Merge branch '517' into stage

Author: cumulusAnia

content/cumulus-linux-517/Monitoring-and-Troubleshooting/High-Frequency-Telemetry.md

@@ -83,7 +83,7 @@ b. Specify the interval in seconds for IPFIX template and metadata export. You c
 c. Configure the VRF where the export destination is reachable. The `default` VRF is the default value:
 
    ```
-   cumulus@switch:~$ set system telemetry export ipfix vrf RED
+   cumulus@switch:~$ nv set system telemetry export ipfix vrf RED
    cumulus@switch:~$ nv config apply
    ```
 

content/cumulus-linux-517/System-Configuration/Disk-Management.md

@@ -9,6 +9,10 @@ Cumulus Linux provides commands to:
 - Erase data from the switch.
 - Replace the Self-Encrypting Drive (SED) factory-set password with a custom password.
 
+{{%notice note%}}
+NVUE runs the Linux `sedutil` command for disk management in the background to maintain correct encapsulation and error handling. Do not run the `sedutil` command directly from the command line on the switch.
+{{%/notice%}}
+
 ## Erase Data from the Disk
 
 Cumulus Linux enables you to erase all data from the switch <span class="a-tooltip">[SSD](## "Solid state drive")</span> securely to prevent leaking critical data. Erasing data is an important process when you return a switch with <span class="a-tooltip">[RMA](## "Return Merchandise Authorization")</span> if the switch is defective or move a switch between buildings.

