

• clear ip igmp snooping mac-oifs { <mac-address> | <all> } { [ interface <if-name> ] { vlan { <vlan> | all } | bridge-domain { <bdid> | all } } }

• [ no ] df-election time <sec>

• [ no ] extension-header <hdr_op_type>

• [ no ] hardware access-list tcam label egr-l2-qos 6

• [ no ] hardware access-list tcam label ing-ifacl 6

• [ no ] hardware N2332TQ cut-through-min-threshold <val>

• [ no ] hardware N2348TQ cut-through-min-threshold <val>

• [ no ] hardware N2348TQ-E cut-through-min-threshold <val>

• [ no ] hardware N2348UPQ cut-through-min-threshold <val>

• [ no ] hardware profile buffer info syslog-interval timer <sec>

• [ no ] hardware profile multicast nlb Port-channel

• [ no ] hardware profile sub-interface flex-stats

• [ no ] ip pim spt-switch-graceful

• license dcnm-lan { enable | disable }

• license dcnm-san { enable | disable }

• [ no ] link max-bringup timer <max_bringup_timer_val_max>

• [ no ] link-sync group <group_id>

• [ no ] logging secure ocsp strict

• [ no ] ospfv3 authentication { disable | ipsec spi <spi_id> { md5 <akey> | sha1 <akey> } }

• [ no ] prefix-priority high

• [ no ] ptp forward-version1

• [ no ] service exclude-bootconfig

• [ no ] snmp-server local use-vrf <vrf_name>

• [ no ] split-horizon per-site

• [ no ] tunnel-encryption icv

Changed Commands

The following configuration commands are modified.

• OLD: [ no | default ] bfd

• NEW: [ no | default ] bfd [ multihop | singlehop ]

• OLD: clear ip igmp interface statistics [ <interface> ]

• NEW: clear ip igmp interface statistics [ vrf { <vrf-name> | <vrf-known-name> | all } | <interface> ]

• OLD: { { clear ip mbgp [ vrf { <vrf-name> | <vrf-known-name> | ALL_VRFS_012345678901234 } ] { <neighbor-id> | * | <asn> | <prefix-id> peer-template <peer-template-name> } [ soft [ in | out ] | dampened-paths | flap-statistics | no-notify ] } | { clear ip bgp [ vrf { <vrf-name> | <vrf-known-name> | ALL_VRFS_012345678901234 } ] { <neighbor-id> | * | <asn> | <prefix-id> | peer-template <peer-template-name> } [ soft [ in | out ] | dampened-paths | flap-statistics | no-notify | { ipv4 { unicast | multicast } | { vpnv4 | vpnv6 } unicast | all } { soft [ in | out ] | dampened-paths | flap-statistics | no-notify } ] } | { clear bgp [ vrf { <vrf-name> | <vrf-known-name> | ALL_VRFS_012345678901234 } ] { ipv4 { unicast | multicast | mvpn | labeled-unicast } | ipv6 { unicast | multicast | mvpn | labeled-unicast } | { vpnv4 | vpnv6 } unicast | l2vpn vpls | l2vpn evpn | link-state | all } { <neighbor-id> | <ipv6-neighbor-id> | * | <asn> | peer-template <peer-template-name> | <prefix-id> | <ipv6-prefix-id> } [ soft [ in | out ] | dampened-paths | flap-statistics | no-notify ] } } [ vrf { <vrf-name> | <vrf-known-name> | ALL_VRFS_012345678901234 } ]

