NVGRE commands -- arp suppression enable

Use arp suppression enable to enable ARP flood suppression.

Use undo arp suppression enable to disable ARP flood suppression.

Syntax

arp suppression enable

undo arp suppression enable

Default

ARP flood suppression is disabled.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

ARP flood suppression reduces ARP request broadcasts by enabling the NVE to reply to ARP requests on behalf of VMs.

This feature snoops ARP packets to populate the ARP flood suppression table with local and remote MAC addresses. If an ARP request has a matching entry, the NVE replies to the request on behalf of the VM. If no match is found, the NVE floods the request to both local and remote sites.

Examples

# Enable ARP flood suppression for the VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] arp suppression enable

Related commands

display arp suppression vsi

reset arp suppression vsi

NVGRE commands -- bandwidth

Use bandwidth to set the expected bandwidth for a VSI interface.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth-value

undo bandwidth

Default

The expected bandwidth (in kbps) of a VSI interface equals the interface baud rate divided by 1000.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.

Usage guidelines

The expected bandwidth is an informational parameter used only by higher-layer protocols for calculation. You cannot adjust the actual bandwidth of an interface by using this command.

Examples

# Set the expected bandwidth to 10000 kbps for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] bandwidth 10000

NVGRE commands -- default

Use default to restore the default settings for a VSI interface.

Syntax

default

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

| CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impact of this command when you use it on a live network.

This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions.

To resolve this problem:

1. Use the display this command in interface view to identify these commands.

2. Use their undo forms or follow the command reference to restore their default settings.

3. If the restoration attempt still fails, follow the error message instructions to resolve the problem.

Examples

# Restore the default settings for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] default

This command will restore the default settings. Continue? [Y/N]:y

NVGRE commands -- description (VSI interface view)

Use description to configure the description of a VSI interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of a VSI interface is interface-name plus Interface (for example, Vsi-interface100 Interface).

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 255 characters.

Examples

# Configure the description as gateway for NVGRE 5000 for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] description gateway for NVGRE 5000

NVGRE commands -- description (VSI view)

Use description to configure a description for a VSI.

Use undo description to restore the default.

Syntax

description text

undo description

Default

A VSI does not have a description.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 80 characters.

Examples

# Configure the description as vsi for vpn1 for the VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] description vsi for vpn1

Related commands

display l2vpn vsi

NVGRE commands -- display arp suppression vsi

Use display arp suppression vsi to display ARP flood suppression entries.

Syntax

Centralized devices:

display arp suppression vsi [ name vsi-name ] [ count ]

Distributed devices in standalone mode:Centralized IRF devices:

display arp suppression vsi [ name vsi-name ] [ slot slot-number [ cpu cpu-number ] ] [ count ]

Distributed devices in IRF mode:

display arp suppression vsi [ name vsi-name ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

name vsi-name: Specifies a VSI by its name. If you do not specify a VSI, this command displays entries for all VSIs.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays entries on the active MPU. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays entries on the master device. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. If you do not specify a member device or PEX, this command displays entries on the master device. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the IRF member ID. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays entries on the global active MPU. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. If you do not specify a card or PEX, this command displays entries on the global active MPU. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

count: Displays the number of ARP flood suppression entries that match the command.

Examples

# Display ARP flood suppression entries.

<Sysname> display arp suppression vsi

IP address MAC address Vsi Name Link ID Aging

1.1.1.2 000f-e201-0101 vsi1 0x70000 14

1.1.1.3 000f-e201-0202 vsi1 0x80000 18

1.1.1.4 000f-e201-0203 vsi2 0x90000 10

# Display the number of ARP flood suppression entries.

<Sysname> display arp suppression vsi count

Total entries: 3

Table 1 Command output

Field | Description
Link ID | Link ID that uniquely identifies an AC or an NVGRE tunnel on a VSI.
Aging | Remaining lifetime (in minutes) of the ARP flood suppression entry. When the timer expires, the entry is deleted.

Related commands

arp suppression enable

reset arp suppression vsi

NVGRE commands -- display interface vsi-interface

Use display interface vsi-interface to display information about VSI interfaces.

Syntax

display interface [ vsi-interface [ vsi-interface-id ] ] [ brief [ description | down ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vsi-interface [ vsi-interface-id ]: Specifies VSI interfaces. If you specify a VSI interface, this command displays information about the specified interface. If you specify only the vsi-interface keyword, this command displays information about all VSI interfaces. If you do not specify the vsi-interface [ vsi-interface-id ] option, this command displays information about all interfaces. Make sure the specified VSI interfaces have been created on the device.

brief: Display brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions.

down: Displays interfaces that are physically down as well as the down reason. If you do not specify this keyword, the command does not filter output by physical interface state.

