VXLAN commands -- Basic VXLAN commands -- ac statistics enable

Use ac statistics enable to enable packet statistics for a Layer 3 interface that acts as an AC.

Use undo ac statistics enable to disable packet statistics for a Layer 3 interface that acts as an AC.

Syntax

ac statistics enable

undo ac statistics enable

Default

The packet statistics feature is disabled for a Layer 3 interface that acts as an AC.

Views

Layer 3 aggregate interface view

Layer 3 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

For this command to take effect, you must map the Layer 3 interface to a VSI. If you modify the VSI mapping, packet statistics of the interface are cleared.

Examples

# Map GigabitEthernet 1/0/1 to VSI vsia and enable packet statistics on the interface.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] xconnect vsi vsia

[Sysname-GigabitEthernet1/0/1] ac statistics enable

Related commands

display l2vpn interface verbose

reset l2vpn statistics ac

VXLAN commands -- Basic VXLAN commands -- arp suppression enable

Use arp suppression enable to enable ARP flood suppression.

Use undo arp suppression enable to disable ARP flood suppression.

Syntax

arp suppression enable

undo arp suppression enable

Default

ARP flood suppression is disabled.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP requests on behalf of VMs.

This feature snoops ARP packets to populate the ARP flood suppression table with local and remote MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf of the VM. If no match is found, the VTEP floods the request to both local and remote sites.

Examples

# Enable ARP flood suppression for VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] arp suppression enable

Related commands

display arp suppression vsi

reset arp suppression vsi

VXLAN commands -- Basic VXLAN commands -- bandwidth (Ethernet service instance view)

Use bandwidth to set the bandwidth limit for an Ethernet service instance.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth

undo bandwidth

Default

No bandwidth limit is set for an Ethernet service instance.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Parameters

bandwidth: Specifies a bandwidth limit in the range of 64 to 4194303 kbps.

Usage guidelines

The bandwidth limit takes effect only on incoming traffic. An Ethernet service instance drops excess incoming traffic when its bandwidth limit is reached.

If you use the bandwidth command for both an Ethernet service instance and its mapped VSI, the Ethernet service instance bandwidth is limited exclusively from the VSI bandwidth. For example, VSI vsi1 has AC 1, AC 2, AC 3, and Tunnel 1. The bandwidth limit of VSI vsi1 is 500 kbps, and the bandwidth limit of AC 1 is 120 kbps. The total bandwidth of AC 2, AC 3, and Tunnel 1 is limited to 500 kbps.

Examples

# Set the bandwidth limit to 10240 kbps for Ethernet service instance 200.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 200

[Sysname-GigabitEthernet1/0/1-srv200] encapsulation s-vid 200

[Sysname-GigabitEthernet1/0/1-srv200] bandwidth 10240

Related commands

bandwidth (VSI view)

VXLAN commands -- Basic VXLAN commands -- bandwidth (VSI view)

Use bandwidth to set the bandwidth limit for a VSI.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth

undo bandwidth

Default

No bandwidth limit is set for a VSI.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

bandwidth: Specifies a bandwidth limit in the range of 64 to 4194303 kbps.

Usage guidelines

The effects of this command vary by device model.

If you use the bandwidth command for both an Ethernet service instance and its mapped VSI, the Ethernet service instance bandwidth is limited exclusively from the VSI bandwidth. For example, VSI vsi1 has AC 1, AC 2, AC 3, and Tunnel 1. The bandwidth limit of VSI vsi1 is 500 kbps, and the bandwidth limit of AC 1 is 120 kbps. The total bandwidth of AC 2, AC 3, and Tunnel 1 is limited to 500 kbps.

If you use both the restrain and bandwidth commands on a VSI, the effects of these commands vary by device model.

Examples

# Set the bandwidth limit to 10240 kbps for VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] bandwidth 10240

Related commands

bandwidth (Ethernet service instance view)

display l2vpn vsi

VXLAN commands -- Basic VXLAN commands -- description

Use description to configure a description for a VSI.

Use undo description to restore the default.

Syntax

description text

undo description

Default

A VSI does not have a description.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 80 characters.

Examples

# Configure a description for VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] description vsi for vpn1

Related commands

display l2vpn vsi

VXLAN commands -- Basic VXLAN commands -- display arp suppression vsi

Use display arp suppression vsi to display ARP flood suppression entries.

Syntax

Centralized devices:

display arp suppression vsi [ name vsi-name ] [ count ]

Distributed devices in standalone mode:Centralized IRF devices:

display arp suppression vsi [ name vsi-name ] [ slot slot-number [ cpu cpu-number ] ] [ count ]

Distributed devices in IRF mode:

display arp suppression vsi [ name vsi-name ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays entries for all VSIs.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays entries on the active MPU. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays entries on the master device. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. If you do not specify a member device or PEX, this command displays entries on the master device. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the IRF member ID. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays entries on the global active MPU. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. If you do not specify a card or PEX, this command displays entries on the global active MPU. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

count: Displays the number of ARP flood suppression entries that match the command.

Examples

# Display ARP flood suppression entries.

<Sysname> display arp suppression vsi

IP address MAC address Vsi Name Link ID Aging

1.1.1.2 000f-e201-0101 vsi1 0x70000 14

1.1.1.3 000f-e201-0202 vsi1 0x80000 18

1.1.1.4 000f-e201-0203 vsi2 0x90000 10

# Display the number of ARP flood suppression entries.

<Sysname> display arp suppression vsi count

Total entries: 3

Table 1 Command output

Field | Description
Link ID | Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging | Remaining lifetime (in minutes) of the ARP flood suppression entry. When the timer expires, the entry is deleted.

Related commands

arp suppression enable

reset arp suppression vsi

VXLAN commands -- Basic VXLAN commands -- display hardware-resource vxlan

Use display hardware-resource vxlan to display the VXLAN hardware resource mode.

Syntax

display hardware-resource [ vxlan ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vxlan: Specifies the VXLAN hardware resource mode. If you do not specify this keyword, the command displays all hardware resource modes.

Examples

# Display the VXLAN hardware resource mode.

<Sysname> display hardware-resource vxlan

Vxlan resource(vxlan), all supported modes:

normal The normal mode

mac The mac mode

-----------------------------------------------

Default Current Next

normal normal normal

Table 2 Command output

Field | Description
Vxlan resource(vxlan), all supported modes | VXLAN hardware resource modes supported by the device. · normal—Normal mode. In this mode, more hardware resources are assigned to VXLAN tunnels than MAC address entries. In normal mode, a VXLAN tunnel interface can be the outgoing interface of a network route. · mac—MAC address mode. In this mode, more hardware resources are assigned to MAC address entries than VXLAN tunnels.
Default | The default VXLAN hardware resource mode.
Current | The current VXLAN hardware resource mode.
Next | The VXLAN hardware resource mode for the next startup.

Related commands

hardware-resource vxlan

VXLAN commands -- Basic VXLAN commands -- display igmp host group

Use display igmp host group to display information about the multicast groups that contain IGMP host-enabled interfaces.

Syntax

display igmp host group [ group-address | interface interface-type interface-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

group-address: Specifies a multicast group address in the range of 224.0.1.0 to 239.255.255.255. If you do not specify a multicast group, this command displays information about all multicast groups.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays multicast group information for all interfaces.

verbose: Displays detailed multicast group information. If you do not specify this keyword, the command displays brief multicast group information.

Usage guidelines

For the VXLAN multicast source interface of a multicast-mode VXLAN to join its VXLAN multicast group, enable the IGMP host feature on the interface. The VXLAN multicast source interface provides the source IP address for multicast VXLAN packets.

Use this command to verify the following information:

· Multicast group information for VXLANs.

· Group membership status of VXLAN multicast source interfaces.

Examples

# Display brief information about all multicast groups that contain IGMP host-enabled interfaces. (Applicable to routers.)

<Sysname> display igmp host group

IGMP host groups in total: 2

GigabitEthernet1/0/1(1.1.1.20):

IGMP host groups in total: 2

Group address Member state Expires

225.1.1.1 Idle Off

225.1.1.2 Idle Off

# Display detailed information about all multicast groups that contain IGMP host-enabled interfaces. (Applicable to routers.)

<Sysname> display igmp host group verbose

GigabitEthernet1/0/1(1.1.1.20):

IGMP host groups in total: 2

Group: 225.1.1.1

Group mode: Exclude

Member state: Idle

Expires: Off

Source list (sources in total: 0):

Group: 225.1.1.2

Group mode: Exclude

Member state: Idle

Expires: Off

Source list (sources in total: 0):

# Display brief information about all multicast groups that contain IGMP host-enabled interfaces. (Applicable to switches.)

<Sysname> display igmp host group

IGMP host groups in total: 2

Vlan-interface10(1.1.1.20):

IGMP host groups in total: 2

Group address Member state Expires

225.1.1.1 Idle Off

225.1.1.2 Idle Off

# Display detailed information about all multicast groups that contain IGMP host-enabled interfaces. (Applicable to switches.)

<Sysname> display igmp host group verbose

Vlan-interface10(1.1.1.20):

IGMP host groups in total: 2

Group: 225.1.1.1

Group mode: Exclude

Member state: Idle

Expires: Off

Source list (sources in total: 0):

Group: 225.1.1.2

Group mode: Exclude

Member state: Idle

Expires: Off

Source list (sources in total: 0):

Table 3 Command output

Field | Description
IGMP host groups in total | Total number of multicast groups that contain IGMP host-enabled interfaces.
Vlan-interface10(1.1.1.20) | Name and IP address of the IGMP host-enabled interface.
IGMP host groups in total | Total number of multicast groups on the interface.
Group address/Group | Address of the multicast group.
Member state | Member state: · Delay—The interface has joined the multicast group, and it has started the delay timer for sending IGMP reports. · Idle—The interface has joined the multicast group, but it has not started the delay timer for sending IGMP reports. The delay timer is not user configurable.
Expires | Remaining delay time for the interface to send an IGMP report. This field displays Off if the delay timer is disabled.
Group mode | Multicast source filtering mode: · Include. · Exclude.
Source list | Multicast sources of the multicast group.
sources in total | Total number of multicast sources.

| NOTE: For more information about the command output, see IGMP in IP Multicast Configuration Guide.

Related commands

igmp host enable

VXLAN commands -- Basic VXLAN commands -- display l2vpn interface

Use display l2vpn interface to display L2VPN information for Layer 3 interfaces that are mapped to VSIs.

Syntax

display l2vpn interface [ vsi vsi-name | interface-type interface-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.

interface-type interface-number: Specifies an interface by its type and number.

verbose: Displays detailed information about Layer 3 interfaces. If you do not specify this keyword, the command displays brief information about Layer 3 interfaces.

Usage guidelines

If you do not specify any parameters, this command displays brief L2VPN information for all Layer 3 interfaces that are mapped to VSIs.

Examples

# Display brief L2VPN information for all Layer 3 interfaces that are mapped to VSIs. (Applicable to routers.)

<Sysname> display l2vpn interface

Total number of interfaces: 2, 2 up, 0 down

Interface Owner Link ID State Type

GE1/0/1 vxlan3 1 Up VSI

GE1/0/2 vxlan4 2 Down VSI

# Display brief L2VPN information for all Layer 3 interfaces that are mapped to VSIs. (Applicable to switches.)

<Sysname> display l2vpn interface

Total number of interfaces: 2, 2 up, 0 down

Interface Owner Link ID State Type

Vlan10 vxlan1 0 Up VSI

Vlan11 vxlan2 0 Up VSI

Table 4 Command output

Field | Description
Interface | Layer 3 interface name.
Owner | VSI name.
Link ID | The interface's link ID on the VSI.
State | Physical state of the interface: · Up—The interface is physically up. · Down—The interface is physically down.
Type | L2VPN type of the interface. This field displays VSI for the VXLAN feature.

# Display detailed L2VPN information for all Layer 3 interfaces that are mapped to VSIs. (Applicable to routers.)

<Sysname> display l2vpn interface verbose

Interface: GE1/0/1

Owner : vsi1

Link ID : 0

State : Up

Type : VSI

Statistics : Enabled

Input Statistics:

Octets :994496

Packets :15539

Output Statistics:

Octets :0

Packets :0

Interface: GE1/0/2

Owner : vsi2

Link ID : 0

State : Down

Type : VSI

Statistics : Enabled

Input Statistics:

Octets :0

Packets :0

Output Statistics:

Octets :0

Packets :0

# Display detailed L2VPN information for all Layer 3 interfaces that are mapped to VSIs. (Applicable to switches.)

<Sysname> display l2vpn interface verbose

Interface: Vlan10

Owner : vsi1

Link ID : 0

State : Up

Type : VSI

Statistics : Enabled

Input Statistics:

Octets :994496

Packets :15539

Output Statistics:

Octets :0

Packets :0

Interface: Vlan11

Owner : vsi2

Link ID : 0

State : Down

Type : VSI

Statistics : Enabled

Input Statistics:

Octets :0

Packets :0

Output Statistics:

Octets :0

Packets :0

Table 5 Command output

Field | Description
Interface | Layer 3 interface name.
Owner | VSI name.
Link ID | The interface's link ID on the VSI.
State | Physical state of the interface: · Up—The interface is physically up. · Down—The interface is physically down.
Type | L2VPN type of the interface. This field displays VSI for the VXLAN feature.
Statistics | Packet statistics state: · Enabled—The packet statistics feature is enabled for the interface. · Disabled—The packet statistics feature is disabled for the interface.
Input Statistics | Incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets.
Output Statistics | Outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets.

Related commands

display l2vpn service-instance

VXLAN commands -- Basic VXLAN commands -- display l2vpn mac-address

Use display l2vpn mac-address to display MAC address entries for VSIs.

Syntax

display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC address entries for all VSIs.

dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify this keyword, the command displays all MAC address entries, including:

· Dynamic remote- and local-MAC entries.

· Remote-MAC entries advertised through VXLAN IS-IS.

· Remote-MAC entries advertised through BGP EVPN.

· Manually added static remote- and local-MAC entries.

· Remote-MAC entries issued through OpenFlow.

· Remote-MAC entries issued through OVSDB.

count: Displays the number of MAC address entries.

verbose: Displays detailed information about MAC address entries.

Usage guidelines

If you do not specify the count or verbose keyword, this command displays brief information about MAC address entries.

Examples

# Display brief information about MAC address entries for all VSIs.

<Sysname> display l2vpn mac-address

MAC Address State VSI Name Link ID/Name Aging

0000-0000-000b Static vpn1 Tunnel10 NotAging

0000-0000-000c Dynamic vpn1 Tunnel60 Aging

0000-0000-000d Dynamic vpn1 Tunnel99 Aging

--- 3 mac address(es) found ---

# Display the total number of MAC address entries in all VSIs.

<Sysname> display l2vpn mac-address count

3 mac address(es) found

Table 6 Command output

Field | Description
State | Entry state: · Dynamic—Local- or remote-MAC entry dynamically learned in the data plane. · Static—Static local- and remote-MAC entry. · IS-IS—Remote-MAC entry advertised through VXLAN IS-IS. · EVPN—Remote-MAC entry advertised through BGP EVPN. · OpenFlow—Remote-MAC entry issued by a remote controller through OpenFlow. · OVSDB—Remote-MAC entry issued by a remote controller through OVSDB.
Link ID/Name | For a local MAC address, this field displays the interface name if the AC is a Layer 3 interface. If the AC is an Ethernet service instance, this field displays the name of the interface that hosts the Ethernet service instance for the MAC address. For a remote MAC address, this field displays the tunnel interface name.
Aging | Entry aging state: · Aging. · NotAging.

# Display detailed information about MAC address entries for all VSIs.

<Sysname> display l2vpn mac-address verbose

MAC Address : 0000-0000-000b

VSI Name : vpn1

VXLAN ID : 123

Interface : GE1/0/1

Link ID : 1

State : Dynamic

Aging : Aging

Table 7 Command output

Field | Description
Interface | For a local MAC address, this field displays the interface name if the AC is a Layer 3 interface. If the AC is an Ethernet service instance, this field displays the name of the interface that hosts the Ethernet service instance for the MAC address. For a remote MAC address, this field displays the tunnel interface name.
Link ID | Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
State | Entry state: · Dynamic—Local- or remote-MAC entry dynamically learned in the data plane. · Static—Static local- or remote-MAC entry. · IS-IS—Remote-MAC entry advertised through VXLAN IS-IS. · EVPN—Remote-MAC entry advertised through BGP EVPN. · OpenFlow—Remote-MAC entry issued by a remote controller through OpenFlow. · OVSDB—Remote-MAC entry issued by a remote controller through OVSDB.
Aging | Entry aging state: · Aging. · NotAging.

Related commands

reset l2vpn mac-address

VXLAN commands -- Basic VXLAN commands -- display l2vpn service-instance

Use display l2vpn service-instance to display information about Ethernet service instances.

Syntax

display l2vpn service-instance [ interface interface-type interface-number [ service-instance instance-id ] ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface interface-type interface-number: Specifies a Layer 2 Ethernet interface or Layer 2 aggregate interface by its interface type and number. If you do not specify an interface, this command displays Ethernet service instance information for all Layer 2 Ethernet interfaces and Layer 2 aggregate interfaces.

service-instance instance-id: Specifies an Ethernet service instance by its ID in the range of 1 to 4096. If you do not specify an Ethernet service instance, this command displays information about all Ethernet service instances on the specified Layer 2 Ethernet interface or Layer 2 aggregate interface.

verbose: Displays detailed information about Ethernet service instances. If you do not specify this keyword, the command displays brief information about Ethernet service instances.