• NEW: { { clear ip mbgp [ vrf { <vrf-name> | <vrf-known-name> | ALL_VRFS_012345678901234 } ] { <neighbor-id> | * | <asn> | <prefix-id> peer-template <peer-template-name> } [ soft [ in | out ] | dampened-paths | flap-statistics | no-notify ] } | { clear ip bgp [ vrf { <vrf-name> | <vrf-known-name> | ALL_VRFS_012345678901234 } ] { <neighbor-id> | * | <asn> | <prefix-id> | <neighbor-interface> | peer-template <peer-template-name> } [ soft [ in | out ] | dampened-paths | flap-statistics | no-notify | { ipv4 { unicast | multicast } | { vpnv4 | vpnv6 } unicast | all } { soft [ in | out ] | dampened-paths | flap-statistics | no-notify } ] } | { clear bgp [ vrf { <vrf-name> | <vrf-known-name> | ALL_VRFS_012345678901234 } ] { ipv4 { unicast | multicast | mvpn | labeled-unicast } | ipv6 { unicast | multicast | mvpn | labeled-unicast } | { vpnv4 | vpnv6 } unicast | l2vpn vpls | l2vpn evpn | link-state | all } { <neighbor-id> | <ipv6-neighbor-id> | * | <asn> | peer-template <peer-template-name> | <neighbor-interface> | <prefix-id> | <ipv6-prefix-id> } [ soft [ in | out ] | dampened-paths | flap-statistics | no-notify ] } } [ vrf { <vrf-name> | <vrf-known-name> | ALL_VRFS_012345678901234 } ]

• OLD: clear ipv6 mld interface statistics [ <interface> ]

• NEW: clear ipv6 mld interface statistics [ vrf { <vrf-name> | <vrf-known-name> | all } | <interface> ]

• OLD: configure replace { <uri_local> | <uri_remote> [ source-interface <intf> | vrf <vrf-known-name> ] } [ [ [ verbose ] [ debug | stop-at-first-failure | best-effort ] [ commit-timeout <time> ] [ non-interactive ] [ verify-and-commit ] ] | [ show-patch | verify-only ] ]

• NEW: configure replace { <uri_local> | <uri_remote> [ source-interface <intf> | vrf <vrf-known-name> ] } [ [ [ verbose ] [ debug | stop-at-first-failure | best-effort ] [ commit-timeout <time> ] [ non-interactive ] [ verify-and-commit ] ] + | [ show-patch | verify-only ] | [ [ verbose ] [ on-failure reload [ save-startup-cfg ] ] [ commit-timeout <time> ] [ non-interactive ] [ verify-and-commit ] ] + ]

• OLD: install activate <patch> + [ forced ]

• NEW: install activate <patch> + [ no-immediate-reload ] [ forced ]

• OLD: install add { <package-name> | <uri1> } [ vrf <vrf-known-name> ] [ { gpg-key | [ activate [ upgrade | downgrade ] ] [ forced ] } ]

• NEW: install add { <package-name> | <uri1> } [ vrf <vrf-known-name> ] [ { gpg-key | [ activate [ upgrade | downgrade | no-immediate-reload ] ] [ forced ] } ]

• OLD: install deactivate <patch> + [ forced ]

• NEW: install deactivate <patch> + [ no-immediate-reload ] [ forced ]

• OLD: install { all [ nxos <uri> | kickstart <uri1> | system <uri3> | package <uri4> | serial | ignore-script-errors ] + [ force ] [ non-disruptive | no-reload | noswitchover ] [ bios | no-save ] [ bios-force ] [ non-interruptive ] [ compact ] [ override ] | force-all [ nxos <uri> | serial | ignore-script-errors ] + [ non-disruptive ] [ force ] }

• NEW: install { all [ nxos <uri> | kickstart <uri1> | system <uri3> | package <uri4> | epld <uri5> | serial | ignore-script-errors ] + [ force ] [ non-disruptive | no-reload | noswitchover ] [ bios | no-save ] [ bios-force ] [ non-interruptive ] [ compact ] [ override ] | force-all [ nxos <uri> | serial | ignore-script-errors ] + [ non-disruptive ] [ force ] }

• OLD: { username <s0> [ password { 0 <s2> | 5 <s3> | <s4> } ] [ expire <s5> [ past ] ] [ role <s6> ] } | { username <s0> [ password { 0 <s2> | 5 <s3> | <s4> } ] [ role <s6> ] [ expire <s5> [ past ] ] } | { username <s0> [ expire <s5> [ past ] ] [ password { 0 <s2> | 5 <s3> | <s4> } ] [ role <s6> ] } | { username <s0> [ expire <s5> [ past ] ] [ role <s6> ] [ password { 0 <s2> | 5 <s3> | <s4> } ] } | { username <s0> [ role <s6> ] [ password { 0 <s2> | 5 <s3> | <s4> } ] [ expire <s5> [ past ] ] } | { username <s0> [ role <s6> ] [ expire <s5> [ past ] ] [ password { 0 <s2> | 5 <s3> | <s4> } ] } | { no username <s7> [ role <s8> ] }