content/cumulus-linux-517/Whats-New/New-and-Removed-NVUE-Commands.md

@@ -22,6 +22,7 @@ nv show interface <interface-id> qos buffer shared-headroom-pool
 nv show interface debounce-counters
 nv show interface <interface-id> link debounce
 nv show qos advance-buffer-config <profile-id> shared-headroom
+nv show system aaa user cumulus --privileged
 nv show system dot1x pre-auth
 nv show system dot1x pre-auth allow-protocol
 nv show system lldp tlv profile
@@ -31,13 +32,13 @@ nv show system lldp tlv profile <lldp-profile-name-id> egress-policy <tlv-name-i
 nv show system lldp tlv profile <lldp-profile-name-id> ingress-policy
 nv show system lldp tlv profile <lldp-profile-name-id> ingress-policy <tlv-name-id>
 nv show system reboot
+nv show system security alerts
+nv show system security secure-boot
 nv show system telemetry export ipfix
 nv show system telemetry interface-stats class debounce
 nv show system telemetry stats-group <stats-group-id> interface-stats class debounce
 nv show vrf <vrf-id> router bgp address-family ipv4-unreachability export-lldp
 nv show vrf <vrf-id> router bgp address-family ipv6-unreachability export-lldp
-nv show vrf <vrf-id> router bgp neighbor <neighbor-id> address-family l2vpn-evpn policy outbound
-
 ```
 
 {{< /tab >}}
@@ -66,26 +67,83 @@ nv set system dot1x pre-auth allow-protocol lldp ingress
 nv set system dot1x pre-auth allow-protocol lldp egress
 nv set system dot1x pre-auth allow-protocol lldp both
 nv set system dot1x tx-identity-request max-retries
-nv set system lldp tlv egress-policy <tlv-name-id>
-nv set system lldp tlv egress-policy <tlv-name-id> state
-nv set system lldp tlv egress-policy system-capabilities state
-nv set system lldp tlv ingress-policy <tlv-name-id>
-nv set system lldp tlv ingress-policy <tlv-name-id> state
-nv set system lldp tlv ingress-policy port-description state
-nv set system lldp tlv ingress-policy management-address state
+nv set system lldp tlv egress-policy 
+nv set system lldp tlv egress-policy dcbx-app-priority
+nv set system lldp tlv egress-policy management-address
+nv set system lldp tlv egress-policy system-description
+nv set system lldp tlv egress-policy dcbx-ets-config
+nv set system lldp tlv egress-policy max-frame-size
+nv set system lldp tlv egress-policy system-name
+nv set system lldp tlv egress-policy dcbx-ets-recomm
+nv set system lldp tlv egress-policy media-capabilities
+nv set system lldp tlv egress-policy unreachable-prefix
+nv set system lldp tlv egress-policy dcbx-pfc 
+nv set system lldp tlv egress-policy port-description
+nv set system lldp tlv egress-policy vlan-name
+nv set system lldp tlv egress-policy link-aggregation
+nv set system lldp tlv egress-policy port-vlan-id         
+nv set system lldp tlv egress-policy mac-phy-config
+nv set system lldp tlv egress-policy system-capabilities
+nv set system lldp tlv ingress-policy dcbx-app-priority
+nv set system lldp tlv ingress-policy management-address
+nv set system lldp tlv ingress-policy system-description
+nv set system lldp tlv ingress-policy dcbx-ets-config
+nv set system lldp tlv ingress-policy max-frame-size
+nv set system lldp tlv ingress-policy system-name
+nv set system lldp tlv ingress-policy dcbx-ets-recomm
+nv set system lldp tlv ingress-policy media-capabilities
+nv set system lldp tlv ingress-policy unreachable-prefix
+nv set system lldp tlv ingress-policy dcbx-pfc
+nv set system lldp tlv ingress-policy port-description
+nv set system lldp tlv ingress-policy vlan-name
+nv set system lldp tlv ingress-policy link-aggregation
+nv set system lldp tlv ingress-policy port-vlan-id         
+nv set system lldp tlv ingress-policy mac-phy-config
+nv set system lldp tlv ingress-policy system-capabilities
+nv set system lldp tlv profile <lldp-profile-name-id> description <value>
 nv set system lldp tlv profile <lldp-profile-name-id> egress-policy
-nv set system lldp tlv profile <lldp-profile-name-id> egress-policy port-description state
-nv set system lldp tlv profile <lldp-profile-name-id> egress-policy system-name state
-nv set system lldp tlv profile <lldp-profile-name-id> egress-policy system-description state
-nv set system lldp tlv profile <lldp-profile-name-id> egress-policy system-capabilities state 
-nv set system lldp tlv profile <lldp-profile-name-id> egress-policy management-address state
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy dcbx-app-priority
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy management-address
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy system-description
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy dcbx-ets-config
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy max-frame-size
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy system-name
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy dcbx-ets-recomm
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy media-capabilities
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy unreachable-prefix
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy dcbx-pfc
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy port-description
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy vlan-name
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy link-aggregation
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy port-vlan-id
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy mac-phy-config
+nv set system lldp tlv profile <lldp-profile-name-id> egress-policy system-capabilities
 nv set interface <interface-id> lldp tlv profile <lldp-profile-name-id>
 nv set system lldp tlv profile <lldp-profile-name-id> description <value>
-nv set system lldp tlv profile <lldp-profile-name-id> egress-policy <tlv-name-id>
-nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy <tlv-name-id>
-nv show system security secure-boot
-nv set system security alerts audit-failure (enabled|disabled)
-nv set system aaa tacacs authorization <id>> all-commands (enabled|disabled)
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy dcbx-app-priority
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy management-address
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy system-description
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy dcbx-ets-config
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy max-frame-size
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy system-name
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy dcbx-ets-recomm
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy media-capabilities
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy unreachable-prefix
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy dcbx-pfc
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy port-description
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy vlan-name
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy link-aggregation
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy port-vlan-id
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy mac-phy-config
+nv set system lldp tlv profile <lldp-profile-name-id> ingress-policy system-capabilities 
+nv set system security alerts audit-failure
+nv set system aaa tacacs authorization <id>> all-commands
+nv set system telemetry export ipfix destination
+nv set system telemetry export ipfix port
+nv set system telemetry export ipfix template-metadata-interval
+nv set system telemetry export ipfix vrf <vrf-id>
+nv set system telemetry hft export ipfix state
 nv set system telemetry exclude-list <value>
 nv set system telemetry include-list <value>
 nv set system telemetry interface-stats class debounce sample-interval (10-86400)
@@ -97,20 +155,22 @@ nv set system telemetry stats-group <stats-group-id> exclude-list <value>
 nv set system telemetry stats-group <stats-group-id> include-list <value>
 nv set system telemetry stats-group <stats-group-id> interface-stats class debounce sample-interval (10-86400)
 nv set system telemetry stats-group <stats-group-id> interface-stats class debounce state (enabled|disabled)
-nv set vrf <vrf-id> router bgp address-family ipv4-unreachability export-lldp state (enabled|disabled)
-nv set vrf <vrf-id> router bgp address-family ipv6-unreachability export-lldp state (enabled|disabled)
-nv set vrf <vrf-id> router bgp address-family l2vpn-evpn advertise ipv4-unreachability state (enabled|disabled)
-nv set vrf <vrf-id> router bgp address-family l2vpn-evpn advertise ipv6-unreachability state (enabled|disabled)
-nv set vrf <vrf-id> router bgp dynamic-neighbor listen-range <ip-sub-prefix-id> peer-group <generic-name>
+nv set vrf <vrf-id> router bgp address-family ipv4-unreachability export-lldp state
+nv set vrf <vrf-id> router bgp address-family ipv6-unreachability export-lldp state
+nv set vrf <vrf-id> router bgp address-family l2vpn-evpn advertise ipv4-unreachability state
+nv set vrf <vrf-id> router bgp address-family l2vpn-evpn advertise ipv6-unreachability state
+nv set vrf <vrf-id> router bgp address-family l2vpn-evpn advertise state
 ```
 
 {{< /tab >}}
 {{< tab "nv action ">}}
 
 ```
+nv action change system security sed-password
 nv action clear interface debounce-counters 
 nv action clear interface <interface-id> counters link debounce
 nv action delete system file-path <path>
+nv action erase system disk
 nv action fetch system file-path <path> <uri> [file-permissions <value>] [vrf <vrf-name>]
 ```