Examples

# Display information about VSI-interface 100.

<Sysname> display interface vsi-interface 100

Vsi-interface100

Current state: UP

Line protocol state: UP

Description: Vsi-interface100 Interface

Bandwidth: 1000000kbps

Maximum Transmit Unit: 1500

Internet address: 10.1.1.1/24 (primary)

IP packet frame type: Ethernet II, hardware address: 4431-9258-0193

IPv6 packet frame type: Ethernet II, hardware address: 4431-9258-0193

Physical: Unknown, baudrate: 1000000 kbps

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

Table 2 Command output

Field | Description
Current state | Physical link state of the interface: · Administratively DOWN—The interface has been shut down by using the shutdown command. · DOWN—The interface is administratively up, but its physical state is down (possibly because no physical link exists or the link has failed). · UP—The interface is both administratively and physically up.
Line protocol state | Data link layer state of the interface. · UP—The data link layer protocol is up. · UP(spoofing)—The data link layer protocol is up, but the link is an on-demand link or does not exist. · DOWN—The data link layer protocol is down.
Description | Description of the interface.
Bandwidth | Expected bandwidth of the interface.
Maximum Transmission Unit | MTU of the interface.
Internet protocol processing: Disabled | The interface is not assigned an IP address and cannot process IP packets.
Internet address | IP address of the interface. The primary attribute indicates that the address is the primary IP address.
IP packet frame type | IPv4 packet framing format.
hardware address | MAC address.
IPv6 packet frame type | ‌ IPv6 packet framing format.
Physical | Physical type of the interface, which is fixed at Unknown.
baudrate | Interface baud rate in kbps.
Last clearing of counters | Last time when the reset counters interface vsi-interface command was used to clear interface statistics. This field displays Never if the reset counters interface vsi-interface command has never been used on the interface since the device startup.
Last 300 seconds input rate | Average input rate for the last 300 seconds.
Last 300 seconds output rate | Average output rate for the last 300 seconds.
Input: 0 packets, 0 bytes, 0 drops | Incoming traffic statistics on the interface: · Number of incoming packets. · Number of incoming bytes. · Number of dropped incoming packets.
Output: 0 packets, 0 bytes, 0 drops | Outgoing traffic statistics on the interface: · Number of outgoing packets. · Number of outgoing bytes. · Number of dropped outgoing packets.

# Display brief information about all VSI interfaces.

<Sysname> display interface vsi-interface brief

Brief information of interface(s) under route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface Link Protocol Main IP Description

Vsi100 DOWN DOWN --

# Display brief information and complete description for VSI-interface 100.

<Sysname> display interface vsi-interface 100 brief description

Brief information of interface(s) under route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface Link Protocol Main IP Description

Vsi100 UP UP 1.1.1.1 VSI-interface100

# Displays interfaces that are physically down and the down reason.

<Sysname> display interface brief down

Brief information of interface(s) under route mode:

Link: ADM - administratively down; Stby - standby

Interface Link Cause

Vsi100 DOWN Administratively

Vsi200 DOWN Administratively

Table 3 Command output

Field | Description
Interface | Abbreviated interface name.
Link | Physical link state of the interface: · UP—The interface is physically up. · DOWN—The interface is physically down. · ADM—The interface has been shut down by using the shutdown command. To restore the physical state of the interface, use the undo shutdown command. · Stby—The interface is a backup interface in standby state. To see the primary interface, use the display interface-backup state command.
Protocol | Data link layer protocol state of the interface: · UP—The data link layer protocol of the interface is up. · UP (s)—The data link layer protocol of the interface is up, but the link is an on-demand link or does not exist. The (s) attribute represents the spoofing flag. · DOWN—The data link layer protocol of the interface is down.
Main IP | Primary IP address of the interface. This field displays two hyphens (--) if the interface does not have an IP address.
Description | Description of the interface.
Cause | Cause for the physical link state of an interface to be DOWN: · Administratively—The interface has been manually shut down by using the shutdown command. To restore the physical state of the interface, use the undo shutdown command. · Not connected—The interface is not mapped to any VSI, or the mapped VSI does not have any AC or PW.

Related commands

reset counters interface vsi-interface

NVGRE commands -- display l2vpn mac-address

Use display l2vpn mac-address to display MAC address entries for VSIs.

Syntax

display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC address entries for all VSIs.

dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify this keyword, the command displays all MAC address entries, including dynamic remote- and local-MAC entries, and manually added static remote-MAC entries. NVGRE does not support static local-MAC entries.

count: Displays the number of MAC address entries.

verbose: Displays detailed information about MAC address entries.

Usage guidelines

If you do not specify the count or verbose keyword, this command displays brief information about MAC address entries.

Examples

# Display brief information about MAC address entries for all VSIs.

<Sysname> display l2vpn mac-address

MAC Address State VSI Name Link ID/Name Aging

0000-0000-000b Static vpn1 Tunnel10 NotAging

0000-0000-000c Dynamic vpn1 Tunnel65535 Aging

0000-0000-000d Dynamic vpn1 Tunnel9999999 Aging

--- 3 mac address(es) found ---

# Display the total number of MAC address entries in all VSIs.

<Sysname> display l2vpn mac-address count

3 mac address(es) found

Table 4 Command output

Field | Description
State | Entry state: · Dynamic—Local- or remote-MAC entry dynamically learned in the data plane. · Static—Static remote-MAC entry.
Link ID/Name | For a local MAC address, if the AC is a Layer 3 interface, this field displays the interface name. If the AC is an Ethernet service instance, this field displays the name of the interface that hosts the Ethernet service instance. For a remote MAC address, this field displays the tunnel name.
Aging | Entry aging state: · Aging. · NotAging.