• NEW: { username <s0> [ password { 0 <s2> | 5 <s3> | <s4> } ] [ expire <s5> [ past ] ] [ role <s6> ] } | { username <s0> [ password { 0 <s2> | 5 <s3> | <s4> } ] [ role <s6> ] [ expire <s5> [ past ] ] } | { username <s0> [ expire <s5> [ past ] ] [ password { 0 <s2> | 5 <s3> | <s4> } ] [ role <s6> ] } | { username <s0> [ expire <s5> [ past ] ] [ role <s6> ] [ password { 0 <s2> | 5 <s3> | <s4> } ] } | { username <s0> [ role <s6> ] [ password { 0 <s2> | 5 <s3> | <s4> } ] [ expire <s5> [ past ] ] } | { username <s0> [ role <s6> ] [ expire <s5> [ past ] ] [ password { 0 <s2> | 5 <s3> | <s4> } ] } | { no username <s7> [ role <s8> ] [ force ] }

• OLD: { [ <seqno> ] | no } <permitdeny> <proto_icmpv6> { { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { <icmpv6_type> [ <icmpv6_code> ] } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { flow-label <flow_num> } | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] + | [ <icmpv6_str> | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { flow-label <flow_num> } | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] + } } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] { [ <actionv6> <actionidv6> ] } }

• NEW: { [ <seqno> ] | no } <permitdeny> <proto_icmpv6> { { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { <icmpv6_type> [ <icmpv6_code> ] } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { flow-label <flow_num> } | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] + | [ <icmpv6_str> | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { flow-label <flow_num> } | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] + } } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] { [ <actionv6> <actionidv6> ] } }

• OLD: { [ <seqno> ] | no } <permitdeny> <proto_igmp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <igmp_num> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <igmp_str> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <igmp_num> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <igmp_str> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } ] + } } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } } [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ] }

• NEW: { [ <seqno> ] | no } <permitdeny> <proto_igmp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <igmp_num> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <igmp_str> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <igmp_num> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <igmp_str> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } ] + } } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } } [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ] }

• OLD: { [ <seqno> ] | no } <permitdeny> <proto_sctp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { [ { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] } + } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] }

• NEW: { [ <seqno> ] | no } <permitdeny> <proto_sctp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { [ { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] } + } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] }

• OLD: { [ <seqno> ] | no } <permitdeny> <proto_tcp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { [ { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] | [ { flow-label <flow_num> } ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | [ urg | ack | psh | rst | syn | fin | established ] | { tcp-flags-mask <tcp_flags_mask> } | [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] } + [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] { [ <actionv6> <actionidv6> ] }

• NEW: { [ <seqno> ] | no } <permitdeny> <proto_tcp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { [ { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] | [ { flow-label <flow_num> } ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | [ urg | ack | psh | rst | syn | fin | established ] | { tcp-flags-mask <tcp_flags_mask> } | [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] } + [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] { [ <actionv6> <actionidv6> ] }

• OLD: { [ <seqno> ] | no } <permitdeny> <proto_udp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { [ { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] } + [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } [ nve vni <vni-id> ] | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } [ nve vni <vni-id> ] [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] { [ <actionv6> <actionidv6> ] }

• NEW: { [ <seqno> ] | no } <permitdeny> <proto_udp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { [ { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] } + [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } [ nve vni <vni-id> ] | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } [ nve vni <vni-id> ] [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] { [ <actionv6> <actionidv6> ] }

• OLD: { [ <seqno> ] | no } <permitdeny> { { ethertype <ethertypeid> } | { <proto_tcp> { { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { { [ urg | ack | psh | rst | syn | fin | established | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { http-method { <opt_num> | <opt_str> } } | { tcp-option-length <tcp_opt_len> } | { tcp-flags-mask <tcp_flags_mask> } | { ttl <ttl_num> } ] } + | { [ urg | ack | psh | rst | syn | fin | established | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } } } } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + { { [ urg | ack | psh | rst | syn | fin | established | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { http-method { <opt_num> | <opt_str> } } | { tcp-option-length <tcp_opt_len> } | { tcp-flags-mask <tcp_flags_mask> } | { ttl <ttl_num> } ] } + | { [ urg | ack | psh | rst | syn | fin | established | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ]