Examples

# Display brief information about all Ethernet service instances.

<Sysname> display l2vpn service-instance

Total number of service-instances: 4, 4 up, 0 down

Total number of ACs: 2, 2 up, 0 down

Interface SrvID Owner LinkID State Type

GE1/0/1 3 vsi12 1 Up VSI

GE1/0/1 4 vsi13 1 Up VSI

Table 8 Command output

Field | Description
Total number of ACs | Total number of attachment circuits (ACs) and the number of ACs in each state (up or down).
Interface | Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
SrvID | Ethernet service instance ID.
Owner | VSI name. This field is empty if an Ethernet service instance is not mapped to any VSI.
LinkID | Ethernet service instance's link ID on the VSI.
State | Ethernet service instance state: · Up. · Down.
Type | L2VPN type of the Ethernet service instance: · VSI. · VPWS.

# Display detailed information about all Ethernet service instances on GigabitEthernet 1/0/1.

<Sysname> display l2vpn service-instance interface gigabitethernet 1/0/1 verbose

Interface: GE1/0/1

Service Instance: 1

Type : Manual

Encapsulation : s-vid 16

Bandwidth : -

VSI Name : vsi10

Link ID : 1

State : Up

Statistics : Enabled

Input Statistics:

Octets :0

Packets :0

Output Statistics:

Octets :0

Packets :0

Table 9 Command output

Field | Description
Interface | Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.
Service Instance | Ethernet service instance ID.
Type | Type and traffic match mode of the Ethernet service instance: · Dynamic (MAC-based)—Dynamic Ethernet service instance in MAC-based traffic match mode. · Dynamic (VLAN-based)—Dynamic Ethernet service instance in VLAN-based traffic match mode. · Manual—Static Ethernet service instance in VLAN-based traffic match mode.
Encapsulation | Frame match criterion of the Ethernet service instance. If the Ethernet service instance does not contain a match criterion, the command does not display this field.
Bandwidth | ‌ Bandwidth limit in kbps. If no bandwidth limit is set for the Ethernet service instance, a hyphen (-) is displayed.
Link ID | Ethernet service instance's link ID on the VSI.
State | Ethernet service instance state: · Up. · Down.
Statistics | Packet statistics state: · Enabled—The packet statistics feature is enabled for the Ethernet service instance. · Disabled—The packet statistics feature is disabled for the Ethernet service instance.
Input Statistics | Incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets.
Output Statistics | Outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets.

Related commands

service-instance

VXLAN commands -- Basic VXLAN commands -- display l2vpn vsi

Use display l2vpn vsi to display information about VSIs.

Syntax

display l2vpn vsi [ name vsi-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays information about all VSIs.

verbose: Displays detailed information about VSIs. If you do not specify this keyword, the command displays brief information about VSIs.

Examples

# Display brief information about all VSIs.

<Sysname> display l2vpn vsi

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

VSI Name VSI Index MTU State

vpna 0 1500 Up

Table 10 Command output

Field | Description
MTU | MTU on the VSI.
State | VSI state: · Up—The VSI is up. · Down—The VSI is down. · Admin down—The VSI has been manually shut down by using the shutdown command.

# Display detailed information about all VSIs. (Applicable to routers.)

<Sysname> display l2vpn vsi verbose

VSI Name: vpna

VSI Index : 0

VSI State : Up

MTU : 1500

Bandwidth : Unlimited

Broadcast Restrain : 5120 kbps

Multicast Restrain : 5120 kbps

Unknown Unicast Restrain: 5120 kbps

MAC Learning : Enabled

MAC Table Limit : -

Drop Unknown : Disabled

Flooding : Enabled

Statistics : Enabled

Input statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Gateway Interface : VSI-interface 100

VXLAN ID : 10

Tunnels:

Tunnel Name Link ID State Type Flood proxy

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual Disabled

MTunnel0 0x6002710 Up Auto Disabled

ACs:

AC Link ID State Type

GE1/0/1 0 Up Manual

GE100/0/1 1 Up Manual

ECIDs:

PexGroupID ECID

1 4096

# Display detailed information about all VSIs. (Applicable to switches.)

<Sysname> display l2vpn vsi verbose

VSI Name: vpna

VSI Index : 0

VSI State : Up

MTU : 1500

Bandwidth : Unlimited

Broadcast Restrain : 5120 kbps

Multicast Restrain : 5120 kbps

Unknown Unicast Restrain: 5120 kbps

MAC Learning : Enabled

MAC Table Limit : -

Drop Unknown : Disabled

Flooding : Enabled

Statistics : Enabled

Input statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Output statistics:

Octets : 0

Packets : 0

Errors : 0

Discards : 0

Gateway Interface : VSI-interface 100

VXLAN ID : 10

Tunnels:

Tunnel Name Link ID State Type Flood proxy

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual Disabled

MTunnel0 0x6002710 Up Auto Disabled

ACs:

AC Link ID State Type

GE1/0/1 srv1000 0 Up Manual

GE100/0/1 srv10 1 Up Manual

ECIDs:

PexGroupID ECID

1 4096

Table 11 Command output

Field | Description
VSI Description | Description of the VSI. If the VSI does not have a description, the command does not display this field.
VSI State | VSI state: · Up—The VSI is up. · Down—The VSI is down. · Administratively down—The VSI has been manually shut down by using the shutdown command.
MTU | MTU on the VSI.
Bandwidth | ‌ Bandwidth limit in kbps. If no bandwidth limit is set for the VSI, Unlimited is displayed.
Broadcast Restrain | ‌ Broadcast restraint bandwidth (in kbps). If the broadcast restraint bandwidth is not set, Unlimited is displayed.
Multicast Restrain | ‌ Multicast restraint bandwidth (in kbps). If the multicast restraint bandwidth is not set, Unlimited is displayed.
Unknown Unicast Restrain | ‌ Unknown unicast restraint bandwidth (in kbps). If the unknown unicast restraint bandwidth is not set, Unlimited is displayed.
MAC Learning | State of the MAC learning feature.
MAC Table Limit | ‌ Maximum number of MAC address entries on the VSI.
MAC Learning rate | MAC address entry learning rate of the VSI.
Drop Unknown | ‌ Action on source MAC-unknown frames received after the maximum number of MAC entries is reached.
Flooding | State of the VSI's flooding feature: · Enabled—Flooding is enabled on the VSI. · Disabled—Flooding is disabled on the VSI.
Statistics | Packet statistics state: · Enabled—The packet statistics feature is enabled for the VSI. · Disabled—The packet statistics feature is disabled for the VSI.
Input statistics | Incoming traffic statistics: · Octets—Number of incoming bytes. · Packets—Number of incoming packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Output statistics | Outgoing traffic statistics: · Octets—Number of outgoing bytes. · Packets—Number of outgoing packets. · Errors—Number of error packets. · Discards—Number of discarded packets.
Gateway Interface | VSI interface name. This field is not supported by S6800 switches labeled with the following product codes: · LS-6800-32Q. · LS-6800-54QF. · LS-6800-54QT. · LS-S6800-2C. · LS-S6800-4C.
State | Tunnel state: · Up—The tunnel is operating correctly. · Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary proxy tunnel is operating correctly. ‌ · Defect—The tunnel interface is up, but BFD cannot detect the remote VTEP. · Down—The tunnel interface is down.
Type | Tunnel assignment method: · Auto—The tunnel was automatically assigned to the VXLAN: ?span style='font:7.0pt "Times New Roman"'> VXLAN IS-IS automatically assigned the tunnel to the VXLAN after VXLAN ID negotiation. ?span style='font:7.0pt "Times New Roman"'> For an EVPN network, VXLAN tunnels are automatically assigned to VXLANs. ?span style='font:7.0pt "Times New Roman"'> For a multicast-mode VXLAN, the tunnel (MTunnel) was automatically created and assigned to the VXLAN to transmit flood traffic. · Manual—The tunnel was manually assigned to the VXLAN.
Flood proxy | Flood proxy state: · Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and unknown unicast traffic to a flood proxy server through the tunnel. The flood proxy server replicates and forwards flood traffic to remote VTEPs. · Disabled—Flood proxy is disabled.
ACs | ACs that are bound to the VSI.
Link ID | AC's link ID on the VSI.
State | AC state: · Up. · Down.
Type | Type and traffic match mode of the Ethernet service instance: · Dynamic (MAC-based)—Dynamic Ethernet service instance in MAC-based traffic match mode. · Dynamic (VLAN-based)—Dynamic Ethernet service instance in VLAN-based traffic match mode. · Manual—Static Ethernet service instance in VLAN-based traffic match mode.
ECIDs | E-channel Identifier (ECID) information of the VSI. This field is displayed only when the VSI has PEX extended ports or Ethernet service instances on PEX extended ports to act as ACs. The ECID is used for flooding in the VSI.
PexGroupID | PEX group ID.
ECID | ECID of the VSI.

VXLAN commands -- Basic VXLAN commands -- display statistic mode

Use display statistic mode to display the current packet statistic collection mode.

Syntax

display statistic mode

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the current packet statistic collection mode.

<Sysname> display statistic mode

The packet statistic mode is vsi.

Related commands

statistic mode vsi

VXLAN commands -- Basic VXLAN commands -- display vxlan tunnel

Use display vxlan tunnel to display VXLAN tunnel information for VXLANs.

Syntax

display vxlan tunnel [ vxlan-id vxlan-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this command displays VXLAN tunnel information for all VXLANs.

Examples

# Display VXLAN tunnel information for all VXLANs.

<Sysname> display vxlan tunnel

Total number of VXLANs: 1

VXLAN ID: 10, VSI name: vpna, Total tunnels: 3 (3 up, 0 down, 0 defect, 0 blocked)

Tunnel name Link ID State Type Flood proxy

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual Disabled

MTunnel0 0x6002710 Up Auto Disabled

# Display VXLAN tunnel information for VXLAN 10.

<Sysname> display vxlan tunnel vxlan-id 10

VXLAN ID: 10, VSI name: vpna, Total tunnels: 3 (3 up, 0 down, 0 defect, 0 blocked)

Tunnel name Link ID State Type Flood proxy

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual Disabled

MTunnel0 0x6002710 Up Auto Disabled

Table 12 Command output

Field | Description
Link ID | Tunnel's link ID in the VXLAN.
State | Tunnel state: · Up—The tunnel is operating correctly. · Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary proxy tunnel is operating correctly. · Defect—The tunnel interface is up, but BFD cannot detect the remote VTEP. · Down—The tunnel interface is down.
Type | Tunnel assignment method: · Auto—The tunnel was automatically assigned to the VXLAN: ?span style='font:7.0pt "Times New Roman"'> VXLAN IS-IS automatically assigned the tunnel to the VXLAN after VXLAN ID negotiation. ?span style='font:7.0pt "Times New Roman"'> For an EVPN network, VXLAN tunnels are automatically assigned to VXLANs. ?span style='font:7.0pt "Times New Roman"'> For a multicast-mode VXLAN, the tunnel (MTunnel) was automatically created and assigned to the VXLAN to transmit flood traffic. · Manual—The tunnel was manually assigned to the VXLAN.
Flood proxy | Flood proxy state: · Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and unknown unicast traffic to a flood proxy server through the tunnel. The flood proxy server replicates and forwards flood traffic to remote VTEPs. · Disabled—Flood proxy is disabled.

Related commands

negotiate-vni enable

tunnel

vxlan

VXLAN commands -- Basic VXLAN commands -- emulate-ping vxlan

Use emulate-ping vxlan to test the reachability of a remote VM.

Syntax

emulate-ping vxlan [ -c count | -m interval | -s packet-size | -t time-out ] * vxlan-id vxlan-id source-mac mac-address destination-mac mac-address

Views

Any view

Predefined user roles

network-admin

mdc-admin

Parameters

-c count: Specifies the number of ICMP echo requests to be sent. The value range is 1 to 4294967295, and the default value is 5.

-m interval: Specifies the interval for sending ICMP echo requests. The value range is 1 to 65535 milliseconds, and the default value is 200 milliseconds.

-s packet-size: Specifies the length of ICMP echo quests (IP and ICMP headers not included). The value range is 20 to 8100 bytes, and the default value is 56 bytes.

-t time-out: Specifies the ICMP echo reply timeout period. The value range is 0 to 65535 milliseconds, and the default value is 2000 milliseconds. If the device does not receive an ICMP echo reply within the timeout period after sending an ICMP echo request, the device determines that the ICMP echo reply times out.

vxlan-id vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.

source-mac mac-address: Specifies the source MAC address of ICMP echo requests. The MAC address must be a local VM address in the MAC address table of the specified VXLAN.

destination-mac mac-address: Specifies the destination MAC address of ICMP echo requests. The MAC address must be a remote VM address in the MAC address table of the specified VXLAN.

Usage guidelines

This command enables the device to test the reachability of a remote VM by simulating a local VM to send ICMP echo requests. The requests are encapsulated in Layer 2 data frames and then sent to the remote VM in the specified VXLAN. The device determines the reachability of the remote VM based on the response time and number of received ICMP echo replies. You can view the packet transmission statistics in the command output.

Examples

# Simulate local VM 1ea3-c0be-0206 to test the reachability of remote VM 1ea3-b77b-0106 in VXLAN 100.

<Sysname> emulate-ping vxlan vxlan-id 100 source-mac 1ea3-c0be-0206 destination-mac 1ea3-b77b-0106

Emulate ping in VXLAN 100: source MAC 1ea3-c0be-0206, destination MAC 1ea3-b77b-0106, 56 data bytes.

Press CTRL_C to break.

56 bytes from 100.1.2.1: ICMP_seq=0 time=1.114 ms

56 bytes from 100.1.2.1: ICMP_seq=1 time=1.073 ms

56 bytes from 100.1.2.1: ICMP_seq=2 time=1.123 ms

56 bytes from 100.1.2.1: ICMP_seq=3 time=1.781 ms

56 bytes from 100.1.2.1: ICMP_seq=4 time=0.933 ms

--- Ping statistics for VXLAN 100 ---

5 packets transmitted, 5 packets received, 0.0% packet loss

Round-trip min/avg/max/std-dev=0.933/1.205/1.781/0.296 ms

Table 13 Command output

Field | Description
56 bytes from 100.1.2.1: ICMP_seq=0 time=1.114 ms | Statistics about the received ICMP echo reply from the VM at 100.1.2.1. If no reply is received within the timeout period, nothing is displayed. · bytes—Number of bytes in the ICMP echo reply. · ICMP_seq—Sequence number, used to determine whether a request is lost, disordered, or repeated. · time—Response time.
5 packets transmitted | Number of transmitted ICMP echo requests.
5 packets received | Number of received ICMP echo replies.
0.0% packet loss | Percentage of unacknowledged requests.
Round-trip min/avg/max/std-dev=0.933/1.205/1.781/0.296 ms | Minimum/average/maximum/standard deviation response time in milliseconds.

VXLAN commands -- Basic VXLAN commands -- encapsulation

Use encapsulation to configure a frame match criterion for an Ethernet service instance.

Use undo encapsulation to restore the default.

Syntax

encapsulation c-vid { vlan-id | vlan-id-list }

encapsulation s-vid { vlan-id | vlan-id-list } [ only-tagged ]

encapsulation s-vid { vlan-id | vlan-id-list } c-vid { vlan-id-list | all }

encapsulation { default | tagged | untagged }

undo encapsulation [ { c-vid | s-vid } vlan-id-list ]

Default

An Ethernet service instance does not contain a frame match criterion.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Parameters

s-vid: Matches frames that are tagged with the specified outer 802.1Q VLAN IDs.

c-vid: Matches frames that are tagged with the specified inner 802.1Q VLAN IDs.

vlan-id: Specifies an 802.1Q VLAN ID in the range of 1 to 4094.

vlan-id-list: Specifies a space-separated list of up to eight VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the format of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094.

only-tagged: Matches tagged frames. If the outer 802.1Q VLAN is not the PVID, the matching result does not differ, whether or not you specify the only-tagged keyword. If the outer 802.1Q VLAN is the PVID, the matching result depends on whether or not the only-tagged keyword is specified.

· To match only PVID-tagged frames, specify the only-tagged keyword.

· To match both untagged frames and PVID-tagged frames, do not specify the only-tagged keyword.

all: Specifies all 802.1Q VLAN IDs.

default: Matches frames that do not match any other Ethernet service instance on the interface. On an interface, you can configure this criterion only in one Ethernet service instance. The Ethernet service instance matches any frames if it is the only instance on the interface.

tagged: Matches any frames that have an 802.1Q VLAN tag.

untagged: Matches any frames that do not have an 802.1Q VLAN tag.

Usage guidelines

An Ethernet service instance can contain only one frame match criterion. In the following cases, you can execute the encapsulation command multiple times to modify the frame match criterion of an Ethernet service instance:

· You have configured the frame match criterion by using the encapsulation s-vid command.

?span style='font:7.0pt "Times New Roman"'> You can repeat the encapsulation s-vid command to add matching outer VLAN IDs to the criterion. For example, if you execute the encapsulation s-vid 100 and encapsulation s-vid 200 commands, the Ethernet service instance matches frames tagged with outer VLAN IDs 100 and 200.

?span style='font:7.0pt "Times New Roman"'> You can repeat the undo encapsulation s-vid command to remove matching outer VLAN IDs from the criterion. If all matching outer VLAN IDs are removed, the mapping between the Ethernet service instance and the VSI is removed automatically.