# Display detailed information about MAC address entries for all VSIs.

<Sysname> display l2vpn mac-address verbose

MAC Address : 0000-0000-000b

VSI Name : vpn1

VXLAN ID : -

Interface : GE1/0/1

Link ID : 1

State : Dynamic

Aging : Aging

Table 5 Command output

Field | Description
VXLAN ID | NVGRE does not support this field.
Interface | For a local MAC address, if the AC is a Layer 3 interface, this field displays the interface name. If the AC is an Ethernet service instance, this field displays the name of the interface that hosts the Ethernet service instance. For a remote MAC address, this field displays the tunnel interface name.
Link ID | Link ID of an AC or VXLAN tunnel on the VSI.
State | Entry state: · Dynamic—Local- or remote-MAC entry dynamically learned in the data plane. · Static—Static remote-MAC entry.
Aging | Entry aging state: · Aging. · NotAging.

Related commands

reset l2vpn mac-address

NVGRE commands -- display l2vpn service-instance

Use display l2vpn service-instance to display information about Ethernet service instances.

Syntax

display l2vpn service-instance [ interface interface-type interface-number [ service-instance instance-id ] ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface interface-type interface-number: Specifies a Layer 2 Ethernet interface or Layer 2 aggregate interface by its interface type and number. If you do not specify an interface, this command displays Ethernet service instance information for all Layer 2 Ethernet interfaces and Layer 2 aggregate interfaces.

service-instance instance-id: Specifies an Ethernet service instance by its ID in the range of 1 to 4096. If you do not specify an Ethernet service instance, this command displays information about all Ethernet service instances on the specified interface.

verbose: Displays detailed information about Ethernet service instances. If you do not specify this keyword, the command displays brief information about Ethernet service instances.

Examples

# Display brief information about all Ethernet service instances.

<Sysname> display l2vpn service-instance

Total number of service-instances: 4, 4 up, 0 down

Total number of ACs: 2, 2 up, 0 down

Interface SrvID Owner LinkID State Type

GE1/0/1 3 vsi12 1 Up VSI

GE1/0/1 4 vsi13 1 Up VSI

Table 6 Command output

Field | Description
Total number of ACs | Total number of attachment circuits (ACs) and the number of ACs in each state (up or down).
Interface | Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
SrvID | Ethernet service instance ID.
Owner | VSI name. This field is empty if an Ethernet service instance is not mapped to any VSI.
LinkID | Ethernet service instance's link ID on the VSI.
State | Ethernet service instance state: · Up. · Down.
Type | L2VPN type of the Ethernet service instance: · VSI. · VPWS.

# Display detailed information about all Ethernet service instances on GigabitEthernet 1/0/1.

<Sysname> display l2vpn service-instance interface gigabitethernet 1/0/1 verbose

Interface: GE1/0/1

Service Instance: 1

Encapsulation : s-vid 16

VSI Name : vsi10

Link ID : 1

State : Up

Service Instance: 2

Encapsulation : s-vid 1001

VSI Name : vsi11

Link ID : 1

State : Up

Table 7 Command output

Field | Description
Interface | Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
Service Instance | Ethernet service instance ID.
Encapsulation | Frame match criterion of the Ethernet service instance. If the Ethernet service instance does not contain a match criterion, the command does not display this field.
Link ID | Ethernet service instance's link ID on the VSI.
State | Ethernet service instance state: · Up. · Down.

Related commands

service-instance

NVGRE commands -- display l2vpn vsi

Use display l2vpn vsi to display information about VSIs.

Syntax

display l2vpn vsi [ name vsi-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays information about all VSIs.

verbose: Displays detailed information about VSIs. If you do not specify this keyword, the command displays brief information about VSIs.

Examples

# Display brief information about all VSIs.

<Sysname> display l2vpn vsi

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

VSI Name VSI Index MTU State

vpna 0 1500 Up

Table 8 Command output

Field | Description
MTU | MTU on the VSI.
State | VSI state: · Up—The VSI is up. · Down—The VSI is down. · Admin down—The VSI has been manually shut down by using the shutdown command.

# Display detailed information about all VSIs. (Applicable to routers.)

<Sysname> display l2vpn vsi verbose

VSI Name: 0

VSI Index : 0

VSI State : Down

MTU : 1500

Bandwidth : -

Broadcast Restrain : -

Multicast Restrain : -

Unknown Unicast Restrain: -

MAC Learning : Enabled

MAC Table Limit : Unlimited

Drop Unknown : Disabled

Flooding : Enabled

Statistics : Enabled

Input statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Gateway Interface : VSI-interface 100

NVGRE VSID : 4096

VSI Name: 1

VSI Index : 1

VSI State : Down

MTU : 1500

Bandwidth : -

Broadcast Restrain : -

Multicast Restrain : -

Unknown Unicast Restrain: -

MAC Learning : Enabled

MAC Table Limit : Unlimited

Drop Unknown : Disabled

Flooding : Enabled

Statistics : Enabled

Input Statistics:

Octets : 0

Packets : 0

Errors : 0

Drops : 0

Output Statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Gateway Interface : VSI-interface 101

NVGRE VSID : 4097

Tunnels:

Tunnel Name Link ID State Type

Tunnel1 0x7000001 Up Manual

Tunnel2 0x7000002 Up Manual

ACs:

AC Link ID State

GE1/0/1 0 Down

# Display detailed information about all VSIs. (Applicable to switches.)

<Sysname> display l2vpn vsi verbose

VSI Name: 0

VSI Index : 0

VSI State : Down

MTU : 1500

Bandwidth : -

Broadcast Restrain : -

Multicast Restrain : -

Unknown Unicast Restrain: -

MAC Learning : Enabled

MAC Table Limit : Unlimited

Drop Unknown : Disabled

Flooding : Enabled

Statistics : Enabled

Input statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Gateway Interface : VSI-interface 100

NVGRE VSID : 4096

VSI Name: 1

VSI Index : 1

VSI State : Down

MTU : 1500

Bandwidth : -

Broadcast Restrain : -

Multicast Restrain : -

Unknown Unicast Restrain: -

MAC Learning : Enabled

MAC Table Limit : Unlimited

Drop Unknown : Disabled

Flooding : Enabled

Statistics : Enabled

Input Statistics:

Octets : 0

Packets : 0

Errors : 0

Drops : 0

Output Statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Gateway Interface : VSI-interface 101

NVGRE VSID : 4097

Tunnels:

Tunnel Name Link ID State Type

Tunnel1 0x7000001 Up Manual

Tunnel2 0x7000002 Up Manual

ACs:

AC Link ID State

GE1/0/1 srv1 0 Down

Vlan10 1 Up

Table 9 Command output

Field | Description
VSI Description | Description of the VSI. If the VSI does not have a description, the command does not display this field.
VSI State | VSI state: · Up—The VSI is up. · Down—The VSI is down. · Administratively down—The VSI has been manually shut down by using the shutdown command.
MTU | MTU on the VSI.
Bandwidth | ‌ Maximum bandwidth (in kbps) for known unicast traffic on the VSI.
Broadcast Restrain | ‌ Broadcast restraint bandwidth (in kbps).
Multicast Restrain | ‌ Multicast restraint bandwidth (in kbps).
Unknown Unicast Restrain | ‌ Unknown unicast restraint bandwidth (in kbps).
MAC Learning | State of the MAC learning feature: · Enabled. · Disabled.
MAC Table Limit | ‌ Maximum number of MAC address entries on the VSI. Unlimited indicates that the number of MAC address entries is not limited.
Drop Unknown | ‌ Action on source MAC-unknown frames received after the maximum number of MAC entries is reached. · Enabled—Drops these packets. · Disabled—Forwards these packets.
Flooding | State of the VSI's flooding feature: · Enabled—Flooding is enabled on the VSI. The NVE floods unknown unicast frames to both local and remote sites. · Disabled—Flooding is disabled on the VSI. The NVE floods unknown unicast frames only to local sites.
Statistics | Packet statistics state: · Enabled—Packet statistics is enabled for the VSI. · Disabled—Packet statistics is disabled for the VSI.
Input statistics | Incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Output statistics | Outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Gateway Interface | VSI interface name.
Link ID | The tunnel's link ID on the VSI.
State | Tunnel state: · Up. · Down.
Type | Tunnel assignment method. Manual indicates that the tunnel was manually assigned to the NVGRE network.
ACs | ACs that are bound to the VSI.
Link ID | AC's link ID on the VSI.
State | AC state: · Up. · Down.

NVGRE commands -- display nvgre tunnel

Use display nvgre tunnel to display NVGRE tunnel information for NVGRE networks.

Syntax

display nvgre tunnel [ vsid vsid ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vsid vsid: Specifies a VSID in the range of 4096 to 16777214. If you do not specify a VSID, this command displays NVGRE tunnel information for all NVGRE networks.

Examples

# Display NVGRE tunnel information for all NVGRE networks.

<Sysname> display nvgre tunnel

Total number of NVGREs: 2

NVGRE VSID: 4096; VSI name: 1

NVGRE VSID: 4097; VSI name: 2; Total tunnels: 2 (1 up, 1 down)

Tunnel name Link ID State Type

Tunnel1 0x7000001 Up Manual

Tunnel3 0x7000002 Down Manual

Table 10 Command output

Field | Description
Link ID | Tunnel's link ID in the NVGRE network.
State | Tunnel state: · Up. · Down.
Type | Tunnel assignment method. Manual indicates that the tunnel was manually assigned to the NVGRE network.

Related commands

nvgre

tunnel

NVGRE commands -- encapsulation

Use encapsulation to configure a frame match criterion for an Ethernet service instance.

Use undo encapsulation to restore the default.

Syntax

encapsulation c-vid vlan-id-list

encapsulation s-vid vlan-id-list [ only-tagged ]

encapsulation s-vid vlan-id c-vid { vlan-id-list | all }

encapsulation { default | tagged | untagged }

undo encapsulation [ { c-vid | s-vid } vlan-id-list ]

Default

An Ethernet service instance does not contain a frame match criterion.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Parameters

c-vid vlan-id-list: Matches frames that are tagged with specified inner 802.1Q VLAN IDs. The vlan-id-list argument specifies a space-separated list of up to eight VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the format of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094.

s-vid vlan-id-list: Matches frames that are tagged with specified outer 802.1Q VLAN IDs. The vlan-id-list argument specifies a space-separated list of up to eight VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the format of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094.

only-tagged: Matches tagged frames. If the outer 802.1Q VLAN is not the PVID, the matching result does not differ, whether or not you specify the only-tagged keyword. If the outer 802.1Q VLAN is the PVID, the matching result depends on whether or not the only-tagged keyword is specified.