• NEW: { [ <seqno> ] | no } <permitdeny> { { ethertype <ethertypeid> } | { <proto_tcp> { { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { { [ urg | ack | psh | rst | syn | fin | established | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { http-method { <opt_num> | <opt_str> } } | { tcp-option-length <tcp_opt_len> } | { tcp-flags-mask <tcp_flags_mask> } | { ttl <ttl_num> } ] } + | { [ urg | ack | psh | rst | syn | fin | established | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } } } } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + { { [ urg | ack | psh | rst | syn | fin | established | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { http-method { <opt_num> | <opt_str> } } | { tcp-option-length <tcp_opt_len> } | { tcp-flags-mask <tcp_flags_mask> } | { ttl <ttl_num> } ] } + | { [ urg | ack | psh | rst | syn | fin | established | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ]

• OLD: { [ <seqno> ] | no } <permitdeny> { { ethertype <ethertypeid> } | { <proto_udp> { { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] [ nve vni <vni-id> ] } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } } [ nve vni <vni-id> ] } } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + { { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] # 2350 ../feature/acl_mgr/cli/aclmgr.cmd [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ]

• NEW: { [ <seqno> ] | no } <permitdeny> { { ethertype <ethertypeid> } | { <proto_udp> { { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } [ { { <src_port_op> { <src_port0> | <src_port0_str> } } | { <src_port_range> { <src_port1> | <src_port1_str> } { <src_port2> | <src_port2_str> } } | src_portgroup <src_port_group> } ] { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } [ { { <dst_port_op> { <dst_port0> | <dst_port0_str> } } | { <dst_port_range> { <dst_port1> | <dst_port1_str> } { <dst_port2> | <dst_port2_str> } } | dst_portgroup <dst_port_group> } ] { { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] [ nve vni <vni-id> ] } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } } } [ nve vni <vni-id> ] } } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + { { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] # 2358 ../feature/acl_mgr/cli/aclmgr.cmd [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ]

• OLD: { [ <seqno> ] | no } <permitdeny> { { ipv6 | <proto> | <ipv6_other_proto> } { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] [ capture session <session-id> ] { [ <actionv6> <actionidv6> ] } | { udf { <udf_name> <udf_val> <udf_mask> } + } }

• NEW: { [ <seqno> ] | no } <permitdeny> { { ipv6 | <proto> | <ipv6_other_proto> } { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] [ { flow-label <flow_num> } ] [ fragments ] [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] [ packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } ] [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] [ capture session <session-id> ] { [ <actionv6> <actionidv6> ] } [ log ] | { udf { <udf_name> <udf_val> <udf_mask> } + } }

• OLD: { [ <seqno> ] | no } <permitdeny> { { { ethertype <ethertypeid> } | { <proto_icmp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | { <icmp_type> [ <icmp_code> ] } | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <icmp_str> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | { <icmp_type> [ <icmp_code> ] } | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <icmp_str> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } ] + } } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } } } } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ] }

• NEW: { [ <seqno> ] | no } <permitdeny> { { { ethertype <ethertypeid> } | { <proto_icmp> { { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | { <icmp_type> [ <icmp_code> ] } | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <icmp_str> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | { <icmp_type> [ <icmp_code> ] } | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } ] + | [ [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | <icmp_str> | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } ] + } } | { { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } ] } + } } } } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ capture session <session-id> ] { [ <action> <actionid> ] } + [ log ] }

• OLD: { [ <seqno> ] | no } <permitdeny> { { { { ethertype <ethertypeid> } | { { ip | <proto> | <ip_other_proto> } { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } [ capture session <session-id> ] } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } | { udf { <udf_name> <udf_val> <udf_mask> } + } } { [ <action> <actionid> ] } + [ log ] | { [ <action> <actionid> ] } + [ telemetry_queue ] | { [ <action> <actionid> ] } + [ telemetry_path ]