· You have configured the frame match criterion by using the encapsulation c-vid command.

?span style='font:7.0pt "Times New Roman"'> You can repeat the encapsulation c-vid command to add matching inner VLAN IDs to the criterion. For example, if you execute the encapsulation c-vid 300 and encapsulation c-vid 400 commands, the Ethernet service instance matches frames tagged with inner VLAN IDs 300 and 400.

?span style='font:7.0pt "Times New Roman"'> You can repeat the undo encapsulation c-vid command to remove matching inner VLAN IDs from the criterion. If all matching inner VLAN IDs are removed, the mapping between the Ethernet service instance and the VSI is removed automatically.

· You have configured the frame match criterion as matching both inner and outer VLAN IDs.

?span style='font:7.0pt "Times New Roman"'> You can repeat the encapsulation s-vid c-vid command to add matching outer and inner VLAN IDs to the criterion. All the specified outer and inner VLAN IDs take effect. For example, if you execute the encapsulation s-vid 100 c-vid 100 and encapsulation s-vid 200 c-vid 200 commands, the Ethernet service instance matches frames tagged with outer VLAN IDs 100 and 200 and inner VLAN IDs 100 and 200.

?span style='font:7.0pt "Times New Roman"'> You can repeat the encapsulation c-vid and encapsulation s-vid command to add matching inner and outer VLAN IDs to the criterion. All the specified outer and inner VLAN IDs take effect.

?span style='font:7.0pt "Times New Roman"'> You can execute the undo form of the previously mentioned commands to remove matching outer and inner VLAN IDs from the criterion. However, you cannot remove all outer and inner VLAN IDs from the criterion.

You cannot repeat the encapsulation command to modify the match criterion of an Ethernet service instance if you have configured the frame match criterion by using the following commands:

· encapsulation s-vid { vlan-id | vlan-id-list } only-tagged.

· encapsulation tagged.

· encapsulation untagged.

· encapsulation default.

To change the match criterion, first execute the undo encapsulation command without any parameters to remove the original match criterion. The command also automatically removes the mapping between the Ethernet service instance and the VSI.

If the match criteria of Ethernet service instances overlap on an interface, the frame matching method depends on the device model.

When you configure the encapsulation default command for an Ethernet service instance on a Layer 2 Ethernet interface or Layer 2 aggregate interface, follow these restrictions:

· If the Ethernet service instance uses the VLAN access mode, make sure no other Ethernet service instances exist on the interface.

· If the Ethernet service instance uses the Ethernet access mode, the interface can host multiple Ethernet service instances. Traffic that does not match any other Ethernet service instance matches the Ethernet service instance that uses the default criterion.

When you configure frame match criteria of different Ethernet service instances on an interface, follow these restrictions and guidelines:

· If both the encapsulation s-vid and encapsulation s-vid c-vid criteria exist on different Ethernet service instances, the specified outer VLAN IDs of different criteria can be identical. However, the outer VLAN IDs cannot overlap.

· If multiple Ethernet service instances have the encapsulation c-vid criterion, the specified inner VLAN IDs cannot be identical or overlap.

· If multiple Ethernet service instances match both the inner and outer VLAN IDs, the following restrictions apply:

?span style='font:7.0pt "Times New Roman"'> If the matching outer VLAN IDs are different, the inner VLAN IDs can be identical or overlap.

?span style='font:7.0pt "Times New Roman"'> If the matching outer VLAN IDs are the same, the inner VLAN IDs cannot be identical or overlap.

Examples

# Configure Ethernet service instance 1 on GigabitEthernet 1/0/1 to match frames that have an outer 802.1Q VLAN ID of 111.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 1

[Sysname-GigabitEthernet1/0/1-srv1] encapsulation s-vid 111

Related commands

display l2vpn service-instance

VXLAN commands -- Basic VXLAN commands -- flooding disable (Ethernet service instance view)

Use flooding disable to confine the flood traffic of an Ethernet service instance.

Use undo flooding disable to restore the default.

Syntax

flooding disable { all-port | source-port }

undo flooding disable

Default

An Ethernet service instance sends flood traffic to the other Ethernet service instances of the same VSI.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Parameters

all-port: Disables flooding to all the other Ethernet service instances of the same VSI.

source-port: Disables flooding to the other Ethernet service instances of the same VSI on the local port.

Usage guidelines

To prevent broadcast storms, use this command to confine the flood traffic of Ethernet service instances.

Examples

# Disable Ethernet service instance 10 from flooding traffic to the other Ethernet service instances of the same VSI on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 10

[Sysname-GigabitEthernet1/0/1-srv10] flooding disable source-port

VXLAN commands -- Basic VXLAN commands -- flooding disable (VSI view)

Use flooding disable to disable flooding for a VSI.

Use undo flooding disable to enable flooding for a VSI.

Syntax

flooding disable { all | { broadcast | unknown-multicast | unknown-unicast } * }

undo flooding disable

Default

Flooding is enabled for a VSI.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

all: Specifies broadcast, unknown unicast, and unknown multicast traffic.

broadcast: Specifies broadcast traffic.

unknown-multicast: Specifies unknown multicast traffic.

unknown-unicast: Specifies unknown unicast traffic.

Usage guidelines

By default, the device floods broadcast, unknown unicast, and unknown multicast frames received from the local site to the following interfaces in the frame's VXLAN:

· All site-facing interfaces except for the incoming interface.

· All VXLAN tunnel interfaces.

To confine a kind of flood traffic to the site-facing interfaces, use this command to disable flooding for that kind of flood traffic on the VSI bound to the VXLAN. The VSI will not flood the corresponding frames to VXLAN tunnel interfaces.

The unknown-multicast or unknown-unicast keyword cannot be used alone. You must specify both of them.

Examples

# Disable flooding of broadcast traffic for VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] flooding disable broadcast

VXLAN commands -- Basic VXLAN commands -- forwarding mode

Use forwarding mode to set the VXLAN or VXLAN-DCI Layer 2 forwarding mode.

Use undo forwarding mode to restore the default.

Syntax

forwarding mode { double-vid | mac | svid-only }

undo forwarding mode

Default

MAC forwarding mode is used.

Views

Ethernet service instance view

VXLAN tunnel interface view

VXLAN-DCI tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

double-vid: Specifies double-VID forwarding mode, in which the device performs MAC address table lookup based on both the inner and outer VLAN IDs.

mac: Specifies MAC forwarding mode, in which the device performs MAC address table lookup based on the destination MAC address.

svid-only: Specifies SVID-only forwarding mode, in which the device performs MAC address lookup based on the outer VLAN ID.

Usage guidelines

If double-VID or SVID-only forwarding mode is used, make sure the VSI's MAC address table contains VLAN-based MAC address entries. The entries can be manually created or dynamically learned.

Examples

# Configure Tunnel 0 to use double-VID forwarding mode for VXLAN Layer 2 traffic.

<Sysname> system-view

[Sysname] interface tunnel 0

[Sysname-Tunnel0] forwarding mode double-vid

Related commands

learning mode

mac-address static vsi

vlan-forwarding static

VXLAN commands -- Basic VXLAN commands -- group

Use group to assign a VXLAN a multicast group address for flood traffic, and specify a source IP address for multicast VXLAN packets.

Use undo group to restore the default.

Syntax

group group-address source source-address

undo group group-address source source-address

Default

A VXLAN uses unicast mode (head-end replication) for flood traffic. No multicast group address or source IP address is specified for multicast VXLAN packets.

Views

VXLAN view

Predefined user roles

network-admin

mdc-admin

Parameters

group-address: Specifies a multicast address in the range of 224.0.1.0 to 239.255.255.255.

source source-address: Specifies a source IP address for multicast VXLAN packets.

Usage guidelines

To reduce traffic sent to the transport network, use multicast mode if the network has dense flood traffic or many VTEPs.

The multicast mode supports the following multicast methods:

· PIM—VTEPs and transport network devices run PIM to generate multicast forwarding entries. On a VTEP, you can use the IP address of a loopback interface as the source IP address for multicast VXLAN packets. If the VTEP has multiple transport-facing interfaces, PIM dynamically selects the outgoing interfaces for multicast VXLAN packets.

· IGMP host—VTEPs and transport network devices run PIM and IGMP to generate multicast forwarding entries.

?span style='font:7.0pt "Times New Roman"'> Transport-facing interfaces of VTEPs act as IGMP hosts.

?span style='font:7.0pt "Times New Roman"'> Transport network devices connected to a VTEP run IGMP.

?span style='font:7.0pt "Times New Roman"'> All transport network devices run PIM.

On a VTEP, you must use the IP address of the transport-facing interface as the source IP address for multicast VXLAN packets. If the VTEP has multiple transport-facing interfaces, multicast VXLAN packets are sent to the transport network through the interface that provides the source IP address for multicast VXLAN packets.

VTEPs in a multicast-mode VXLAN can use different multicast methods.

To forward multicast traffic correctly, you must use the source IP address of an up VXLAN tunnel as the source IP address for multicast VXLAN packets.

For multicast-mode VXLANs, transport network devices must maintain multicast group and forwarding information. To reduce the multicast forwarding entries maintained by transport network devices, assign a multicast group address to multiple VXLANs. The VTEP separates traffic between VXLANs by VXLAN IDs.

| NOTE: For VXLANs that use the same multicast group address, you must configure the same source IP address for their multicast VXLAN packets.

If you execute the group command multiple times for a VXLAN, the most recent configuration takes effect.

Examples

# Set the multicast group address to 233.1.1.1 for flood traffic in VXLAN 100. Set the source IP address to 2.1.1.1 for multicast VXLAN packets.

<Sysname> system-view

[Sysname] vsi aaa

[Sysname-vsi-aaa] vxlan 100

[Sysname-vsi-aaa-vxlan-100] group 233.1.1.1 source 2.1.1.1

Related commands

igmp host enable

pim dm (IP Multicast Command Reference)

pim sm (IP Multicast Command Reference)

VXLAN commands -- Basic VXLAN commands -- hardware-resource vxlan

Use hardware-resource vxlan to set the VXLAN hardware resource mode.

Use undo hardware-resource vxlan to restore the default.

Syntax

hardware-resource vxlan { mac | normal }

undo hardware-resource vxlan

Default

The VXLAN hardware resource mode is normal.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

mac: Specifies the MAC address mode.

normal: Specifies the normal mode.

Usage guidelines

The creation of VXLAN tunnels and MAC address entries requires hardware resources. The hardware resources on the device are limited. You can use this command to set the hardware resource mode for VXLAN.

· MAC address mode—Assigns more hardware resources to MAC address entries.

· Normal mode—Assigns more hardware resources to VXLAN tunnels. In this mode, a VXLAN tunnel interface can be the outgoing interface of a network route.

Examples

# Set the VXLAN hardware resource mode to MAC address.

<Sysname> system-view

[Sysname] hardware-resource vxlan mac

Related commands

display hardware-resource vxlan

VXLAN commands -- Basic VXLAN commands -- igmp host enable

Use igmp host enable to enable the IGMP host feature on an interface.

Use undo igmp host enable to disable the IGMP host feature on an interface.

Syntax

igmp host enable

undo igmp host enable

Default

The IGMP host feature is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

You must configure an interface as an IGMP host if its IP address is the source IP address of multicast VXLAN packets. The IGMP host feature enables the interface to send IGMP reports in response to IGMP queries before it can receive traffic from a multicast group.

For this command to take effect, you must use the multicast routing command to enable IP multicast routing.

Examples

# Enable IP multicast routing, and then enable the IGMP host feature on GigabitEthernet 1/0/1. (Applicable to routers.)

<Sysname> system-view

[Sysname] multicast routing

[Sysname-mrib] quit

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] igmp host enable

# Enable IP multicast routing, and then enable the IGMP host feature on VLAN-interface 10. (Applicable to switches.)

<Sysname> system-view

[Sysname] multicast routing

[Sysname-mrib] quit

[Sysname] interface vlan-interface 10

[Sysname-Vlan-interface10] igmp host enable

Related commands

display igmp host group

group

multicast routing (IP Multicast Command Reference)

VXLAN commands -- Basic VXLAN commands -- l2vpn enable

Use l2vpn enable to enable L2VPN.

Use undo l2vpn enable to disable L2VPN.

Syntax

l2vpn enable

undo l2vpn enable

Default

L2VPN is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

You must enable L2VPN before you can configure L2VPN settings.

Examples

# Enable L2VPN.

<Sysname> system-view

[Sysname] l2vpn enable

VXLAN commands -- Basic VXLAN commands -- l2vpn mac-address software-learning enable

Use l2vpn mac-address software-learning enable to enable software-based MAC learning on an interface.

Use undo l2vpn mac-address software-learning enable to disable software-based MAC learning on an interface.

Syntax

l2vpn mac-address software-learning enable

undo l2vpn mac-address software-learning enable

Default

Hardware-based MAC learning is used.

Views

Layer 2 aggregate interface view

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command is applicable to SDN networks.

To reduce broadcast traffic in an SDN network, the controller synchronizes the MAC addresses that each VTEP learns among all VTEPs. On a VTEP, an interface can learn MAC addresses in hardware or software.

· In hardware-based learning mode, the software periodically obtains new MAC addresses from the hardware and advertises the MAC addresses to the controller.

· In software-based learning mode, the software instantly issues new MAC addresses to the hardware and the controller as soon as they are learned.

Software-based MAC learning shortens the interval at which the VTEP advertises MAC address reachability information to the controller. However, this mode is resource intensive. When you use this mode, you must fully understand its impact on the device performance.

Examples

# Enable software-based MAC learning on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] l2vpn mac-address software-learning enable

VXLAN commands -- Basic VXLAN commands -- learning mode

Use learning mode to set the MAC learning mode.

Use undo learning mode to restore the default.

Syntax

learning mode { disable | double-vid | mac | svid-only }

undo learning mode

Default

Source MAC learning mode is enabled.

Views

Ethernet service instance view

VXLAN tunnel interface view

VXLAN-DCI tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

disable: Disables MAC learning. In this situation, only static MAC address entries are available.

double-vid: Specifies double-VID learning mode, in which the device generates MAC address entries based on the inner and outer VLAN IDs (CVLAN and SVLAN tags) of data frames. The MAC address in a MAC address entry uses the 0-SVLAN tag-CVLAN tag format.

mac: Specifies source MAC learning mode, in which the device generates MAC address entries based on the source MAC addresses of data frames.

svid-only: Specifies SVID-only learning mode, in which the device generates MAC address entries based on the outer VLAN IDs (SVLAN tags) of data frames. The MAC address in a MAC address entry uses the 0-SVLAN tag-0 format.

Usage guidelines

The outgoing interface in a MAC address entry is the Ethernet service instance or VXLAN tunnel interface where the entry is learned.

When you use this command to set the MAC learning mode for VXLAN, follow these restrictions and guidelines:

· To ensure correct forwarding, the tunnels and Ethernet service instances of a VSI must use matching MAC learning modes and VXLAN Layer 2 forwarding modes. For example, a VSI has an Ethernet service instance and a VXLAN tunnel. If the Ethernet service instance uses MAC forwarding mode, the VXLAN tunnel must use source MAC learning mode.

· If an Ethernet service instance on a Layer 2 Ethernet interface uses source MAC, double-VID, or SVID-only learning mode, MAC address learning must be enabled on the interface.

· If a VXLAN tunnel uses source MAC, double-VID, or SVID-only learning mode, remote-MAC address learning must be enabled on the tunnel.

When you use this command to set the MAC learning mode for VXLAN-DCI, follow these restrictions and guidelines:

· To ensure correct forwarding, the VXLAN tunnels and VXLAN-DCI tunnels of a VSI must use matching MAC learning modes and Layer 2 forwarding modes. For example, a VSI has a VXLAN tunnel and a VXLAN-DCI tunnel. If the VXLAN tunnel uses MAC forwarding mode, the VXLAN-DCI tunnel must use source MAC learning mode. If the VXLAN-DCI tunnel uses MAC forwarding mode, the VXLAN tunnel must use source MAC learning mode.

· If a VXLAN or VXLAN-DCI tunnel uses source MAC, double-VID, or SVID-only learning mode, remote-MAC address learning must be enabled on the tunnel.

Examples

# Enable double-VID learning mode on Tunnel 0.

<Sysname> system-view

[Sysname] interface tunnel 0

[Sysname-Tunnel0] learning mode double-vid

Related commands

forwarding mode

mac-address mac-learning enable

mac-address static vsi

vlan-forwarding static

vxlan tunnel mac-learning disable

VXLAN commands -- Basic VXLAN commands -- mac-address mac-learning priority

Use mac-address mac-learning priority to set the MAC learning priority of an Ethernet service instance.

Use undo mac-address mac-learning priority to restore the default.

Syntax

mac-address mac-learning priority { high | low }

undo mac-address mac-learning priority

Default

The MAC learning priority of an Ethernet service instance is low.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Parameters

high: Specifies high MAC learning priority.

low: Specifies low MAC learning priority.

Usage guidelines

This setting takes effect only after the Ethernet service instance is mapped to a VSI.

A VSI uses the MAC learning priority to control MAC address learning of its Ethernet service instances. An Ethernet service instance with high MAC learning priority takes precedence over an Ethernet service instance with low MAC learning priority when they learn the same MAC address. For example:

· A MAC address entry of a high-priority Ethernet service instance can be overwritten only when the MAC address is learned on another high-priority Ethernet service instance.

· A MAC address entry of a low-priority Ethernet service instance is overwritten when the MAC address is learned on a high-priority Ethernet service instance or another low-priority Ethernet service instance.

