Routing and Security Enhancements
BGP VRF Export-Map Enhancement
OcNOS now supports route-map–based export filtering and attribute modification at the VRF level. Administrators can apply route-maps to VRFs to filter exported routes using match conditions and adjust key BGP attributes with set clauses before the routes leave the VRF. This provides more granular control over inter-VRF route export policies, enhances security, and improves traffic engineering.
For more details, refer to the
BGP RT-Filter Visibility Enhancements
OcNOS introduces two new commands, show ip bgp rtfilter neighbors <prefix> advertised-routes and show ip bgp rtfilter neighbors <prefix> received-routes, to display BGP Route-Target (RT) filter routes advertised to or received from a specific neighbor. These commands enhance visibility and make troubleshooting RT-filter route exchanges easier.
For more details, refer to the show ip bgp rtfilter neighbors command in the OcNOS Layer 3 Guide, Release 7.0.0.
For more details, refer to the
RSVP Session Reoptimization
LSP Re-optimization Visibility: Re-optimization for LSP sessions was previously managed internally with limited visibility. This enhancement allows users to view LSP names along with the remaining time until the next re-optimization cycle for each LSP.
For more information, see the Show CSPF LSP
LSP Force Re-optimize Enhancement: OcNOS modifies the existing rsvp-trunk TRUNKNAME force-reoptimize command to rsvp-session SESSIONNAME force-reoptimize. The earlier command reoptimized only the primary session of a trunk. The new command allows operators to immediately reoptimize any RSVP session (primary or secondary) by specifying its session name. This enhancement provides operators with better control, ensuring that secondary tunnels can be reoptimized on demand.
For more details, see the
RSVP-TE Shared Risk Link Group (SRLG) Support with IS-IS IGP
OcNOS introduces support for RSVP-TE Shared Risk Link Group (SRLG) with IS-IS IGP, extending the SRLG functionality previously available with OSPF. SRLG enables path computation for secondary backup LSPs and Fast Reroute (FRR) LSPs that are disjoint from primary paths, reducing the probability of simultaneous failures across shared physical resources.
For more details, see the
IGMP Offlink Log Suppression
OcNOS adds a new per-interface CLI option log-suppress to the ip igmp offlink command. When configured, warning messages for IGMP reports from non-local subnets are suppressed entirely, reducing log volume in environments with many offlink receivers.
For more details, see the
Display Link Debounce Timer
Introduced a new CLI command show interface (IFNAME|) link-debounce (details|) to display link debounce timer information. This command provides per-interface configuration and status of link-UP and link-DOWN debounce timers, including the active or inactive state, the remaining time before the timer expires, and the number of interface flaps recorded, thereby helping in effective monitoring and troubleshooting of interface stability.
For more information, see the show interface link debounce command in the OcNOS System Management Guide, Release 7.0.0.
Enhanced Visibility for Re-Optimization Timer
Re-optimization for LSP sessions was previously managed internally, with limited visibility for users to monitor when the next re-optimization would occur. This enhancement introduces the ability to view the remaining time until the next re-optimization cycle for each LSP.
ECMP Support for L3EVPN
Equal Cost Multipath (ECMP) support for L3EVPN helps in load-balancing the EVPN-IRB traffic and supports traffic on all the IP paths that are available in an MPLS-based EVPN network with a symmetric IRB (S-IRB) configuration.
For more information, refer to the
BGP Labeled Unicast Next Hop in Route-Map
BGP Labeled Unicast Next Hop in Route-Map provides the ability to selectively set the next hop value to self, and the label attributes of the matched routes are replaced with the local BGP peer address and the local label.
For more information. refer to the
BGP Route-map Nesting
Route-maps filter incoming updates from a BGP peer and the match route-map command within a route-map allows another route-map to be called a subroutine. Such a nested route-map is evaluated and based on the return it is treated as a match or no-match.
For more information, refer to the
IS-IS Route Preference and Support for Prefix Attribute Flags
Route preference rules have been implemented in IS-IS IPv4 (TLV 135) and IPv6 (TLV 236) in accordance with RFC 7775. In addition, support for Prefix Attribute Flags sub-TLV has been extended. In addition to the previously supported ELC bit, the system now advertises the Prefix Attribute Flags sub-TLV by default for all prefixes, supporting X (External Prefix), R (Re-advertisement), and N (Node/Loopback) flags.