· To match only PVID-tagged frames, specify the only-tagged keyword.

· To match both untagged frames and PVID-tagged frames, do not specify the only-tagged keyword.

s-vid vlan-id c-vid { vlan-id-list | all }: Matches frames that are tagged with the specified outer and inner 802.1Q VLAN IDs.

· The vlan-id argument specifies an 802.1Q VLAN ID in the range of 1 to 4094.

· The vlan-id-list argument specifies a space-separated list of up to eight VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the format of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094.

· The all keyword specifies all 802.1Q VLAN IDs.

default: Matches frames that do not match any other Ethernet service instance on the interface. On an interface, you can configure this criterion only in one Ethernet service instance. The Ethernet service instance matches any frames if it is the only instance on the interface.

tagged: Matches any frames that have an 802.1Q VLAN tag.

untagged: Matches any frames that do not have an 802.1Q VLAN tag.

Usage guidelines

An Ethernet service instance can contain only one frame match criterion. In the following cases, you can execute the encapsulation command multiple times to modify the frame match criterion of an Ethernet service instance:

· You have configured the frame match criterion by using the encapsulation s-vid command.

?span style='font:7.0pt "Times New Roman"'> You can repeat the encapsulation s-vid command to add matching outer VLAN IDs to the criterion. For example, if you execute the encapsulation s-vid 100 and encapsulation s-vid 200 commands, the Ethernet service instance matches frames tagged with outer VLAN IDs 100 and 200.

?span style='font:7.0pt "Times New Roman"'> You can repeat the undo encapsulation s-vid command to remove matching outer VLAN IDs from the criterion. If all matching outer VLAN IDs are removed, the mapping between the Ethernet service instance and the VSI is removed automatically.

· You have configured the frame match criterion by using the encapsulation c-vid command.

?span style='font:7.0pt "Times New Roman"'> You can repeat the encapsulation c-vid command to add matching inner VLAN IDs to the criterion. For example, if you execute the encapsulation c-vid 300 and encapsulation c-vid 400 commands, the Ethernet service instance matches frames tagged with inner VLAN IDs 300 and 400.

?span style='font:7.0pt "Times New Roman"'> You can repeat the undo encapsulation c-vid command to remove matching inner VLAN IDs from the criterion. If all matching inner VLAN IDs are removed, the mapping between the Ethernet service instance and the VSI is removed automatically.

· You have configured the frame match criterion as matching both inner and outer VLAN IDs.

?span style='font:7.0pt "Times New Roman"'> You can repeat the encapsulation s-vid c-vid command to add matching outer and inner VLAN IDs to the criterion. All the specified outer and inner VLAN IDs take effect. For example, if you execute the encapsulation s-vid 100 c-vid 100 and encapsulation s-vid 200 c-vid 200 commands, the Ethernet service instance matches frames tagged with outer VLAN IDs 100 and 200 and inner VLAN IDs 100 and 200.

?span style='font:7.0pt "Times New Roman"'> You can repeat the encapsulation c-vid and encapsulation s-vid command to add matching inner and outer VLAN IDs to the criterion. All the specified outer and inner VLAN IDs take effect.

?span style='font:7.0pt "Times New Roman"'> You can execute the undo form of the previous mentioned commands to remove matching outer and inner VLAN IDs from the criterion. However, you cannot remove all outer and inner VLAN IDs from the criterion.

You cannot repeat the encapsulation command to modify the match criterion of an Ethernet service instance if you have configured the frame match criterion by using the following commands:

· encapsulation s-vid { vlan-id | vlan-id-list } only-tagged.

· encapsulation tagged.

· encapsulation untagged.

· encapsulation default.

To change the match criterion, first execute the undo encapsulation command without any parameters to remove the original match criterion. The command also automatically removes the mapping between the Ethernet service instance and the VSI.

If the match criteria of Ethernet service instances overlap on an interface, the frame matching method depends on the device model.

When you configure frame match criteria of different Ethernet service instances on an interface, follow these restrictions and guidelines:

· If both the encapsulation s-vid and encapsulation s-vid c-vid criteria exist on different Ethernet service instances, the specified outer VLAN IDs of different criteria can be identical. However, the outer VLAN IDs cannot overlap.

· If multiple Ethernet service instances have the encapsulation c-vid criterion, the specified inner VLAN IDs cannot be identical or overlap.

· If multiple Ethernet service instances match both the inner and outer VLAN IDs, the following restrictions apply:

?span style='font:7.0pt "Times New Roman"'> If the matching outer VLAN IDs are different, the inner VLAN IDs can be identical or overlap.

?span style='font:7.0pt "Times New Roman"'> If the matching outer VLAN IDs are the same, the inner VLAN IDs cannot be identical or overlap.