Examples

# Set the MAC learning priority to high for Ethernet service instance 1 on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 1

[Sysname-GigabitEthernet1/0/1-srv1] mac-address mac-learning priority high

VXLAN commands -- Basic VXLAN commands -- mac-address static vsi

Use mac-address static vsi to add a static MAC address entry for a VXLAN VSI.

Use undo mac-address static vsi to remove a static MAC address entry for a VXLAN VSI.

Syntax

mac-address static mac-address { interface interface-type interface-number service-instance instance-id | interface tunnel tunnel-number } vsi vsi-name

undo mac-address static [ mac-address ] [ interface interface-type interface-number service-instance instance-id | interface tunnel tunnel-number ] vsi vsi-name

Default

VXLAN VSIs do not have static MAC address entries.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

mac-address: Specifies a MAC address in H-H-H format. Do not specify a multicast MAC address or an all-zeros MAC address. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001. For static VLAN-based MAC address entries, the value for this argument must use the 0-SVLAN tag-0 or 0-SVLAN tag-CVLAN tag format.

interface interface-type interface-number service-instance instance-id: Specifies an Ethernet service instance on an interface. The interface-type interface-number argument specifies the interface by its type and number. The instance-id argument specifies the Ethernet service instance by its ID in the range of 1 to 4096. This option applies to local MAC addresses.

interface tunnel tunnel-number: Specifies a VXLAN or VXLAN-DCI tunnel interface by its tunnel interface number. The value range for the tunnel-number argument varies by device model. The tunnel interface must already exist. This option applies to remote MAC addresses.

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

A local MAC address is the MAC address of a VM in the local site. Local MAC entries include manually added entries and dynamically learned entries.

A remote MAC address is the MAC address of a VM in a remote site. Remote MAC entries include manually added MAC entries, dynamically learned MAC entries, and MAC entries advertised through BGP EVPN.

When you add a local MAC address entry, make sure the specified VSI has been created and the specified Ethernet service instance has been mapped to the VSI. When you add a remote MAC address entry, make sure the VSI's VXLAN has been created and specified on the VXLAN or VXLAN-DCI tunnel.

Do not configure static remote-MAC entries for tunnels that are automatically established by using EVPN.

· EVPN re-establishes tunnels if the transport-facing interface goes down and then comes up. If you have configured static remote-MAC entries, the entries are deleted when the tunnels are re-established.

· EVPN re-establishes tunnels if you perform configuration rollback. If the tunnel IDs change during tunnel re-establishment, configuration rollback fails, and static remote-MAC entries on the tunnels cannot be restored.

The undo mac-address static vsi vsi-name command removes all static MAC address entries for a VSI.

Examples

# Add MAC address 000f-e201-0101 to VSI vsi1. Specify Tunnel-interface 1 as the outgoing interface.

<Sysname> system-view

[Sysname] mac-address static 000f-e201-0101 interface tunnel 1 vsi vsi1

# Add MAC address 000f-e201-0102 of Ethernet service instance 1 to VSI vsi1. Specify GigabitEthernet 1/0/1 as the outgoing interface.

<Sysname> system-view

[Sysname] mac-address static 000f-e201-0102 interface gigabitethernet 1/0/1 service-instance 1 vsi vsi1

Related commands

vxlan tunnel mac-learning disable

VXLAN commands -- Basic VXLAN commands -- mac-based ac

Use mac-based ac to enable MAC-based traffic match mode for dynamic Ethernet service instances on an interface.

Use undo mac-based ac to disable MAC-based traffic match mode for dynamic Ethernet service instances on an interface.

Syntax

mac-based ac

undo mac-based ac

Default

VLAN-based traffic match mode is used for dynamic Ethernet service instances.

Views

Layer 2 aggregate interface view

Layer 2 Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

The 802.1X or MAC authentication feature can use the authorization VSI, the guest VSI, the Auth-Fail VSI, and the critical VSI to control the access of users to network resources. When assigning a user to a VSI, 802.1X or MAC authentication sends the VXLAN feature the VSI information and the user's access information, including access interface, VLAN, and MAC address. Then the VXLAN feature creates a dynamic Ethernet service instance for the user and maps it to the VSI.

A dynamic Ethernet service instance supports the following traffic match modes:

· VLAN-based mode—Matches frames by VLAN ID.

· MAC-based mode—Matches frames by VLAN ID and source MAC address.

To use MAC-based traffic match mode for dynamic Ethernet service instances, you must enable MAC authentication or 802.1X authentication that uses MAC-based access control.

This command takes effect only on dynamic Ethernet service instances. Static Ethernet service instances created by using the service-instance command match traffic only by the VLAN IDs specified by using the encapsulation command.

You cannot change the traffic match mode when dynamic Ethernet service instances already exist on an interface.

Examples

# Enable MAC-based traffic match mode for dynamic Ethernet service instances on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] mac-based ac

Related commands

display l2vpn service-instance

VXLAN commands -- Basic VXLAN commands -- reserved vxlan

Use reserved vxlan to specify a reserved VXLAN.

Use undo reserved vxlan to restore the default.

Syntax

reserved vxlan vxlan-id

undo reserved vxlan

Default

No VXLAN has been reserved.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.

Usage guidelines

You can specify only one reserved VXLAN on the VTEP. The reserved VXLAN cannot be the VXLAN created on any VSI.

Examples

# Specify VXLAN 10000 as the reserved VXLAN.

<Sysname> system-view

[Sysname] reserved vxlan 10000

VXLAN commands -- Basic VXLAN commands -- reset arp suppression vsi

Use reset arp suppression vsi to clear ARP flood suppression entries on VSIs.

Syntax

reset arp suppression vsi [ name vsi-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears ARP flood suppression entries on all VSIs.

Examples

# Clear ARP flood suppression entries on all VSIs.

<Sysname> reset arp suppression vsi

This command will delete all entries. Continue? [Y/N]:y

Related commands

arp suppression enable

display arp suppression vsi

VXLAN commands -- Basic VXLAN commands -- reset l2vpn mac-address

Use reset l2vpn mac-address to clear dynamic MAC address entries on VSIs.

Syntax

reset l2vpn mac-address [ vsi vsi-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears all dynamic MAC address entries on all VSIs.

Usage guidelines

Use this command when the number of dynamic MAC address entries reaches the limit or the device learns incorrect MAC addresses.

Examples

# Clear the dynamic MAC address entries on VSI vpn1.

<Sysname> reset l2vpn mac-address vsi vpn1

Related commands

display l2vpn mac-address vsi

VXLAN commands -- Basic VXLAN commands -- reset l2vpn statistics ac

Use reset l2vpn statistics ac to clear packet statistics on ACs.

Syntax

reset l2vpn statistics ac [ interface interface-type interface-number [ service-instance instance-id ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

interface interface-type interface-number: Specifies an interface by its type and number.

service-instance instance-id: Specifies an Ethernet service instance ID in the range of 1 to 4096. You must specify this option if the interface interface-type interface-number option specifies a Layer 2 interface. You cannot specify this option if the interface interface-type interface-number option specifies a Layer 3 interface.

Usage guidelines

If you do not specify any parameters, this command clears packet statistics on all ACs.

Examples

# Clear packet statistics for Layer 3 interface GigabitEthernet 1/0/1. (Applicable to routers.)

<Sysname> reset l2vpn statistics ac interface gigabitethernet 1/0/1

# Clear packet statistics for Ethernet service instance 1 on GigabitEthernet 1/0/1. (Applicable to switches.)

<Sysname> reset l2vpn statistics ac interface gigabitethernet 1/0/1 service-instance 1

Related commands

ac statistics enable

display l2vpn interface

display l2vpn service-instance verbose

statistics enable (Ethernet service instance view)

VXLAN commands -- Basic VXLAN commands -- reset l2vpn statistics vsi

Use reset l2vpn statistics vsi to clear packet statistics on VSIs.

Syntax

reset l2vpn statistics vsi [ name vsi-name ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears packet statistics on all VSIs.

Examples

# Clear packet statistics on all VSIs.

<Sysname> reset l2vpn statistics vsi

Related commands

statistics enable (VSI view)

VXLAN commands -- Basic VXLAN commands -- restrain

Use restrain to set broadcast, multicast, or unknown unicast restraint bandwidth for a VSI.

Use undo restrain to restore the default.

Syntax

restrain { broadcast | multicast | unknown-unicast } bandwidth

undo restrain { broadcast | multicast | unknown-unicast }

Default

The default setting for this command varies by device model.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

broadcast: Specifies the broadcast restraint bandwidth.

multicast: Specifies the multicast restraint bandwidth.

unknown-unicast: Specifies the unknown unicast restraint bandwidth. Unknown unicast packets refer to the unicast packets whose destination MAC addresses are not in the MAC address table of the VSI.

bandwidth: Specifies the broadcast, multicast, or unknown unicast restraint bandwidth, in the range of 64 to 4194303 kbps.

Usage guidelines

When the bandwidth of incoming broadcast, multicast, or unknown unicast traffic on VXLAN tunnels of a VSI exceeds the configured restraint bandwidth, the VSI drops the exceeding traffic.

If you use both the restrain and bandwidth commands on a VSI, the effects of these commands vary by device model.

Examples

# Set the broadcast restraint bandwidth, multicast restraint bandwidth, and unknown unicast restraint bandwidth to 100 kbps for VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] restrain broadcast 100

[Sysname-vsi-vpn1] restrain multicast 100

[Sysname-vsi-vpn1] restrain unknown-unicast 100

Related commands

display l2vpn vsi

VXLAN commands -- Basic VXLAN commands -- rewrite inbound tag

Use rewrite inbound tag to configure the VLAN tag processing rule for incoming traffic.

Use undo rewrite inbound tag to restore the default.

Syntax

rewrite inbound tag { nest { c-vid vlan-id | s-vid vlan-id [ c-vid vlan-id ] } | remark { { 1-to-1 | 2-to-1 } { c-vid vlan-id | s-vid vlan-id } | { 1-to-2 | 2-to-2 } s-vid vlan-id c-vid vlan-id } | strip { c-vid | s-vid [ c-vid ] } } [ symmetric ]

undo rewrite inbound tag

Default

VLAN tags of incoming traffic are not processed.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Parameters

nest: Adds VLAN tags.

c-vid: Specifies an inner VLAN tag.

s-vid: Specifies an outer VLAN tag.

vlan-id: Specifies a VLAN ID in the range of 1 to 4094.

remark: Maps VLAN tags.

1-to-1: Performs one-to-one mapping to replace one VLAN tag of packets with the specified VLAN tag.

2-to-1: Performs two-to-one mapping to replace the outer and inner VLAN tags of double tagged packets with the specified VLAN tag.

1-to-2: Performs one-to-two mapping to replace the VLAN tag of single tagged packets with the specified outer and inner VLAN tags.

2-to-2: Performs two-to-two mapping to replace the outer and inner VLAN tags of double tagged packets with the specified outer and inner VLAN tags.

strip: Removes VLAN tags.

symmetric: Applies the reverse VLAN tag processing rule to outgoing traffic.

Usage guidelines

To modify the VLAN tag processing rule for incoming traffic, you must first delete the existing rule by using the undo rewrite inbound tag command.

When you use this command, follow these restrictions:

· The rewrite inbound tag nest s-vid vlan-id c-vid vlan-id command does not take effect on tagged packets.

· The rewrite inbound tag nest s-vid vlan-id command does not take effect on double tagged packets.

· The rewrite inbound tag nest c-vid vlan-id command does not take effect.

· You cannot both specify the symmetric keyword in this command and configure the rewrite outbound tag command.

Examples

# Configure Ethernet service instance 1 on GigabitEthernet 1/0/1 to replace outer VLAN tag 10 with outer VLAN tag 100 for incoming traffic.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 1

[Sysname-GigabitEthernet1/0/1-srv1] encapsulation s-vid 10

[Sysname-GigabitEthernet1/0/1-srv1] rewrite inbound tag remark 1-to-1 s-vid 100

VXLAN commands -- Basic VXLAN commands -- rewrite outbound tag

Use rewrite outbound tag to configure the VLAN tag processing rule for outgoing traffic.

Use undo rewrite outbound tag to restore the default.

Syntax

rewrite outbound tag { nest { c-vid vlan-id | s-vid vlan-id [ c-vid vlan-id ] } | remark { { 1-to-1 | 2-to-1 } { c-vid vlan-id | s-vid vlan-id } | { 1-to-2 | 2-to-2 } s-vid vlan-id c-vid vlan-id } | strip { c-vid | s-vid [ c-vid ] } }

undo rewrite outbound tag

Default

VLAN tags of outgoing traffic are not processed.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Parameters

nest: Adds VLAN tags.

c-vid: Specifies an inner VLAN tag.

s-vid: Specifies an outer VLAN tag.

vlan-id: Specifies a VLAN ID in the range of 1 to 4094.

remark: Maps VLAN tags.

1-to-1: Performs one-to-one mapping to replace one VLAN tag of packets with the specified VLAN tag.

2-to-1: Performs two-to-one mapping to replace the outer and inner VLAN tags of double tagged packets with the specified VLAN tag.

1-to-2: Performs one-to-two mapping to replace the VLAN tag of single tagged packets with the specified outer and inner VLAN tags.

2-to-2: Performs two-to-two mapping to replace the outer and inner VLAN tags of double tagged packets with the specified outer and inner VLAN tags.

strip: Removes VLAN tags.

Usage guidelines

To modify the VLAN tag processing rule for outgoing traffic, you must first delete the existing rule by using the undo rewrite outbound tag command.

When you use this command, follow these restrictions:

· The rewrite outbound tag nest s-vid vlan-id c-vid vlan-id command does not take effect on tagged packets.

· The rewrite outbound tag nest s-vid vlan-id command does not take effect on double tagged packets.

· The rewrite outbound tag nest c-vid vlan-id command does not take effect.

· You cannot both configure this command and specify the symmetric keyword in the rewrite inbound tag command.

Examples

# Configure Ethernet service instance 1 on GigabitEthernet 1/0/1 to replace outer VLAN tag 10 with outer VLAN tag 100 for incoming traffic and to remove the outer VLAN tags for outgoing traffic.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 1

[Sysname-GigabitEthernet1/0/1-srv1] encapsulation s-vid 10

[Sysname-GigabitEthernet1/0/1-srv1] rewrite inbound tag remark 1-to-1 s-vid 100

[Sysname-GigabitEthernet1/0/1-srv1] rewrite outbound tag strip s-vid

VXLAN commands -- Basic VXLAN commands -- selective-flooding mac-address

Use selective-flooding mac-address to enable selective flood for a MAC address.

Use undo selective-flooding mac-address to disable selective flood for a MAC address.

Syntax

selective-flooding mac-address mac-address

undo selective-flooding mac-address mac-address

Default

Selective flood is disabled for all MAC addresses.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

mac-address: Specifies a MAC address. The MAC address cannot be all Fs.

Usage guidelines

This command excludes a remote unicast or multicast MAC address from the flood suppression done by using the flooding disable command. The VTEP will flood the frames destined for the specified MAC address to remote sites when floods are confined to the local site.

Examples

# Enable selective flood for 000f-e201-0101 on VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] selective-flooding mac-address 000f-e201-0101

Related commands

flooding disable

VXLAN commands -- Basic VXLAN commands -- service-instance

Use service-instance to create an Ethernet service instance and enter its view, or enter the view of an existing Ethernet service instance.

Use undo service-instance to delete an Ethernet service instance.

Syntax

service-instance instance-id

undo service-instance instance-id

Default

No Ethernet service instances exist.

Views

Layer 2 aggregate interface view

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

instance-id: Specifies an Ethernet service instance ID in the range of 1 to 4096.

Examples

# On Layer 2 Ethernet interface GigabitEthernet 1/0/1, create Ethernet service instance 1 and enter Ethernet service instance view.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 1

[Sysname-GigabitEthernet1/0/1-srv1]

Related commands

display l2vpn service-instance

VXLAN commands -- Basic VXLAN commands -- shutdown

Use shutdown to shut down a VSI.

Use undo shutdown to bring up a VSI.

Syntax

shutdown

undo shutdown

Default

VSIs are up.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Use this command to temporarily disable a VSI to provide Layer 2 switching services. The shutdown action does not change settings on the VSI. You can continue to configure the VSI. After you bring up the VSI again, the VSI provides services based on the latest settings.

Examples

# Shut down VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] shutdown

Related commands

display l2vpn vsi

VXLAN commands -- Basic VXLAN commands -- statistic mode vsi

Use statistic mode vsi to set the packet statistic collection mode to VSI.

Use undo statistic mode to restore the default.

Syntax

statistic mode vsi

undo statistic mode

Default

The default setting for this command varies by device model.

Views

System view

Predefined user roles

network-admin

Usage guidelines

To enable packet statistics for a VSI and its associated VSI interface, set the packet statistic collection mode to VSI and execute the statistics enable command in VSI view.

The statistic mode vsi command takes effect only if the VSI interface is associated with only one VSI.

You can use the statistic mode s-channel, statistic mode queue, or statistic mode vsi command to set the packet statistic collection mode. If you execute the statistic mode command multiple times, the most recent configuration takes effect.

Examples

# Set the packet statistic collection mode to VSI.

<Sysname> system-view

[Sysname] statistic mode vsi

Do you want to change the packet statistic mode? [Y/N]:y

Related commands

display statistic mode

statistic mode queue (ACL and QoS Command Reference)

statistic mode s-channel (EVB Command Reference)

VXLAN commands -- Basic VXLAN commands -- statistics enable (Ethernet service instance view)

Use statistics enable to enable packet statistics for an Ethernet service instance.