For more information on IS-IS IPv4 and IPv6 and Prefix Attribute Flags, refer to
Optimized Debug Logging via Background Debug Recording (BDR)
Introduced the Background Debug Recording (BDR) feature to optimize debug logging performance by storing debug logs in an in-memory buffer instead of writing them directly to disk, and periodically or manually flushing them to log files to reduce I/O overhead. This enables users to keep debugging active during testing without impacting system performance or requiring test reruns. In the event of a crash, in-memory logs can be retrieved for analysis. The feature supports configurable buffer sizes (1–10 MB), module-based logging, severity level selection, and optional suppression of non-BDR logs. BDR must be explicitly enabled and configured per module.
For more details, see the
Shared Risk Link Groups (SRLG) enhancements
Disjoint Backup Path
This is an enhancement to Topology Independent Loop-Free Alternate (TI-LFA) based calculations of backup path(s) in Flex-Algo that allow the setup of disjoint path(s) for each specific default or flexible algorithm by leveraging deployed SRLG configurations.
Exclude SRLG Constraints
The SRLG constraints have been introduced to compute flexible algorithm-specific paths that avoid links with the same risk that an operator intends these paths to avoid. When such constraints are configured for a flexible algorithm definition, the computed paths do not traverse any links that advertise the same SRLG(s) as the specific Flexible Algorithm definition.
For more details, refer to
BGP RPKI AS Origin Validation
OcNOS now enables BGP routers to perform RPKI origin validation while allowing routes with an invalid RPKI status. Operators can configure route-maps to match routes based on RPKI validation states (valid, invalid, not-found) and apply actions such as setting local preference or filtering. This feature provides flexibility in routing policy enforcement and supports the gradual adoption of RPKI without disrupting legitimate traffic.
For more details, refer to BGP RPKI AS Origin Validation section in the OcNOS Layer 3 Guide, Release 7.0.0.
External PHY 100G Port Breakout
The AS9947-36XKB (J2C+) platform supports 100G QSFP28 port breakout into 4×10G or 4×25G logical interfaces, enhancing port flexibility and migration across 10G/25G/100G networks.
For more details, refer to External PHY 100G Port Breakout section in the OcNOS System Management Guide, Release 7.0.0.
Hop-Limit Constraint for Segment Routing Policy
he hop-limit constraint is introduced for the dynamic path of Segment Routing (SR) Policy. This constraint defines the maximum number of hops a packet can traverse along an SR policy path. It helps prevent routing loops and ensures that packets reach the destination within a controlled path length.
For more details, refer to the SR Policy Hop-Limit
Flex-Algo FTN Fallback
Flex-Algo FTN Fallback introduces a fallback mechanism for Flex-Algo FTN (FA-FTN). When the primary FA-FTN is unavailable, the system automatically maps colored services to a fallback FTN—either a native SR-FTN or another configured FTN—ensuring service continuity and consistent traffic forwarding.
For more information, refer to Flex-Algo FTN Fallback section in the OcNOS Segment Routing Guide 7.0.0.
Hash Offset and Seed Values for ECMP and Trunk
In previous releases, there was no CLI to configure hash offset and hash seed values for ECMP and Trunk. With this enhancement, administrators can now configure these parameters directly using new CLI commands.
These commands are available only when load balancing is enabled. The no form of each command resets the corresponding value to its default.
It is applicable only on Qumran1 (Q1) series platforms.
For more details, refer to the
Route Maps in BGP EVPN
Enables operators to apply route maps for the EVPN address family, including BGP L2VPN unnumbered mode. Allows matching on EVPN route-type and MAC lists to filter routes in IN and OUT directions, providing fine-grained policy control, selective advertisement of Type-5 prefixes, and flexible route management across EVPN networks.
For more information, refer to the Route Maps in BGP EVPN section in the OcNOS Layer 3 Guide, Release 7.0.0.
LDP-IGP Synchronization Support Restriction on Loopback Interfaces
Configuring mpls ldp-igp sync on a loopback interface fails to commit, showing an “interface not supported” or IGP validation error. This occurs when attempting to enable LDP-IGP synchronization on loopback interfaces with IS-IS or OSPF. As a result, LDP-IGP sync cannot be applied to loopback interfaces.
For more information, refer to the
VPWS MAC Withdrawal Enhancement for MTU-s Node Switchovers
MAC Withdrawal Support for VPWS deployments on MTU-s Node. This enhancement extends MAC withdrawal support to VPWS configurations on MTU-s Node. Previously, MAC flushing was supported for VPLS configured on MTU-s. With this update, MAC withdrawal is now triggered during VC switchover (standby to active or vice versa) even when VPWS is deployed.
For more information, refer to the