Examples

# Configure Ethernet service instance 1 on GigabitEthernet 1/0/1 to match frames that have an outer 802.1Q VLAN ID of 111.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 1

[Sysname-GigabitEthernet1/0/1-srv1] encapsulation s-vid 111

Related commands

display l2vpn service-instance

NVGRE commands -- flooding disable

Use flooding disable to disable flooding for a VSI.

Use undo flooding disable to enable flooding for a VSI.

Syntax

flooding disable

undo flooding disable

Default

Flooding is enabled for a VSI.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

By default, the device floods unknown unicast frames received from the local site to the following interfaces in the frame's NVGRE network:

· All site-facing interfaces except for the incoming interface.

· All NVGRE tunnel interfaces.

To confine unknown unicast traffic to the site-facing interfaces, use this command to disable flooding for the VSI bound to the NVGRE network. The VSI will not flood unknown unicast frames to NVGRE tunnel interfaces.

Examples

# Disable flooding for the VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] flooding disable

NVGRE commands -- gateway vsi-interface

Use gateway vsi-interface to specify a gateway interface for a VSI.

Use undo gateway vsi-interface to restore the default.

Syntax

gateway vsi-interface vsi-interface-id

undo gateway vsi-interface

Default

No gateway interface is specified for a VSI.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-interface-id: Specifies a VSI interface by its number. The value range for this argument varies by device model.

Usage guidelines

A VSI can have only one gateway interface. Multiple VSIs can share a gateway interface.

Examples

# Specify VSI-interface 100 as the gateway interface for the VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] gateway vsi-interface 100

Related commands

interface vsi-interface

NVGRE commands -- interface vsi-interface

Use interface vsi-interface to create a VSI interface and enter its view, or enter the view of an existing VSI interface.

Use undo interface vsi-interface to delete a VSI interface.

Syntax

interface vsi-interface vsi-interface-id

undo interface vsi-interface vsi-interface-id

Default

No VSI interfaces exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-interface-id: Specifies a VSI interface number. The value range for this argument varies by device model.

Examples

# Create VSI-interface 100 and enter VSI interface view.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100]

Related commands

gateway vsi-interface

NVGRE commands -- l2vpn enable

Use l2vpn enable to enable L2VPN.

Use undo l2vpn enable to disable L2VPN.

Syntax

l2vpn enable

undo l2vpn enable

Default

L2VPN is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

You must enable L2VPN before you can configure L2VPN settings.

Examples

# Enable L2VPN.

<Sysname> system-view

[Sysname] l2vpn enable

NVGRE commands -- mac-address

Use mac-address to assign a MAC address to a VSI interface.

Use undo mac-address to restore the default.

Syntax

mac-address mac-address

undo mac-address

Default

The default setting for this command varies by device model.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

mac-address: Specifies a MAC address in H-H-H format.

Examples

# Assign the MAC address 0001-0001-0001 to VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] mac-address 1-1-1

NVGRE commands -- mac-address static

Use mac-address static to add a static remote-MAC address entry for a VXLAN VSI.

Use undo mac-address static to remove static remote-MAC address entries for a VXLAN VSI.

Syntax

mac-address static mac-address interface tunnel tunnel-number vsi vsi-name

undo mac-address static [ mac-address ] [ interface tunnel tunnel-number ] vsi vsi-name

Default

NVGRE VSIs do not have static remote-MAC address entries.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

mac-address: Specifies a remote MAC address in H-H-H format. Do not specify a multicast MAC address or an all-zeros MAC address. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001.

interface tunnel tunnel-number: Specifies the NVGRE tunnel interface for the remote MAC address. The tunnel-number argument represents the tunnel interface number. The value range for the tunnel-number argument varies by device model. The tunnel interface must already exist.

vsi vsi-name: Specifies the VSI name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

A remote MAC address is the MAC address of a VM in a remote site.

Remote MAC entries include the following types:

· Static—Manually added MAC entries.

· Dynamic—MAC entries learned in the data plane from incoming traffic on NVGRE tunnels.

For a remote address, the manual static entry has higher priority than the dynamic entry.

Examples

# Add the MAC address 000f-e201-0101 to the VSI vsi1. Specify Tunnel 1 as the outgoing interface.

<Sysname> system-view

[Sysname] mac-address static 000f-e201-0101 interface tunnel 1 vsi vsi1

NVGRE commands -- mtu

Use mtu to set the MTU for a VSI interface.

Use undo mtu to restore the default.

Syntax

mtu size

undo mtu

Default

The default MTU of a VSI interface varies by device model.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

size: Specifies an MTU value. The value range for this argument varies by device model.

Examples

# Set the MTU to 1430 bytes for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] mtu 1430

NVGRE commands -- nvgre

Use nvgre to create an NVGRE network and enter its view, or enter the view of an existing NVGRE network.

Use undo nvgre to restore the default.

Syntax

nvgre nvgre-vsid

undo nvgre

Default

No NVGRE networks exist.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

nvgre-vsid: Specifies a VSID in the range of 4096 to 16777214.

Usage guidelines

You can create only one NVGRE network for a VSI. The VSID for each VSI must be unique.