Use undo statistics enable to disable packet statistics for an Ethernet service instance.

Syntax

statistics enable

undo statistics enable

Default

The packet statistics feature is disabled for an Ethernet service instance.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

For this command to take effect, you must configure a frame match criterion for the Ethernet service instance and map it to a VSI. If you modify the frame match criterion or VSI mapping, packet statistics of the instance is cleared.

Examples

# Enable packet statistics for Ethernet service instance 200 on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 200

[Sysname-GigabitEthernet1/0/1-srv200] statistics enable

Related command

display l2vpn service-instance verbose

reset l2vpn statistics ac

VXLAN commands -- Basic VXLAN commands -- statistics enable (VSI view)

Use statistics enable to enable packet statistics for a VSI.

Use undo statistics enable to disable packet statistics for a VSI.

Syntax

statistics enable

undo statistics enable

Default

The packet statistics feature is disabled for a VSI.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable packet statistics for VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] statistics enable

Related commands

display l2vpn vsi verbose

reset l2vpn statistics vsi

VXLAN commands -- Basic VXLAN commands -- tunnel

Use tunnel to assign VXLAN tunnels to a VXLAN.

Use undo tunnel to remove VXLAN tunnels from a VXLAN.

Syntax

tunnel { tunnel-number [ backup-tunnel tunnel-number | flooding-proxy | remote-vni vxlan-id ] | all }

undo tunnel { tunnel-number | all }

Default

A VXLAN does not contain VXLAN tunnels.

Views

VXLAN view

Predefined user roles

network-admin

mdc-admin

Parameters

tunnel-numb er: Specifies a tunnel interface number. The value range for this argument varies by device model. The tunnel must be a VXLAN tunnel.

backup-tunnel tunnel-number: Specifies a backup tunnel by its tunnel interface number. The value range for the tunnel-number argument varies by device model. The tunnel must be a VXLAN tunnel.

flooding-proxy: Enables flood proxy on the tunnel for the VTEP to send flood traffic to the flood proxy server. The flood proxy server replicates and forwards flood traffic to remote VTEPs. If you do not specify this keyword, flood proxy is disabled on the tunnel.

remote-vni vxlan-id: Specifies a remote VXLAN ID in the range of 0 to 16777215. You can specify this option only for a VXLAN-DCI tunnel. This option is not supported by S6800 switches labeled with product codes LS-6800-32Q, LS-6800-54QF, LS-6800-54QT, LS-S6800-2C, and LS-S6800-4C.

all: Specifies all VXLAN tunnels.

Usage guidelines

This command assigns a VXLAN tunnel to a VXLAN to provide Layer 2 connectivity for the VXLAN between two sites. In unicast mode, the system floods unknown unicast, multicast, and broadcast traffic to each tunnel in the VXLAN.

You can assign multiple VXLAN tunnels to a VXLAN, and configure a VXLAN tunnel to trunk multiple VXLANs.

To assign a pair of primary and backup VXLAN tunnels to the VXLAN, specify the backup-tunnel tunnel-number option. When the primary VXLAN tunnel is operating correctly, the backup VXLAN tunnel does not forward traffic. When the primary VXLAN tunnel goes down, traffic is switched to the backup VXLAN tunnel.

On a VSI, you can enable flood proxy on multiple VXLAN tunnels. The first tunnel that is enabled with flood proxy works as the primary proxy tunnel to forward broadcast, multicast, and unknown unicast traffic. Other proxy tunnels are backups that do not forward traffic when the primary proxy tunnel is operating correctly.

To change a flood proxy tunnel for a VXLAN, perform the following tasks:

· Use the undo tunnel command to remove the flood proxy tunnel.

· Use the tunnel command to enable flood proxy on another tunnel and assign the tunnel to the VXLAN.

If two data centers use different VXLANs to convey the same service, you can use the remote-vni vxlan-id option to specify the remote VXLAN ID on each ED for the VXLANs to communicate. The EDs will replace the local VXLAN ID in VXLAN packets with the remote VXLAN ID before sending the packets to a remote ED. This option is not supported by S6800 switches labeled with product codes LS-6800-32Q, LS-6800-54QF, LS-6800-54QT, LS-S6800-2C, and LS-S6800-4C.

You cannot use the tunnel all command for VXLAN-DCI tunnel assignment. Please assign VXLAN-DCI tunnels to a VXLAN one by one.

If the tunnel all command is used for a VXLAN, you cannot remove the VXLAN tunnels one by one. You can only use the undo tunnel all command to remove all the VXLAN tunnels.

Examples

# Assign VXLAN tunnels 1 and 2 to VXLAN 10000.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] vxlan 10000

[Sysname-vsi-vpna-vxlan-10000] tunnel 1

[Sysname-vsi-vpna-vxlan-10000] tunnel 2

Related commands

display vxlan tunnel

VXLAN commands -- Basic VXLAN commands -- tunnel bfd enable

Use tunnel bfd enable to enable BFD on a VXLAN tunnel interface.

Use undo tunnel bfd enable to disable BFD on a VXLAN tunnel interface.

Syntax

tunnel bfd enable destination-mac mac-address

undo tunnel bfd enable

Default

BFD is disabled on a VXLAN tunnel interface.

Views

VXLAN tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

destination-mac mac-address: Specifies a destination MAC address in H-H-H format for BFD control packets. The MAC address can be a remote VTEP address or a multicast address. You can omit the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for 000f-00e2-0001.

Usage guidelines

Enable BFD on both ends of a VXLAN tunnel for quick link connectivity detection. The VTEPs periodically send BFD single-hop control packets to each other through the VXLAN tunnel. A VTEP sets the tunnel state to Defect if it has not received control packets from the remote end for 5 seconds. In this situation, the tunnel interface state is still Up. The tunnel state will change from Defect to Up if the VTEP can receive BFD control packets again.

For BFD sessions to come up, you must reserve a VXLAN by using the reserved vxlan command.

Do not use BFD together with uRPF. When uRPF is enabled, BFD sessions cannot come up. For more information about uRPF, see Security Configuration Guide.

Examples

# Enable BFD on VXLAN tunnel interface Tunnel 9, and specify 1-1-1 as the destination MAC address for BFD control packets.

<Sysname> system-view

[Sysname] interface tunnel 9 mode vxlan

[Sysname-Tunnel9] tunnel bfd enable destination-mac 1-1-1

VXLAN commands -- Basic VXLAN commands -- tunnel global source-address

Use tunnel global source-address to specify a global source address for VXLAN tunnels.

Use undo tunnel global source-address to restore the default.

Syntax

tunnel global source-address ip-address

undo tunnel global source-address

Default

No global source address is specified for VXLAN tunnels.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

ip-address: Specifies an IP address.

Usage guidelines

| IMPORTANT: For correct VXLAN deployment and VTEP management, do not manually specify tunnel-specific source addresses for VXLAN tunnels if OVSDB is used.

‌

A VXLAN tunnel uses the global source address if you do not specify a source interface or source address for the tunnel.

The global source address takes effect only on VXLAN tunnels (VXLAN-DCI tunnels not included).

Examples

# Specify 1.1.1.1 as the global source address for VXLAN tunnels.

<Sysname> system-view

[Sysname] tunnel global source-address 1.1.1.1

VXLAN commands -- Basic VXLAN commands -- vlan-forwarding static

Use vlan-forwarding static to configure a static VLAN-based MAC address entry on an Ethernet service instance.

Use undo vlan-forwarding static to restore the default.

Syntax

vlan-forwarding static s-vid vlan-id [ c-vid vlan-id ]

undo vlan-forwarding static

Default

No static VLAN-based MAC address entries exist.

Views

Ethernet service instance view

Predefined user roles

network-admin

mdc-admin

Parameters

s-vid vlan-id: Specifies an outer VLAN ID in the range of 1 to 4094.

c-vid vlan-id: Specifies an inner VLAN ID in the range of 1 to 4094. To configure an entry that contains both inner and outer VLAN IDs, you must specify this option. The MAC address in the entry uses the 0-SVLAN tag-CVLAN tag format. To configure an entry that contains only the outer VLAN ID, do not specify this option. The MAC address in the entry uses the 0-SVLAN tag-0 format.

Usage guidelines

To forward traffic to the local site when MAC learning is disabled on an Ethernet service instance, you must configure static VLAN-based MAC address entries. The outgoing interface in the entries is the Ethernet service instance.

Examples

# Configure a static VLAN-based MAC address entry on Ethernet service instance 5.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 5

[Sysname-GigabitEthernet1/0/1-srv5] encapsulation s-vid 5

[Sysname-GigabitEthernet1/0/1-srv5] vlan-forwarding static s-vid 5

Related commands

forwarding mode

learning mode

VXLAN commands -- Basic VXLAN commands -- vsi

Use vsi to create a VSI and enter its view, or enter the view of an existing VSI.

Use undo vsi to delete a VSI.

Syntax

vsi vsi-name

undo vsi vsi-name

Default

No VSIs exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

A VSI acts as a virtual switch to provide Layer 2 switching services for a VXLAN on a VTEP. A VSI has all functions of a physical Ethernet switch, including source MAC address learning, MAC address aging, and flooding.

A VSI can provide services only for one VXLAN.

Examples

# Create VSI vxlan10 and enter VSI view.

<Sysname> system-view

[Sysname] vsi vxlan10

[Sysname-vsi-vxlan10]

Related commands

display l2vpn vsi

VXLAN commands -- Basic VXLAN commands -- vxlan

Use vxlan to create a VXLAN and enter its view, or enter the view of an existing VXLAN.

Use undo vxlan to restore the default.

Syntax

vxlan vxlan-id

undo vxlan

Default

No VXLANs exist.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.

Usage guidelines

You can create only one VXLAN for a VSI. The VXLAN ID for each VSI must be unique.

Examples

# Create VXLAN 10000 for VSI vpna and enter VXLAN view.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] vxlan 10000

[Sysname-vsi-vpna-vxlan-10000]

Related commands

vsi

VXLAN commands -- Basic VXLAN commands -- vxlan invalid-udp-checksum discard

Use vxlan invalid-udp-checksum discard to enable the device to drop the VXLAN packets that fail UDP checksum check.

Use undo vxlan invalid-udp-checksum discard to restore the default.

Syntax

vxlan invalid-udp-checksum discard

undo vxlan invalid-udp-checksum discard

Default

The device does not check the UDP checksum of VXLAN packets.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command enables the device to check the UDP checksum of VXLAN packets.

The device always sets the UDP checksum of VXLAN packets to 0. For compatibility with third-party devices, a VXLAN packet can pass the check if its UDP checksum is 0 or correct. If its UDP checksum is incorrect, the VXLAN packet fails the check and is dropped.

Examples

# Enable the device to drop the VXLAN packets that fail UDP checksum check.

<Sysname> system-view

[Sysname] vxlan invalid-udp-checksum discard

Related commands

vxlan invalid-vlan-tag discard

VXLAN commands -- Basic VXLAN commands -- vxlan invalid-vlan-tag discard

Use vxlan invalid-vlan-tag discard to enable the device to drop the VXLAN packets that have 802.1Q VLAN tags in the inner Ethernet header.

Use undo vxlan invalid-vlan-tag discard to restore the default.

Syntax

vxlan invalid-vlan-tag discard

undo vxlan invalid-vlan-tag discard

Default

The device does not check whether a VXLAN packet has 802.1Q VLAN tags in the inner Ethernet header.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If a remote VTEP uses the Ethernet access mode, its VXLAN packets might contain 802.1Q VLAN tags. To prevent the local VTEP from dropping the VXLAN packets, do not execute the vxlan invalid-vlan-tag discard command on the local VTEP.

To configure the access mode, use the xconnect vsi command.

Examples

# Enable the device to drop VXLAN packets that have 802.1Q VLAN tags.

<Sysname> system-view

[Sysname] vxlan invalid-vlan-tag discard

Related commands

vxlan invalid-udp-checksum discard

xconnect vsi

VXLAN commands -- Basic VXLAN commands -- vxlan ip-forwarding

Use vxlan ip-forwarding to enable Layer 3 forwarding for all VXLANs.

Use undo vxlan ip-forwarding to enable Layer 2 forwarding for all VXLANs.

Syntax

vxlan ip-forwarding [ tagged | untagged ]

undo vxlan ip-forwarding

Default

Layer 3 forwarding is enabled for all VXLANs, and VXLAN packets do not carry VLAN tags.

Views.

System view

Predefined user roles

network-admin

mdc-admin

Parameters

tagged: Specifies the tagged mode. In this mode, the VTEP adds a VLAN tag to a VXLAN packet.

untagged: Specifies the untagged mode. In this mode, the VTEP does not add a VLAN tag to a VXLAN packet.

Usage guidelines

If the device is a VTEP, enable Layer 2 forwarding for VXLANs. If the device is a VXLAN IP gateway, enable Layer 3 forwarding for VXLANs.

In Layer 3 forwarding mode, the VTEP uses the ARP table (IPv4 network) or ND table (IPv6 network) to forward traffic for VXLANs. In Layer 2 forwarding mode, the VTEP uses the MAC address table to forward traffic for VXLANs.

You must delete all VSIs, VSI interfaces, and VXLAN tunnel interfaces before you can change the forwarding mode.

If you enable Layer 3 forwarding for VXLANs, the tagging status of VXLAN packets is not determined by the link type of the outgoing interface. You must use this command to set the tagging mode of VXLAN packets.

· Set the tagging mode to untagged if the following requirements are met:

?span style='font:7.0pt "Times New Roman"'> The link type of the outgoing interface is access, trunk, or hybrid.

?span style='font:7.0pt "Times New Roman"'> VXLAN packets are transmitted to the next hop through the PVID of the outgoing interface.

· Set the tagging mode to tagged if the following requirements are met:

?span style='font:7.0pt "Times New Roman"'> The link type of the outgoing interface is trunk or hybrid.

?span style='font:7.0pt "Times New Roman"'> VXLAN packets are transmitted to the next hop through a VLAN other than the PVID of the outgoing interface.

If you do not set the tagging mode when you execute this command, the untagged mode is used.

You must delete all VXLAN tunnel interfaces before you can change the tagging mode of VXLAN packets.

Examples

# Enable Layer 3 forwarding for all VXLANs, and use the default tagging mode (untagged) for VXLAN packets.

<Sysname>system-view

[Sysname] vxlan ip-forwarding

VXLAN commands -- Basic VXLAN commands -- vxlan local-mac report

Use vxlan local-mac report to enable local-MAC logging.

Use undo vxlan local-mac report to disable local-MAC logging.

Syntax

vxlan local-mac report

undo vxlan local-mac report

Default

Local-MAC logging is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When the local-MAC logging feature is enabled, the VXLAN module immediately sends a log message with its local MAC addresses to the information center. When a local MAC address is added or removed, a log message is also sent to the information center to notify the local-MAC change.

With the information center, you can set log message filtering and output rules, including output destinations. For more information about configuring the information center, see Network Management and Monitoring Configuration Guide.

Examples

# Enable local-MAC logging.

<Sysname> system-view

[Sysname] vxlan local-mac report

VXLAN commands -- Basic VXLAN commands -- vxlan tunnel mac-learning disable

Use vxlan tunnel mac-learning disable to disable remote-MAC address learning.

Use undo vxlan tunnel mac-learning disable to enable remote-MAC address learning.

Syntax

vxlan tunnel mac-learning disable

undo vxlan tunnel mac-learning disable

Default

Remote-MAC address learning is enabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When network attacks occur, use this command to prevent the device from learning incorrect remote MAC addresses in the data plane.

Examples

# Disable remote-MAC address learning.

<Sysname> system-view

[Sysname] vxlan tunnel mac-learning disable

VXLAN commands -- Basic VXLAN commands -- vxlan udp-port

Use vxlan udp-port to set the destination UDP port number for VXLAN packets.

Use undo vxlan udp-port to restore the default.

Syntax

vxlan udp-port port-number

undo vxlan udp-port

Default

The destination UDP port number is 4789 for VXLAN packets.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

port-number: Specifies a UDP port number in the range of 1 to 65535. As a best practice, specify a port number in the range of 1024 to 65535 to avoid conflict with well-known ports.

Usage guidelines

You must configure the same destination UDP port number on all VTEPs in a VXLAN.

Examples

# Set the destination UDP port number to 6666 for VXLAN packets.

<Sysname> system-view

[Sysname] vxlan udp-port 6666

VXLAN commands -- Basic VXLAN commands -- vxlan vlan-based

Use vxlan vlan-based to enable VLAN-based VXLAN assignment.

Use undo vxlan vlan-based to disable VLAN-based VXLAN assignment.

Syntax

vxlan vlan-based

undo vxlan vlan-based

Default

VLAN-based VXLAN assignment is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

You can assign customer traffic to a VXLAN by using one of the following methods:

· Layer 3 interface-to-VSI mapping—This method maps a site-facing Layer 3 interface to a VSI. The VTEP assigns all frames received from the interface to the VXLAN of the VSI.

· Ethernet service instance-to-VSI mapping—This method uses the frame match criterion of an Ethernet service instance to match a list of VLANs on a site-facing Layer 2 interface. The VTEP assigns customer traffic to a VXLAN by mapping the Ethernet service instance to a VSI.