• NEW: { [ <seqno> ] | no } <permitdeny> { { { { ethertype <ethertypeid> } | { { ip | <proto> | <ip_other_proto> } { <src_any> | { <src_addr> <src_wild> } | <src_prefix> | { src_key_host <src_host> } | { src_key_addrgrp <src_addrgrp_name> } } { <dst_any> | { <dst_addr> <dst_wild> } | <dst_prefix> | { dst_key_host <dst_host> } | { dst_key_addrgrp <dst_addrgrp_name> } } { { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { dscp { <dscp_num> [ [ dscp-mask ] <dscp_mask> ] | <dscp_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + | { [ [ fragments ] | [ log ] [ telemetry_queue ] [ telemetry_path ] [ time-range <time_range_name> ] | packet-length { <plen_op> <plen0> | <plen_range> <plen1> <plen2> } | { tos { <tos_num> | <tos_str> } } | { precedence { <prec_num> | <prec_str> } } | { ttl <ttl_num> } | { udf { <udf_name> <udf_val> <udf_mask> } + } ] } + } [ capture session <session-id> ] } } [ vlan <vlanid> | ingress_intf { <intfid> | <intfname> } | vlan_priority <vlanpriorityid> ] + [ { udf { <udf_name> <udf_val> <udf_mask> } + } ] } | { udf { <udf_name> <udf_val> <udf_mask> } + } } { [ <action> <actionid> ] } + [ log ] | { [ <action> <actionid> ] } + [ telemetry_queue ] | { [ <action> <actionid> ] } + [ telemetry_path ]

• OLD: { { [ no ] radius-server host <hostipname> { { key { 0 <s0> | 6 <s6> | 7 <s1> | <s2> } [ pac ] { [ auth-port <i0> ] | [ acct-port <i1> ] } } | { [ auth-port1 <i2> ] | [ acct-port1 <i3> ] } } [ { authentication [ accounting [ timeout <i4> ] [ retransmit <i5> ] ] } | { [ accounting1 ] [ timeout1 <i6> ] [ retransmit1 <i7> ] } ] } | { no radius-server host <hostipname> key } }

• NEW: { { [ no ] radius-server host <hostipname> { { key { 0 <s0> | 6 <s6> | 7 <s1> | <s2> } [ pac ] { [ auth-port <i0> ] [ acct-port <i1> ] } } | { [ auth-port1 <i2> ] [ acct-port1 <i3> ] } } [ { authentication [ accounting [ timeout <i4> ] [ retransmit <i5> ] ] } | { [ accounting1 ] [ timeout1 <i6> ] [ retransmit1 <i7> ] } ] } | { no radius-server host <hostipname> key } }

• OLD: [ no ] rfc1583compatibility

• NEW: [ no ] rfc1583compatibility [ ios-compatibility ]

• OLD: [ no ] snmp-server user <s0> { enforcePriv | { [ <s1> ] { [ auth { md5 | sha } <s2> { { priv [ aes-128 ] { <s3> [ localizedkey ] [ { auto | engineID <s4> } ] } } | { [ localizedkey1 ] [ { auto1 | engineID1 <s5> } ] } } ] } } }

• NEW: [ no ] snmp-server user <s0> { enforcePriv | { [ <s1> ] { [ auth { md5 | sha | sha-256 } <s2> { { priv [ aes-128 ] { <s3> [ { localizedkey | localizedV2key } ] [ { auto | engineID <s4> } ] } } | { [ { localizedkey1 | localizedV2key1 } ] [ { auto1 | engineID1 <s5> } ] } } ] } } }

Deprecated Commands

The following configuration commands are removed.

• [ no ] area <area-id-ip> authentication { disable | ipsec spi <spi_id> { md5 <akey> | sha1 <akey> } }

• [ no ] authentication { disable | ipsec spi <spi_id> { md5 <akey> | sha1 <akey> } }

• [ no ] authentication { ipsec spi <spi_id> { md5 <akey> | sha1 <akey> } }

• [ no ] ip dhcp relay subnet-broadcast

• [ no ] limit-resource vni_bd minimum <min-val> maximum { <max-val> | equal-to-min }

• [ no ] mac-address-mtc <mac_address_val>

• [ no ] mac-address-mtc ipv6-extract-mtc

• [ no ] ospfv3 authentication { disable | ipsec spi <spi_id> { md5 <akey> | sha1 <akey> } }