Examples

# Create NVGRE network 10000 for the VSI vpna and enter NVGRE network view.

<Sysname> system

[Sysname] vsi vpna

[Sysname-vsi-vpna] nvgre 10000

[Sysname-vsi-vpna-nvgre-10000]

Related commands

vsi

NVGRE commands -- reset arp suppression vsi

Use reset arp suppression vsi to clear ARP flood suppression entries on VSIs.

Syntax

reset arp suppression vsi [ name vsi-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears ARP flood suppression entries on all VSIs.

Examples

# Clear ARP flood suppression entries on all VSIs.

<Sysname> reset arp suppression vsi

This command will delete all entries. Continue? [Y/N]:y

Related commands

arp suppression enable

display arp suppression vsi

NVGRE commands -- reset counters interface vsi-interface

Use reset counters interface vsi-interface to clear packet statistics on VSI interfaces.

Syntax

reset counters interface [ vsi-interface [ vsi-interface-id ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-interface [ vsi-interface-id ]: Specifies VSI interfaces. If you specify a VSI interface, this command clears packet statistics on the specified interface. If you specify only the vsi-interface keyword, this command clears packet statistics on all VSI interfaces. If you do not specify the vsi-interface [ vsi-interface-id ] option, this command clears packet statistics on all interfaces. Make sure the specified VSI interfaces have been created on the device.

Usage guidelines

Use this command to clear history statistics before you collect traffic statistics for a time period.

Examples

# Clear packet statistics on VSI-interface 100.

<Sysname> reset counters interface vsi-interface 100

Related commands

display interface vsi-interface

NVGRE commands -- reset l2vpn mac-address

Use reset l2vpn mac-address to clear dynamic MAC address entries on VSIs.

Syntax

reset l2vpn mac-address [ vsi vsi-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears all dynamic MAC address entries on all VSIs.

Usage guidelines

Use this command when the number of dynamic MAC address entries reaches the limit or the device learns incorrect MAC addresses.

Examples

# Clear the dynamic MAC address entries on the VSI vpn1.

<Sysname> reset l2vpn mac-address vsi vpn1

Related commands

display l2vpn mac-address vsi

NVGRE commands -- reset l2vpn statistics vsi

Use reset l2vpn statistics vsi to clear packet statistics on VSIs.

Syntax

reset l2vpn statistics vsi [ name vsi-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears packet statistics on all VSIs.

Examples

# Clear packet statistics on all VSIs.

<Sysname> reset l2vpn statistics vsi

Related commands

statistics enable

NVGRE commands -- selective-flooding mac-address

Use selective-flooding mac-address to enable selective flood for a MAC address.

Use undo selective-flooding mac-address to disable selective flood for a MAC address.

Syntax

selective-flooding mac-address mac-address

undo selective-flooding mac-address mac-address

Default

Selective flood is disabled for all MAC addresses.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

mac-address: Specifies a MAC address. The MAC address cannot be all Fs.

Usage guidelines

This command excludes a remote MAC address from the flood suppression done by using the flooding disable command. The NVE will flood the frames destined for the specified MAC address to remote sites when unknown-unicast floods are confined to the local site.

Examples

# Enable selective flood for 000f-e201-0101 on the VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] selective-flooding mac-address 000f-e201-0101

Related commands

flooding disable

NVGRE commands -- service-instance

Use service-instance to create an Ethernet service instance and enter its view, or enter the view of an existing Ethernet service instance.

Use undo service-instance to delete an Ethernet service instance.

Syntax

service-instance instance-id

undo service-instance instance-id

Default

No Ethernet service instances exist.

Views

Layer 2 aggregate interface view

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

instance-id: Specifies an Ethernet service instance ID in the range of 1 to 4096.

Examples

# On the Layer 2 Ethernet interface GigabitEthernet 1/0/1, create Ethernet service instance 1 and enter Ethernet service instance view.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 1

[Sysname-GigabitEthernet1/0/1-srv1]

Related commands

display l2vpn service-instance

NVGRE commands -- shutdown (VSI interface view)

Use shutdown to shut down a VSI interface.

Use undo shutdown to bring up a VSI interface.

Syntax

shutdown

undo shutdown

Default

A VSI interface is up.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Examples

# Shut down VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] shutdown

NVGRE commands -- shutdown (VSI view)

Use shutdown to shut down a VSI.

Use undo shutdown to bring up a VSI.

Syntax

shutdown

undo shutdown

Default

VSIs are up.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Use this command to temporarily disable a VSI to provide Layer 2 switching services. The shutdown action does not change settings on the VSI. You can continue to configure the VSI. After you bring up the VSI again, the VSI provides services based on the latest settings.

Examples

# Shut down the VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] shutdown

Related commands

display l2vpn vsi

NVGRE commands -- statistics enable

Use statistics enable to enable packet statistics for a VSI.

Use undo statistics enable to disable packet statistics for a VSI.

Syntax

statistics enable

undo statistics enable

Default

Packet statistics is disabled for a VSI.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable packet statistics for the VSI vpls1.

<Sysname> system-view

[Sysname] vsi vpls1

[Sysname-vsi-vpls1] statistics enable

Related commands

reset l2vpn statistics vsi

NVGRE commands -- tunnel

Use tunnel to assign an NVGRE tunnel to an NVGRE network.