· VLAN-based VXLAN assignment—This method maps a VLAN to a VXLAN. When a VLAN is mapped to a VXLAN and VLAN-based VXLAN assignment is enabled, the device automatically performs the following operations:

a. Creates an Ethernet service instance that uses the VLAN ID as its instance ID on each interface in the VLAN. The matching outer VLAN ID of the Ethernet service instances is the VLAN ID.

b. Maps the Ethernet service instances to the VSI of the VXLAN.

Do not configure both Ethernet service instance-to-VSI mapping and VLAN-based VXLAN assignment.

Examples

# Enable VLAN-based VXLAN assignment.

<Sysname> system-view

[Sysname] vxlan vlan-based

VXLAN commands -- Basic VXLAN commands -- vxlan vni

Use vxlan vni to map a VLAN to a VXLAN.

Use undo vxlan vni to remove the VXLAN mapping for a VLAN.

Syntax

vxlan vni vxlan-id

undo vxlan vni

Default

A VLAN is not mapped to a VXLAN.

Views

VLAN view

Predefined user roles

network-admin

mdc-admin

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215.

Usage guidelines

Before you map VLANs to VXLANs, enable VLAN-based VXLAN assignment by using the vxlan vlan-based command.

You cannot map VLAN 1 to any VXLAN. Do not map a VLAN to the L3 VXLAN ID of EVPN.

If you map a VLAN to a nonexistent VXLAN, the configuration takes effect after the VXLAN is created.

Examples

# Map VLAN 10 to VXLAN 100.

<Sysname> system-view

[Sysname] vlan 10

[Sysname-vlan10] vxlan vni 100

Related commands

vxlan vlan-based

VXLAN commands -- Basic VXLAN commands -- xconnect vsi

Use xconnect vsi to map an AC to a VSI.

Use undo xconnect vsi to restore the default.

Syntax

xconnect vsi vsi-name [ access-mode { ethernet | vlan } ] [ track track-entry-number&<1-3> ]

undo xconnect vsi

Default

An AC is not mapped to any VSI.

Views

Ethernet service instance view

Interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-name: Specifies the VSI name, a case-sensitive string of 1 to 31 characters.

access-mode: Specifies an access mode. If the AC is an Ethernet service instance, you can specify this keyword. The default access mode is VLAN. If the AC is a Layer 3 interface or subinterface, you cannot specify this keyword.

ethernet: Specifies the Ethernet access mode.

vlan: Specifies the VLAN access mode.

track track-entry-number&<1-3>: Specifies a space-separated list of up to three track entry numbers in the range of 1 to 1024. The AC is up only if a minimum of one associated track entry is in positive state.

Usage guidelines

To monitor the status of an AC, associate it with track entries.

To configure this command for an Ethernet service instance, you must first use the encapsulation command to add a traffic match criterion to the service instance.

For traffic that matches the Ethernet service instance or Layer 3 interface, the system uses the VSI's MAC address table to make a forwarding decision.

The access mode determines how a VTEP processes the 802.1Q VLAN tags in the inner Ethernet frames assigned to the VSI.

· VLAN access mode—Ethernet frames received from or sent to the local site must contain 802.1Q VLAN tags.

?span style='font:7.0pt "Times New Roman"'> For an Ethernet frame received from the local site, the VTEP removes all its 802.1Q VLAN tags before forwarding the frame.

?span style='font:7.0pt "Times New Roman"'> For an Ethernet frame destined for the local site, the VTEP adds 802.1Q VLAN tags to the frame before forwarding the frame.

In VLAN access mode, VXLAN packets sent between VXLAN sites do not contain 802.1Q VLAN tags. VXLAN can provide Layer 2 connectivity for different 802.1Q VLANs between sites. You can use different 802.1Q VLANs to provide the same service in different sites.

· Ethernet access mode—The VTEP does not process the 802.1Q VLAN tags of Ethernet frames received from or sent to the local site.

?span style='font:7.0pt "Times New Roman"'> For an Ethernet frame received from the local site, the VTEP forwards the frame with the 802.1Q VLAN tags intact.

?span style='font:7.0pt "Times New Roman"'> For an Ethernet frame destined for the local site, the VTEP forwards the frame without adding 802.1Q VLAN tags.

In Ethernet access mode, VXLAN packets sent between VXLAN sites contain 802.1Q VLAN tags. VXLAN cannot provide Layer 2 connectivity for different 802.1Q VLANs between sites. You must use the same 802.1Q VLAN to provide the same service between sites.

Examples

# Map GigabitEthernet 1/0/1 to VSI vpn1. (Applicable to routers.)

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] quit

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] xconnect vsi vpn1

# On GigabitEthernet 1/0/1, configure Ethernet service instance 200 to match frames with an outer 802.1Q VLAN tag of 200, and map the instance to VSI vpn1. (Applicable to switches.)

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] quit

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] service-instance 200

[Sysname-GigabitEthernet1/0/1-srv200] encapsulation s-vid 200

[Sysname-GigabitEthernet1/0/1-srv200] xconnect vsi vpn1

Related commands

display l2vpn interface

display l2vpn service-instance

encapsulation

vsi

VXLAN commands -- VXLAN IP gateway commands -- arp distributed-gateway dynamic-entry synchronize

Use arp distributed-gateway dynamic-entry synchronize to enable dynamic ARP entry synchronization for distributed VXLAN IP gateways.

Use undo arp distributed-gateway dynamic-entry synchronize to disable dynamic ARP entry synchronization for distributed VXLAN IP gateways.

Syntax

arp distributed-gateway dynamic-entry synchronize

undo arp distributed-gateway dynamic-entry synchronize

Default

Dynamic ARP entry synchronization is disabled for distributed VXLAN IP gateways.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When local proxy ARP is enabled on distributed VXLAN IP gateways, each gateway learns ARP information independently. A gateway does not forward ARP packets destined for its local VSI interfaces to other gateways. For distributed VXLAN IP gateways to have the same ARP entries, you must enable dynamic ARP entry synchronization.

A controller or the EVPN feature can also synchronize ARP entries among distributed VXLAN IP gateways. When you use a controller or the EVPN feature, do not enable dynamic ARP entry synchronization.

Examples

# Enable dynamic ARP entry synchronization for distributed VXLAN IP gateways.

<Sysname> system-view

[Sysname] arp distributed-gateway dynamic-entry synchronize

Related commands

distributed-gateway local

local-proxy-arp enable (Layer 3—IP Services Command Reference)

VXLAN commands -- VXLAN IP gateway commands -- arp send-rate

Use arp send-rate to set an ARP packet sending rate limit for a VSI interface.

Use undo arp send-rate to remove the ARP packet sending rate limit for a VSI interface.

Syntax

arp send-rate pps

undo arp send-rate

Default

The ARP packet sending rate is not limited for a VSI interface.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

pps: Specifies a rate limit in the range of 1 to 500 pps.

Usage guidelines

VMs have limited capacity to process packets. To prevent packet processing from degrading VM performance, limit the ARP packet sending rate of the VSI interface for VMs. The VTEP will drop excess ARP packets if the rate limit is exceeded.

Examples

# Set the ARP packet sending rate limit to 50 pps for VSI-interface 1.

<Sysname> system

[Sysname] interface vsi-interface 1

[Sysname-Vsi-interface1] arp send-rate 50

VXLAN commands -- VXLAN IP gateway commands -- bandwidth

Use bandwidth to set the expected bandwidth for a VSI interface.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth-value

undo bandwidth

Default

The expected bandwidth (in kbps) of a VSI interface equals the interface baud rate divided by 1000.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.

Usage guidelines

The expected bandwidth is an informational parameter used only by higher-layer protocols for calculation. You cannot adjust the actual bandwidth of an interface by using this command.

Examples

# Set the expected bandwidth to 10000 kbps for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] bandwidth 10000

VXLAN commands -- VXLAN IP gateway commands -- default

Use default to restore the default settings for a VSI interface.

Syntax

default

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

| CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impact of this command when you use it on a live network.

This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions.

To resolve this problem:

1. Use the display this command in interface view to identify these commands.

2. Use their undo forms or follow the command reference to restore their default settings.

3. If the restoration attempt still fails, follow the error message instructions to resolve the problem.

Examples

# Restore the default settings for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] default

This command will restore the default settings. Continue? [Y/N]:y

VXLAN commands -- VXLAN IP gateway commands -- description

Use description to configure the description of a VSI interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of a VSI interface is interface-name plus Interface (for example, Vsi-interface100 Interface).

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 255 characters.

Examples

# Configure the description as gateway for VXLAN 10 for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] description gateway for VXLAN 10

VXLAN commands -- VXLAN IP gateway commands -- display interface vsi-interface

Use display interface vsi-interface to display information about VSI interfaces.

Syntax

display interface [ vsi-interface [ vsi-interface-id ] ] [ brief [ description | down ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vsi-interface [ vsi-interface-id ]: Specifies VSI interfaces. If you specify a VSI interface, this command displays information about the specified interface. If you specify only the vsi-interface keyword, this command displays information about all VSI interfaces. If you do not specify the vsi-interface [ vsi-interface-id ] option, this command displays information about all interfaces. Make sure the specified VSI interfaces have been created on the device.

brief: Display brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions.

down: Displays interfaces that are physically down as well as the down reason. If you do not specify this keyword, the command does not filter output by physical interface state.

Examples

# Display information about VSI-interface 100.

<Sysname> display interface vsi-interface 100

Vsi-interface100

Current state: UP

Line protocol state: UP

Description: Vsi-interface100 Interface

Bandwidth: 1000000 kbps

Maximum transmission unit: 1500

Internet address: 10.1.1.1/24 (primary)

IP packet frame type: Ethernet II, hardware address: 0011-2200-0102

IPv6 packet frame type: Ethernet II, hardware address: 0011-2200-0102

Physical: Unknown, baudrate: 1000000 kbps

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

Table 14 Command output

Field | Description
Current state | Physical link state of the interface: · Administratively DOWN—The interface has been shut down by using the shutdown command. · DOWN—The interface is administratively up, but its physical state is down. · UP—The interface is both administratively and physically up.
Line protocol state | Data link layer state of the interface: · UP—The data link layer protocol is up. · UP(spoofing)—The data link layer protocol is up, but the link is an on-demand link or does not exist. · DOWN—The data link layer protocol is down.
Description | Description of the interface.
Bandwidth | Expected bandwidth of the interface.
Maximum transmission unit | MTU of the interface.
Internet protocol processing: Disabled | The interface is not assigned an IP address and cannot process IP packets.
Internet address | IP address of the interface. The primary attribute indicates that the address is the primary IP address.
IP packet frame type | IPv4 packet framing format.
hardware address | MAC address.
IPv6 packet frame type | ‌ IPv6 packet framing format.
Physical | Physical type of the interface, which is fixed at Unknown.
baudrate | Interface baudrate in kbps.
Last clearing of counters | Last time when the reset counters interface vsi-interface command was used to clear interface statistics. This field displays Never if the reset counters interface vsi-interface command has never been used on the interface since the device startup.
Last 300 seconds input rate | Average input rate for the last 300 seconds.
Last 300 seconds output rate | Average output rate for the last 300 seconds.
Input: 0 packets, 0 bytes, 0 drops | Incoming traffic statistics on the interface: · Number of incoming packets. · Number of incoming bytes. · Number of dropped incoming packets.
Output: 0 packets, 0 bytes, 0 drops | Outgoing traffic statistics on the interface: · Number of outgoing packets. · Number of outgoing bytes. · Number of dropped outgoing packets.

# Display brief information about all VSI interfaces.

<Sysname> display interface vsi-interface brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface Link Protocol Primary IP Description

Vsi100 DOWN DOWN --

# Display brief information and complete description for VSI-interface 100.

<Sysname> display interface vsi-interface 100 brief description

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface Link Protocol Primary IP Description

Vsi100 UP UP 1.1.1.1 VSI-interface100

# Displays interfaces that are physically down and the down reason.

<Sysname> display interface brief down

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Interface Link Cause

Vsi100 DOWN Administratively

Vsi200 DOWN Administratively

Table 15 Command output

Field | Description
Interface | Abbreviated interface name.
Link | Physical link state of the interface: · UP—The interface is physically up. · DOWN—The interface is physically down. · ADM—The interface has been shut down by using the shutdown command. To restore the physical state of the interface, use the undo shutdown command. · Stby—The interface is a backup interface in standby state. To see the primary interface, use the display interface-backup state command.
Protocol | Data link layer protocol state of the interface: · UP—The data link layer protocol of the interface is up. · UP (s)—The data link layer protocol of the interface is up, but the link is an on-demand link or does not exist. The (s) attribute represents the spoofing flag. · DOWN—The data link layer protocol of the interface is down.
Primary IP | Primary IP address of the interface. This field displays two hyphens (--) if the interface does not have an IP address.
Description | Description of the interface.
Cause | Cause for the physical link state of an interface to be DOWN: · Administratively—The interface has been manually shut down by using the shutdown command. To restore the physical state of the interface, use the undo shutdown command. · Not connected—The interface is not mapped to any VSI, or the mapped VSI does not have any AC or VXLAN tunnel.

Related commands

reset counters interface vsi-interface

VXLAN commands -- VXLAN IP gateway commands -- distributed-gateway local

Use distributed-gateway local to specify a VSI interface as a distributed gateway to provide services for the local site.

Use undo distributed-gateway local to restore the default.

Syntax

distributed-gateway local

undo distributed-gateway local

Default

A VSI interface is not a distributed gateway.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If a VXLAN uses distributed gateway services, you must assign the same IP address to the VXLAN's VSI interfaces on different VTEPs. To avoid IP address conflicts, you must specify the VSI interface on each VTEP as a distributed gateway.

Examples

# Specify VSI-interface 100 as a distributed gateway.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] distributed-gateway local

VXLAN commands -- VXLAN IP gateway commands -- gateway subnet

Use gateway subnet to assign a subnet to a VSI.

Use undo gateway subnet to remove a subnet from a VSI.

Syntax

gateway subnet { ipv4-address wildcard-mask | ipv6-address prefix-length }

undo gateway subnet { ipv4-address wildcard-mask | ipv6-address prefix-length }

Default

No subnet is assigned to a VSI.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv4-address: Specifies an IPv4 subnet address in dotted-decimal notation.

wildcard-mask: Specifies a wildcard mask in dotted decimal notation. In contrast to a network mask, the 0 bits in a wildcard mask represent "do care" bits, and the 1 bits represent "don't care" bits. If the "do care" bits in a packet's IP address are identical to the "do care" bits in the specified subnet address, the packet is assigned to the VSI. All "don't care" bits are ignored. The 0s and 1s in a wildcard mask can be noncontiguous. For example, 0.255.0.255 is a valid wildcard mask.

ipv6-address prefix-length: Specifies an IPv6 subnet address and the address prefix length in the range of 1 to 128.

Usage guidelines

You must configure this command on VSIs that share a gateway interface. This command enables the VSI interface to identify the VSI of a packet.

You can assign a maximum of eight IPv4 and IPv6 subnets to a VSI.

You must specify a gateway interface for a VSI before you can assign subnets to the VSI. If you remove the gateway interface from the VSI, the VSI's subnet settings are automatically deleted.

For VSIs that share a gateway interface, the subnets must be unique.

Examples

# Assign subnet 100.0.10.0/24 to VSI vxlan.

<Sysname> system-view

[Sysname] vsi vxlan

[Sysname-vsi-vxlan] gateway subnet 100.0.10.0 0.0.0.255

VXLAN commands -- VXLAN IP gateway commands -- gateway vsi-interface

Use gateway vsi-interface to specify a gateway interface for a VSI.

Use undo gateway vsi-interface to restore the default.

Syntax

gateway vsi-interface vsi-interface-id

undo gateway vsi-interface

Default

No gateway interface is specified for a VSI.

Views

VSI view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-interface-id: Specifies a VSI interface by its number. The value range for this argument varies by device model.

Usage guidelines

When you delete a VSI interface by using the undo interface vsi-interface command, the gateway interface setting of the VSI interface is also deleted.

A VSI can have only one gateway interface. Multiple VSIs can share a gateway interface.

Examples

# Specify VSI-interface 100 as the gateway interface for VSI vpna.

<Sysname> system-view

[Sysname] vsi vpna

[Sysname-vsi-vpna] gateway vsi-interface 100

Related commands

interface vsi-interface

VXLAN commands -- VXLAN IP gateway commands -- interface vsi-interface

Use interface vsi-interface to create a VSI interface and enter its view, or enter the view of an existing VSI interface.

Use undo interface vsi-interface to delete a VSI interface.

Syntax

interface vsi-interface vsi-interface-id

undo interface vsi-interface vsi-interface-id

Default

No VSI interfaces exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-interface-id: Specifies a VSI interface number. The value range for this argument varies by device model.

Usage guidelines

When you delete a VSI interface by using the undo interface vsi-interface command, the gateway interface setting of the VSI interface is also deleted.

Examples

# Create VSI-interface 100 and enter VSI interface view.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100]

Related commands

gateway vsi-interface

VXLAN commands -- VXLAN IP gateway commands -- ipv6 nd distributed-gateway dynamic-entry synchronize

Use ipv6 nd distributed-gateway dynamic-entry synchronize to enable dynamic ND entry synchronization for distributed VXLAN IP gateways.

Use undo ipv6 nd distributed-gateway dynamic-entry synchronize to disable dynamic ND entry synchronization for distributed VXLAN IP gateways.

