System Management
Basic System Configuration Guide 345
ad-validation
Syntax [no] ad-validation fall-through | drop
Context config>system>dns>dnssec
Description This command enables validation of the presence of the AD-bit in responses from the DNS servers,
and reports a warning to the SECURITY log if DNSSEC validation was not possible.
This command requires either the fall-through or drop parameters be configured. When the fall-
through parameter is supplied, the system will allow DNS responses that do not pass DNSSEC
validation to be accepted and logged. When the drop parameter is specified, the system will reject and
log DNS responses that do not pass DNSSEC validation and the resolution will appear to fail.
Default disabled
Parameters fall-through — Specifies that the DNSSEC validator should allow non-DNSSEC responses to
fall-through to permit resolution in case of validation failure.
drop — Specifies that the DNSSEC validator should drop non-DNSSEC responses in case of
validation failure.
enable-icmp-vse
Syntax [no] enable-icmp-vse
Context config>system
Description This command enables vendor specific extensions to ICMP.
load-balancing
Syntax load-balancing
Context config>system
Description This command enables the load-balancing context to configure the interface per-flow load balancing
options that will apply to traffic entering this interface and egressing over a LAG/ECMP on system-
egress. This is a per interface setting. For load-balancing options that can also be enabled on the system
level, the options enabled on the interface level overwrite system level configurations.
l4-load-balancing
Syntax [no] l4-load-balancing
Context config>system>load-balancing
To Next Page
Loading...