Use undo tunnel to remove an NVGRE tunnel from an NVGRE network.

Syntax

tunnel tunnel-number

undo tunnel tunnel-number

Default

An NVGRE network does not contain NVGRE tunnels.

Views

NVGRE network view

Predefined user roles

network-admin

mdc-admin

Parameters

tunnel-number: Specifies a tunnel number. The value range for this argument varies by device model. The specified tunnel must be an NVGRE tunnel.

Usage guidelines

This command assigns an NVGRE tunnel to an NVGRE network to provide Layer 2 connectivity for the NVGRE network between two sites.

You can assign multiple NVGRE tunnels to an NVGRE network, and configure a NVGRE tunnel to trunk multiple NVGRE networks.

Examples

# Assign NVGRE tunnels 0 and 1 to NVGRE network 10000.

<Sysname> system

[Sysname] vsi vpna

[Sysname-vsi-vpna] nvgre 10000

[Sysname-vsi-vpna-nvgre-10000] tunnel 0

[Sysname-vsi-vpna-nvgre-10000] tunnel 1

Related commands

display nvgre tunnel

NVGRE commands -- vsi

Use vsi to create a VSI and enter its view, or enter the view of an existing VSI.

Use undo vsi to delete a VSI.

Syntax

vsi vsi-name

undo vsi vsi-name

Default

No VSIs exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

A VSI acts as a virtual switch to provide Layer 2 switching services for an NVGRE network on an NVE. A VSI has all functions of a physical Ethernet switch, including source MAC address learning, MAC address aging, and flooding.

A VSI can provide services only for one NVGRE network.

Examples

# Create the VSI nvgre5000 and enter VSI view.

<Sysname> system-view

[Sysname] vsi nvgre5000

[Sysname-vsi-nvgre5000]

Related commands

display l2vpn vsi

NVGRE commands -- xconnect vsi

Use xconnect vsi to map an AC to a VSI.

Use undo xconnect vsi to restore the default.

Syntax

xconnect vsi vsi-name [ access-mode { ethernet | vlan } ] [ track track-entry-number&<1-3> ]

undo xconnect vsi

Default

An AC is not mapped to any VSI.

Views

Ethernet service instance view

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-name: Specifies the VSI name, a case-sensitive string of 1 to 31 characters.

access-mode: Specifies an access mode. If the AC is an Ethernet service instance, you can specify this keyword. The default access mode is VLAN. If the AC is a Layer 3 interface or subinterface, you cannot specify this keyword.

ethernet: Specifies the Ethernet access mode.

vlan: Specifies the VLAN access mode.

track track-entry-number&<1-3>: Specifies a space-separated list of up to three track entry numbers in the range of 1 to 1024. The AC is up only if a minimum of one associated track entry is in positive state.

Usage guidelines

To monitor the link status of an AC, associate it with track entries.

To configure this command for an Ethernet service instance, you must first use the encapsulation command to add a traffic match criterion to the service instance.

For traffic that matches the Ethernet service instance or Layer 3 interface, the system uses the VSI's MAC address table to make a forwarding decision.

The access mode determines how an NVE processes the 802.1Q VLAN tags in the inner Ethernet frames assigned to the VSI.

· VLAN access mode—Ethernet frames received from or sent to the local site must contain 802.1Q VLAN tags.

?span style='font:7.0pt "Times New Roman"'> For an Ethernet frame received from the local site, the NVE removes all its 802.1Q VLAN tags before forwarding the frame.

?span style='font:7.0pt "Times New Roman"'> For an Ethernet frame destined for the local site, the NVE adds 802.1Q VLAN tags to the frame before forwarding the frame.

In VLAN access mode, NVGRE packets sent between NVGRE network sites do not contain 802.1Q VLAN tags. NVGRE can provide Layer 2 connectivity for different 802.1Q VLANs between sites. You can use different 802.1Q VLANs to provide the same service in different sites.

· Ethernet access mode—The NVE does not process the 802.1Q VLAN tags of Ethernet frames received from or sent to the local site.

?span style='font:7.0pt "Times New Roman"'> For an Ethernet frame received from the local site, the NVE forwards the frame with the 802.1Q VLAN tags intact.

?span style='font:7.0pt "Times New Roman"'> For an Ethernet frame destined for the local site, the NVE forwards the frame without adding 802.1Q VLAN tags.

In Ethernet access mode, NVGRE packets sent between NVGRE network sites contain 802.1Q VLAN tags. NVGRE cannot provide Layer 2 connectivity for different 802.1Q VLANs between sites. You must use the same 802.1Q VLAN to provide the same service between sites.

Examples

# On GigabitEthernet 1/0/1, configure Ethernet service instance 200 to match frames with an outer 802.1Q VLAN tag of 200, and map the instance to the VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1 hub-spoke

[Sysname-vsi-vpn1] quit

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 200

[Sysname-GigabitEthernet1/0/1-srv200] encapsulation s-vid 200

[Sysname-GigabitEthernet1/0/1-srv200] xconnect vsi vpn1

Related commands

display l2vpn interface

display l2vpn service-instance

encapsulation

vsi