Syntax

ipv6 nd distributed-gateway dynamic-entry synchronize

undo ipv6 nd distributed-gateway dynamic-entry synchronize

Default

Dynamic ND entry synchronization is disabled for distributed VXLAN IP gateways.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When local ND proxy is enabled on distributed VXLAN IP gateways, each gateway learns ND information independently. A gateway does not forward ND packets destined for its local VSI interfaces to other gateways. For distributed VXLAN IP gateways to have the same ND entries, you must enable dynamic ND entry synchronization.

A controller or the EVPN feature can also synchronize ND entries among distributed VXLAN IP gateways. When you use a controller or the EVPN feature, do not enable dynamic ND entry synchronization.

Examples

# Enable dynamic ND entry synchronization for distributed VXLAN IP gateways.

<Sysname> system-view

[Sysname] ipv6 nd distributed-gateway dynamic-entry synchronize

Related commands

distributed-gateway local

local-proxy-nd enable (Layer 3—IP Services Command Reference)

VXLAN commands -- VXLAN IP gateway commands -- mac-address

Use mac-address to assign a MAC address to a VSI interface.

Use undo mac-address to restore the default.

Syntax

mac-address mac-address

undo mac-address

Default

The default setting for this command varies by device model.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

mac-address: Specifies a MAC address in H-H-H format.

Examples

# Assign MAC address 0001-0001-0001 to VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] mac-address 1-1-1

VXLAN commands -- VXLAN IP gateway commands -- mtu

Use mtu to set the MTU for a VSI interface.

Use undo mtu to restore the default.

Syntax

mtu size

undo mtu

Default

The default MTU of a VSI interface varies by device model.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Parameters

size: Specifies an MTU value in the range of 46 to 1560 bytes.

Examples

# Set the MTU to 1430 bytes for VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] mtu 1430

VXLAN commands -- VXLAN IP gateway commands -- reset counters interface vsi-interface

Use reset counters interface vsi-interface to clear packet statistics on VSI interfaces.

Syntax

reset counters interface [ vsi-interface [ vsi-interface-id ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

vsi-interface [ vsi-interface-id ]: Specifies VSI interfaces. If you specify a VSI interface, this command clears packet statistics on the specified interface. If you specify only the vsi-interface keyword, this command clears packet statistics on all VSI interfaces. If you do not specify the vsi-interface [ vsi-interface-id ] option, this command clears packet statistics on all interfaces. Make sure the specified VSI interfaces have been created on the device.

Usage guidelines

Use this command to clear history statistics before you collect traffic statistics for a time period.

Examples

# Clear packet statistics on VSI-interface 100.

<Sysname> reset counters interface vsi-interface 100

Related commands

display interface vsi-interface

VXLAN commands -- VXLAN IP gateway commands -- shutdown

Use shutdown to shut down a VSI interface.

Use undo shutdown to bring up a VSI interface.

Syntax

shutdown

undo shutdown

Default

A VSI interface is up.

Views

VSI interface view

Predefined user roles

network-admin

mdc-admin

Examples

# Shut down VSI-interface 100.

<Sysname> system-view

[Sysname] interface vsi-interface 100

[Sysname-Vsi-interface100] shutdown

VXLAN commands -- VXLAN IP gateway commands -- vtep group member local

Use vtep group member local to assign the local VTEP to a VTEP group.

Use undo vtep group member local to remove the local VTEP from a VTEP group.

Syntax

vtep group group-ip member local member-ip

undo vtep group group-ip member local

Default

A VTEP is not assigned to any VTEP group.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

group-ip: Specifies a VTEP group by its group IP address. The IP address must already exist on the local VTEP.

member-ip: Specifies the member VTEP IP address for the local VTEP. The IP address must already exist on the local VTEP.

Usage guidelines

Member VTEPs in a VTEP group cannot use the group IP address or share an IP address.

Examples

# Assign the local VTEP to VTEP group 1.1.1.1, and specify 2.2.2.2 as the member VTEP IP address of the local VTEP.

<Sysname> system-view

[Sysname] vtep group 1.1.1.1 member local 2.2.2.2

Related commands

vtep group member remote

VXLAN commands -- VXLAN IP gateway commands -- vtep group member remote

Use vtep group member remote to specify a VTEP group and its member VTEPs.

Use undo vtep group member remote to remove a VTEP group and its member VTEPs.

Syntax

vtep group group-ip member remote member-ip&<1-8>

undo vtep group group-ip member remote

Default

No VTEP group is specified.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

group-ip: Specifies a VTEP group by its group IP address.

member-ip&<1-8>: Specifies a space-separated list of up to eight member VTEP IP addresses.

Examples

# Specify VTEP group 1.1.1.1 and its member VTEPs at 2.2.2.2, 3.3.3.3, and 4.4.4.4.

<Sysname> system-view

[Sysname] vtep group 1.1.1.1 member remote 2.2.2.2 3.3.3.3 4.4.4.4

Related commands

vtep group member local

VXLAN commands -- VXLAN IP gateway commands -- vxlan tunnel arp-learning disable

Use vxlan tunnel arp-learning disable to disable remote ARP learning for VXLANs.

Use undo vxlan tunnel arp-learning disable to enable remote ARP learning for VXLANs.

Syntax

vxlan tunnel arp-learning disable

undo vxlan tunnel arp-learning disable

Default

Remote ARP learning is enabled for VXLANs.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

By default, the device learns ARP information of remote VMs from packets received on VXLAN tunnel interfaces. To save resources on VTEPs in an SDN transport network, you can temporarily disable remote ARP learning when the controller and VTEPs are synchronizing entries. After the entry synchronization is completed, use the undo vxlan tunnel arp-learning disable command to enable remote ARP learning.

As a best practice, disable remote ARP learning for VXLANs only when the controller and VTEPs are synchronizing entries.

Examples

# Disable remote ARP learning for VXLANs.

<Sysname> system

[Sysname] vxlan tunnel arp-learning disable

VXLAN commands -- VXLAN IP gateway commands -- vxlan tunnel nd-learning disable

Use vxlan tunnel nd-learning disable to disable remote ND learning for VXLANs.

Use undo vxlan tunnel nd-learning disable to enable remote ND learning for VXLANs.

Syntax

vxlan tunnel nd-learning disable

undo vxlan tunnel nd-learning disable

Default

Remote ND learning is enabled for VXLANs.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

By default, the device learns ND information of remote VMs from packets received on VXLAN tunnel interfaces. To save resources on VTEPs in an SDN transport network, you can temporarily disable remote ND learning when the controller and VTEPs are synchronizing entries. After the entry synchronization is completed, use the undo vxlan tunnel nd-learning disable command to enable remote ND learning.

As a best practice, disable remote ND learning for VXLANs only when the controller and VTEPs are synchronizing entries.

Examples

# Disable remote ND learning for VXLANs.

<Sysname> system

[Sysname] vxlan tunnel nd-learning disable

VXLAN commands -- ENDP commands -- display vxlan neighbor-discovery client member

Use display vxlan neighbor-discovery client member to display information about ENDP neighbors that ENDCs have learned.

Syntax

display vxlan neighbor-discovery client member [ interface tunnel interface-number | local local-ip | remote client-ip | server server-ip ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface tunnel interface-number: Specifies an existing NVE tunnel interface by its number. The value range for the interface-number argument varies by device model.

local local-ip: Specifies an NVE tunnel source IP address.

remote client-ip: Specifies the IP address of an ENDP neighbor.

server server-ip: Specifies the IP address of an ENDS.

Usage guidelines

If you do not specify any parameters, this command displays neighbor entries that all local ENDCs have learned.

Examples

# Display neighbor entries that all local ENDCs have learned.

<Sysname> display vxlan neighbor-discovery client member

Interface: Tunnel0 Network ID: 1

Local Address: 1.1.1.1

Server Address: 1.1.1.1

Neighbor System ID Created Time Expire Status

2.2.2.2 0002-0000-0000 2014/08/01 03:39:38 71 Up

3.3.3.3 0003-0000-0000 2014/08/01 03:42:38 71 Up

Table 16 Command output

Field | Description
Interface | Name of an ENDC-enabled NVE tunnel interface.
Network ID | NVE tunnel network ID.
Local Address | Source IP address of the NVE tunnel.
Server Address | IP address of the ENDS. This field displays NA if the ENDS is unknown.
Neighbor | IP address of the neighbor learned from the ENDS.
System ID | Bridge MAC address of the neighbor. This field displays NA if the bridge MAC address is unknown.
Created Time | Time when the neighbor entry was created.
Expire | Remaining lifetime (in seconds) of the neighbor entry.
Status | Status of the VXLAN tunnel to the neighbor: · Up—The VXLAN tunnel is up. · Down—The VXLAN tunnel is down. · NA—No VXLAN tunnel has been set up with the neighbor.

VXLAN commands -- ENDP commands -- display vxlan neighbor-discovery client statistics

Use display vxlan neighbor-discovery client statistics to display ENDP packet statistics for an ENDC-enabled NVE tunnel interface.

Syntax

display vxlan neighbor-discovery client statistics interface tunnel interface-number

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface tunnel interface-number: Specifies an existing NVE tunnel interface by its number. The value range for the interface-number argument varies by device model.

Examples

# Display ENDP packet statistics for ENDCs on NVE tunnel interface Tunnel 0.

<Sysname> display vxlan neighbor-discovery client statistics interface tunnel 0

Server Address: 10.0.0.1

Received packets:

Reply: 170 Error: 1

Sent packets:

Register: 170 Purge: 0

Server Address: 10.0.0.2

Received packets:

Reply: 99 Error: 1

Sent packets:

Register: 100 Purge: 0

Table 17 Command output

Field | Description
Server Address | IP address of the ENDS.
Received packets | Packets received by the ENDC: · Reply—Registration replies received from the ENDS. · Error—ENDP error packets.
Sent packets | Packets sent by the ENDC: · Register—Registration packets sent to the ENDS. · Purge—Deregistration packets sent to the ENDS.

VXLAN commands -- ENDP commands -- display vxlan neighbor-discovery client summary

Use display vxlan neighbor-discovery client summary to display ENDC information.

Syntax

display vxlan neighbor-discovery client summary

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display ENDC information.

<Sysname> display vxlan neighbor-discovery client summary

Status: I-Init E-Establish P-Probe

Interface Local Address Server Address Network ID Reg Auth Status

Tunnel0 20.0.0.2 20.0.0.1 1 15 enabled E

Tunnel0 20.0.0.2 20.0.0.3 1 15 enabled P

Tunnel1 21.0.0.2 21.0.0.1 2 15 disabled P

Table 18 Command output

Field | Description
Interface | Name of an ENDC-enabled NVE tunnel interface.
Local Address | Source IP address of the NVE tunnel. This field displays NA if no source IP address has been assigned to the NVE tunnel.
Server Address | IP address of the ENDS.
Network ID | NVE tunnel network ID. This field displays NA if no network ID has been configured.
Reg | Registration update interval.
Auth | ENDP authentication status: · enabled. · disabled.
Status | Status of the connection between the ENDC and the ENDS: · I—The connection is initializing. · E—The connection has been set up. · P—The ENDC is probing for the ENDS to set up a connection.

Related commands

vxlan neighbor-discovery authentication

vxlan neighbor-discovery client enable

vxlan neighbor-discovery client register-interval

VXLAN commands -- ENDP commands -- display vxlan neighbor-discovery server member

Use display vxlan neighbor-discovery server member to display information about ENDP neighbors that have registered with an ENDS on the device.

Syntax

display vxlan neighbor-discovery server member [ interface tunnel interface-number | local local-ip | remote client-ip ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface tunnel interface-number: Specifies an existing NVE tunnel interface by its number. The value range for the interface-number argument varies by device model.

local local-ip: Specifies the IP address of an ENDS on the device.

remote client-ip: Specifies the IP address of an ENDP neighbor.

Usage guidelines

If you do not specify any parameters, this command displays all ENDP neighbors that have registered with each ENDS on the device.

Examples

# Display ENDP neighbor entries of all ENDSs on the device.

<Sysname> display vxlan neighbor-discovery server member

Interface: Tunnel0 Network ID: 1

IP Address: 1.1.1.1

Client Address System ID Expire Created Time

1.1.1.1 0001-0000-0000 72 2014/08/01 03:34:22

2.2.2.2 0002-0000-0000 66 2014/08/01 03:39:24

3.3.3.3 0003-0000-0000 72 2014/08/01 03:42:34

Table 19 Command output

Field | Description
Interface | Name of an ENDS-enabled NVE tunnel interface.
Network ID | NVE tunnel network ID.
IP Address | IP address of the ENDS.
Client Address | IP address of the neighbor.
System ID | Bridge MAC address of the neighbor.
Expire | Remaining lifetime (in seconds) of the neighbor entry.
Created Time | Time when the neighbor entry was created.

VXLAN commands -- ENDP commands -- display vxlan neighbor-discovery server statistics

Use display vxlan neighbor-discovery server statistics to display ENDP packet statistics for the ENDS on an NVE tunnel interface.

Syntax

display vxlan neighbor-discovery server statistics interface tunnel interface-number

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface tunnel interface-number: Specifies an existing NVE tunnel interface by its number. The value range for the interface-number argument varies by device model.

Examples

# Display ENDP packet statistics for the ENDS on NVE tunnel interface Tunnel 0.

<Sysname> display vxlan neighbor-discovery server statistics interface tunnel 0

Received packets:

Register: 170 Purge: 13

Sent packets:

Reply: 170 Error: 1

Table 20 Command output

Field | Description
Received packets | Packets received by the ENDS: · Register—Registration requests received from ENDCs. · Purge—Deregistration packets received from ENDCs.
Sent packets | Packets sent by the ENDS: · Reply—Registration replies sent to ENDCs. · Error—ENDP error packets.

VXLAN commands -- ENDP commands -- display vxlan neighbor-discovery server summary

Use display vxlan neighbor-discovery server summary to display ENDS information.

Syntax

display vxlan neighbor-discovery server summary

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display ENDS information.

<Sysname> display vxlan neighbor-discovery server summary

Interface Local Address Network ID Auth Members

Tunnel0 20.0.0.1 1 enabled 10

Tunnel2 21.0.0.1 2 disabled 20

Tunnel3 22.0.0.1 NA disabled 0

Table 21 Command output

Field | Description
Interface | Name of an ENDS-enabled NVE tunnel interface.
Local Address | Source IP address of the NVE tunnel. This field displays NA if no source IP address has been assigned to the NVE tunnel.
Network ID | NVE tunnel network ID. This field displays NA if no network ID has been configured.
Auth | ENDP authentication status: · enabled. · disabled.
Members | Total number of ENDCs that have registered with the ENDS.

Related commands

vxlan neighbor-discovery authentication

vxlan neighbor-discovery server enable

VXLAN commands -- ENDP commands -- network-id

Use network-id to assign a network ID to an NVE tunnel interface.

Use undo network-id to restore the default.

Syntax

network-id network-id

undo network-id

Default

No network ID is assigned to an NVE tunnel interface.

Views

NVE tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

number: Specifies a network ID in the range of 1 to 16777215.

Usage guidelines

ENDP supports multiple VXLAN networks. ENDP uses network IDs to uniquely identify VXLANs. VTEPs can discover each other if they have the same network ID.

On a VTEP, NVE tunnel interfaces must use different network IDs.

Examples

# Assign a network ID of 123 to NVE tunnel interface Tunnel 0.

<Sysname> system-view

[Sysname] interface tunnel 0 mode nve

[Sysname-Tunnel0] network-id 123

VXLAN commands -- ENDP commands -- vxlan neighbor-discovery authentication

Use vxlan neighbor-discovery authentication to enable ENDP authentication.

Use undo vxlan neighbor-discovery authentication to disable ENDP authentication.

Syntax

vxlan neighbor-discovery authentication { cipher | simple } string

undo vxlan neighbor-discovery authentication

Default

ENDP authentication is disabled.

Views

NVE tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

cipher: Specifies an authentication key in encrypted form.

simple: Specifies an authentication key in plaintext form. For security purposes, the authentication key specified in plaintext form will be stored in encrypted form.

string: Specifies the authentication key. Its plaintext form must be a case-sensitive string of 1 to 24 characters. Its encrypted form must be a case-sensitive string of 1 to 65 characters.

Usage guidelines

Configure ENDP authentication in an insecure network to prevent malicious registration with an ENDS.

For ENDSs and ENDCs to establish VXLAN tunnels, make sure the following requirements are met:

· ENDP authentication is enabled or disabled across the ENDSs and ENDCs.

· If ENDP authentication is enabled, all ENDCs and ENDSs in a VXLAN network use the same authentication key.

Examples

# Enable ENDP authentication on NVE tunnel interface Tunnel 0. Specify vxlan-a as the authentication key in plaintext form.

<Sysname> system-view

[Sysname] interface tunnel 0 mode nve

[Sysname-Tunnel0] vxlan neighbor-discovery authentication simple vxlan-a

Related commands

display vxlan neighbor-discovery client summary

display vxlan neighbor-discovery server summary

VXLAN commands -- ENDP commands -- vxlan neighbor-discovery client enable

Use vxlan neighbor-discovery client enable to specify an NVE tunnel interface as the ENDC of an ENDS.

Use undo vxlan neighbor-discovery client enable to remove the ENDC from an NVE tunnel interface.

Syntax

vxlan neighbor-discovery client enable server-ip

undo vxlan neighbor-discovery client enable server-ip

Default

The ENDC feature is disabled.

Views

NVE tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

server-ip: Specifies the IP address of a remote ENDS.

Usage guidelines

For redundancy, you can specify a maximum of two ENDS addresses on an NVE tunnel interface. These two ENDSs work independently. The failure of one ENDS does not affect the neighbor discovery.

As a best practice, configure different ENDSs for two ENDCs on the VTEP if the ENDCs use the same IP address but different network IDs.

Examples

# Configure Tunnel 0 as an ENDC of the ENDS at 11.0.0.1.

<Sysname> system-view

[Sysname] interface tunnel 0 mode nve

[Sysname-Tunnel0] vxlan neighbor-discovery client enable 11.0.0.1

Related commands

display vxlan neighbor-discovery client summary

VXLAN commands -- ENDP commands -- vxlan neighbor-discovery client register-interval

Use vxlan neighbor-discovery client register-interval to set the interval at which the ENDCs on an NVE tunnel interface update their registration with their ENDSs.

Use undo vxlan neighbor-discovery client register-interval to restore the default.

Syntax

vxlan neighbor-discovery client register-interval interval

undo vxlan neighbor-discovery client register-interval

Default

An ENDC updates its registration with its ENDS every 15 seconds.

Views

NVE tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Specifies a registration update interval in the range of 5 to 120 seconds.

Usage guidelines

This command sets the interval for an ENDC to regularly send register updates to an ENDS.

If the ENDC does not receive a response after sending five consecutive register packets, the ENDC clears its neighbor database and starts ENDS probe.

The ENDC adds the registration update interval setting to each register packet. The ENDS records this interval setting when it adds the ENDC to the ENDC database. If no register update is received from the ENDC before five times the interval is reached, the ENDS removes the ENDC from the VXLAN.

Examples

# Set the ENDC registration update interval to 30 seconds on NVE tunnel interface Tunnel 0.

<Sysname> system-view

[Sysname] interface tunnel 0 mode nve

[Sysname-Tunnel0] vxlan neighbor-discovery client register-interval 30

Related commands

display vxlan neighbor-discovery client summary

VXLAN commands -- ENDP commands -- vxlan neighbor-discovery server enable

Use vxlan neighbor-discovery server enable to enable ENDS on an NVE tunnel interface.

Use undo vxlan neighbor-discovery server enable to disable ENDS on an NVE tunnel interface.

Syntax

vxlan neighbor-discovery server enable

undo vxlan neighbor-discovery server enable

Default

The ENDS feature is disabled on an NVE tunnel interface.

Views

NVE tunnel interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When you enable ENDS on an NVE tunnel interface, an ENDC is automatically enabled, with the source address of the NVE tunnel as the ENDS address.

Examples

# Enable ENDS on NVE tunnel interface Tunnel 0.

<Sysname> system-view

[Sysname] interface tunnel 0 mode nve

[Sysname-Tunnel0] vxlan neighbor-discovery server enable

Related commands

display vxlan neighbor-discovery server summary

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis brief

Use display vxlan isis brief to display brief information about the VXLAN IS-IS process.

Syntax

display vxlan isis brief

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display brief information about the VXLAN IS-IS process.

<Sysname> display vxlan isis brief

Network-entity: 00.0011.2200.0001.00

LSP-length receive: 16384

LSP-length originate: 1400

Timers:

LSP-max-age: 1200s

LSP-refresh: 900s

State: Enabled

Table 22 Command output

Field | Description
Network-entity | Network entity name of the VXLAN IS-IS process.
LSP-length receive | Maximum length of incoming LSPs.
LSP-length originate | Maximum length of LSPs that the VXLAN IS-IS process can generate.
Timers | LSP-max-age—Maximum lifetime for the LSPs generated by the VXLAN IS-IS process. LSP-refresh—Interval at which the VXLAN IS-IS process sends LSPs to refresh remote LSDBs.
State | Running status of the VXLAN IS-IS process: · Enabled—MAC address synchronization or VXLAN autonegotiation is enabled. The VXLAN IS-IS process is running. · Disabled—MAC address synchronization and VXLAN autonegotiation are disabled. The VXLAN IS-IS process is not running.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis graceful-restart status

Use display vxlan isis graceful-restart status to display the GR state of the VXLAN IS-IS process.

Syntax

display vxlan isis graceful-restart status

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display the GR state of the VXLAN IS-IS process.

<Sysname> display vxlan isis graceful-restart status

Restart status: RESTARTING

Restart phase: LSDB synchronization

Restart interval: 300s

T3 remaining time: 65531s

Total number of interfaces: 1

Number of waiting LSPs: 0

T2 remaining time: 56s

Interface: Tunnel0

T1 remaining time: 2

RA received: N

CSNP received: N

T1 expired number: 3

Table 23 Command output

Field | Description
Restart status | Graceful Restart state: · COMPLETE—Restart has completed. · STARTING—VXLAN IS-IS process begins to restart. · RESTARTING—VXLAN IS-IS process is restarting. · UNKNOWN—Unknown state.
Restart phase | Restart phase: · Initialization—VXLAN IS-IS process is initializing. · LSDB synchronization—Peer VXLAN IS-IS processes are synchronizing LSDBs. · MAC receiving—VXLAN IS-IS process is receiving reported local MAC addresses. · LSP stable—VXLAN IS-IS process is generating LSPs. · LSP generation—VXLAN IS-IS process is refreshing and flooding LSPs to adjacent VXLAN neighbors. · Finish—Graceful Restart is complete. · Unknown—Unknown phase.
Restart Interval | T2 timer, in seconds. The GR process fails if the device fails to complete LSDB synchronization before this timer expires. The peer VXLAN IS-IS process removes the adjacency with the restarting VXLAN IS-IS. This timer is configurable by using the graceful-restart interval command.
T3 remaining time | The remaining time (in seconds) of the T3 timer. The GR process fails if it is not complete before this timer expires. The peer VXLAN IS-IS process removes the adjacency with the restarting VXLAN IS-IS. This timer is not user configurable.
Total number of interfaces | Number of VXLAN-enabled interfaces.
Number of waiting LSPs | Number of LSPs that are waiting to be synchronized with the GR helper for completing LSDB synchronization.
T2 remaining time | The remaining time (in seconds) of the T2 timer.
Interface | Interface-specific GR status information for the VXLAN IS-IS process.
T1 remaining time | Remaining time (in seconds) of the T1 timer on the interface. The T1 timer sets the interval for the restarting device to retransmit hello messages with the RR bit set (restart request messages). The T1 timer is not user configurable. The restarting device retransmits a restart request message to the neighbor if it has not received an acknowledgment for the previous restart request before the T1 timer expires. NOTE: VXLAN IS-IS sends hello messages with the RA bit set to acknowledge restart requests.
RA received | Whether the interface received a VXLAN IS-IS hello with the RA flag from the neighbor device.
CSNP received | Whether the interface received a CSNP from the neighbor device.
T1 expired number | Number of T1 timer expirations on the interface. When this counter reaches 10, the restarting device stops retransmitting hello messages with the RR bit set.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis local-host

Use display vxlan isis local-host to display local-host routes.

Syntax

display vxlan isis local-host [ ipv6 ] [ vxlan-id vxlan-id ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

ipv6: Specifies IPv6 local-host routes. If you do not specify this keyword, the command displays IPv4 local-host routes.

vxlan-id vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this command displays local-host routes for all VXLANs.

count: Displays the number of local-host routes that match the command.

Examples

# Display IPv4 local-host routes for all VXLANs.

<Sysname> display vxlan isis local-host

VXLAN ID IP address MAC address

---------------------------------------------------

1 192.168.56.1 0800-2700-249b

2 192.168.56.2 0800-2700-249c

# Display IPv6 local-host routes for all VXLANs.

<Sysname> display vxlan isis local-host ipv6

VXLAN ID IP address MAC address

---------------------------------------------------

1 200:200::100:200 0000-0000-0001

2 200:200::100:300 0000-0000-0002

# Display the total number of IPv4 local-host routes for all VXLANs.

<Sysname> display vxlan isis local-host count

5 entries found.

# Display the total number of IPv6 local-host routes for all VXLANs.

<Sysname> display vxlan isis local-host ipv6 count

5 entries found.

Table 24 Command output

Field | Description
IP address | IP address of the host.
MAC address | MAC address of the host.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis local-mac

Use display vxlan isis local-mac to display local MAC reachability information maintained by VXLAN IS-IS.

Syntax

display vxlan isis local-mac dynamic [ [ vxlan-id vxlan-id ] [ count ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

dynamic: Displays local dynamic MAC reachability information.

vxlan-id vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this command displays local MAC reachability information for all VXLANs.

count: Displays the number of MAC addresses that match the command.

Examples

# Display local dynamic MAC reachability information for all VXLANs.

<Sysname> display vxlan isis local-mac dynamic

VXLAN ID: 100

MAC address: 00aa-00bb-00cc

MAC address: 00aa-00cc-00bb

MAC address: 00cc-00aa-00bb

VXLAN ID: 50

MAC address: 00bb-00aa-00cc

MAC address: 00bb-00cc-00aa

# Display the sum of local dynamic MAC addresses in all VXLANs.

<Sysname> display vxlan isis local-mac dynamic count

5 MAC addresses found.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis lsdb

Use display vxlan isis lsdb to display the LSDB of the VXLAN IS-IS process.

Syntax

display vxlan isis lsdb [ local | lsp-id lsp-id | verbose ] * [ tunnel tunnel-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

local: Displays locally generated LSPs.

lsp-id lspid: Specifies an LSP identifier in SYSID.Pseudonode ID-fragment num format. The SYSID argument represents the originating node or pseudo node. The Pseudonode ID argument is separated by a dot from SYSID and by a hyphen from fragment num.

verbose: Displays detailed information about LSPs in the LSDB. If you do not specify this keyword, the command displays LSP summaries.

tunnel tunnel-number: Specifies a VXLAN tunnel interface by its interface number. The value range for the tunnel-number argument varies by device model.

Examples

# Display LSP summaries for the VXLAN IS-IS process.

<Sysname> display vxlan isis lsdb

Link state database information for VXLAN ISIS (Tunnel 0)

LSP ID Seq num Checksum Holdtime Length Overload

-----------------------------------------------------------------------------

0011.2200.0201.0000-00 0x00000063 0x1bc2 1104 74 0

0011.2200.0401.0000-00* 0x00000060 0x7f76 1089 55 0

0011.2200.0401.0001-00* 0x0000005f 0xf77 1175 57 0

Flags: *-Self LSP, +-Self LSP(Extended)

# Display detailed LSP information for the VXLAN IS-IS process.

<Sysname> display vxlan isis lsdb verbose

Link state database information for VXLAN ISIS (Tunnel 0)

LSP ID: 0011.2200.0201.0000-00

Sequence number: 0x00000063

Checksum: 0x1bc2

Holdtime: 745s

Length: 74

Overload: 0

Source: 0011.2200.0201.0000

Neighbour

ID: 0011.2200.0401.0001, Cost: 10

VXLANs:

VXLAN ID: 100

VXLAN ID: 10

MAC addresses:

VXLAN ID: 10 Confidence: 1

0001-0001-0001

LSP ID: 0011.2200.0401.0000-00*

Sequence number: 0x00000060

Checksum: 0x7f76

Holdtime: 730s

Length: 55

Overload: 0

Source: 0011.2200.0401.0000

Neighbour

ID: 0011.2200.0401.0001, Cost: 10

VXLANs:

VXLAN ID: 10

LSP ID: 0011.2200.0401.0001-00*

Sequence number: 0x0000005f

Checksum: 0xf77

Holdtime: 816s

Length: 57

Overload: 0

Source: 0011.2200.0401.0001

Neighbour

ID: 0011.2200.0201.0000, Cost: 0

ID: 0011.2200.0401.0000, Cost: 0

Flags: *-Self LSP, +-Self LSP(Extended)

Table 25 Command output

Field | Description
LSP ID | LSP ID: · An asterisk mark (*) suffix indicates that the LSP packet is generated by the default VXLAN IS-IS system on the local device. · A plus sign (+) suffix indicates that the LSP packet is generated by a VXLAN IS-IS virtual system on the local device. · IDs of remote LSPs do not have a suffix.
Sequence number | LSP sequence number.
Holdtime | LSP lifetime (in seconds), which counts down over time.
Length | LSP length.
Overload | Overload bit flag in the LSP: · 1—The bit is set. · 0—The bit is not set.
Source | System ID of the LSP generating device.
Neighbour | Neighbors of the LSP generating device.
ID | System ID of the neighbor.
Cost | Cost of the link between the LSP generating device and its neighbor.
VXLANs: VXLAN ID | VXLAN IDs advertised by the LSP.
MAC addresses | MAC addresses that can be reached through the LSP generating device.
VXLAN ID | VXLAN that contains the MAC address.
Confidence | LSP credibility: · 1. · 0. The entry with a confidence of 0 is more trustworthy than the entry with a confidence of 1.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis peer

Use display vxlan isis peer to display VXLAN IS-IS neighbor information.

Syntax

display vxlan isis peer

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display neighbor information for the VXLAN IS-IS process.

<Sysname> display vxlan isis peer

System ID: 0011.2200.0201

Link interface: Tunnel1

Circuit ID: 0011.2200.0401.0001

State: Up

Hold time: 26s

Neighbour DED priority: 64

Uptime: 00:01:24

Table 26 Command output

Field | Description
System ID | System ID of the VXLAN neighbor.
Link interface | Local VXLAN tunnel interface.
Circuit ID | Link ID.
State | Adjacency state: · Init—Neighbor state is initializing. · Up—Adjacency has been set up. · Down—Adjacency is lost.
Hold time | Adjacency hold timer in seconds, which counts down over time. If no hello packet has been received from the neighbor before this timer expires, the device removes the adjacency with the neighbor. If a hello packet is received, the hold timer restarts.
Neighbour DED Priority | DED priority of the neighbor. On each VXLAN tunnel, the VTEP with higher DED priority is elected the DED.
Uptime | The amount of time that the adjacency with the neighbor has lasted.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis remote-host

Use display vxlan isis remote-host to display remote-host routes advertised through VXLAN IS-IS.

Syntax

display vxlan isis remote-host [ ipv6 ] [ vxlan-id vxlan-id ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

ipv6: Specifies IPv6 remote-host routes. If you do not specify this keyword, the command displays IPv4 remote-host routes.

vxlan-id vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this command displays remote-host routes for all VXLANs.

count: Displays the number of remote-host routes that match the command.

Examples

# Display all IPv4 remote-host routes that are advertised through VXLAN IS-IS.

<Sysname> display vxlan isis remote-host

Host Flags: A-Received on an active tunnel interface.

C-In conflict with a local host route.

F-Flushed to the remote host route table.

VXLAN IP address MAC address Tunnel Interface Flag

---------------------------------------------------------------------

1 6.6.6.1 0000-0000-0001 Tunnel1 Vsi1 AF

1 6.6.6.2 0000-0000-0002 Tunnel1 Vsi1 AF

# Display the total number of IPv4 remote-host routes that are advertised through VXLAN IS-IS.

<Sysname> display vxlan isis remote-host count

1 entries found.

Table 27 Command output

Field | Description
VXLAN | VXLAN ID
IP address | IP address of the host.
MAC address | MAC address of the host.
Tunnel | Tunnel interface name.
Interface | VSI interface associated with the VXLAN's VSI.
Flags | Remote-host route flag: · A—The remote-host route is received from a valid tunnel interface. · C—The remote-host route conflicts with a local-host route. · F—The remote-host route has been issued to the remote-host route table.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis remote-mac

Use display vxlan isis remote-mac to display remote MAC reachability information maintained by VXLAN IS-IS.

Syntax

display vxlan isis remote-mac [ [ vxlan-id vxlan-id ] [ count ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vxlan-id vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, this command displays remote MAC reachability information for all VXLANs.

count: Displays the number of remote MAC addresses that match the command.

Examples

# Display remote MAC reachability information that VXLAN IS-IS has for all VXLANs.

<Sysname> display vxlan isis remote-mac

MAC Flags: A-MAC received on an active tunnel interface.

C-MAC conflict with local dynamic MAC.

F-MAC has been flushed to the remote MAC address table.

VXLAN ID: 10

MAC address: 0001-0001-0001

Interface: Tunnel1

Flags: AF

# Display the sum of remote MAC addresses that VXLAN IS-IS has for all VXLANs.

<Sysname> display vxlan isis remote-mac count

1 MAC addresses found.

Table 28 Command output

Field | Description
MAC address | Remote MAC address.
Interface | Tunnel interface name.
Flags | Remote MAC address flag: · A—The remote MAC address is received from a valid tunnel interface. · C—The remote MAC address conflicts with a local MAC address. · F—The remote MAC address has been issued to the remote MAC address table.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis remote-vxlan

Use display vxlan isis remote-vxlan to display remote VXLAN information.

Syntax

display vxlan isis remote-vxlan [ vxlan-id | count ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vxlan-id: Specifies a remote VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN ID, this command displays information about all remote VXLANs.

count: Displays the number of remote VXLANs that match the command.

Examples

# Display information about all remote VXLANs.

<Sysname> display vxlan isis remote-vxlan

VXLAN Flags: S-VXLAN supported at the local end

F-Association between VXLAN and Tunnels has been flushed to L2VPN

VXLAN ID: 1000

Flags: FS

Tunnel: 1

VXLAN ID: 1001

Flags: FS

Tunnel: 1

<Sysname> display vxlan isis remote-vxlan count

2 VXLANs found.

Table 29 Command output

Field | Description
Tunnel | VXLAN tunnels assigned to the VXLAN.
Flags | VXLAN flag: · S—The local end supports the VXLAN. · F—The associations between the VXLAN and tunnels have been flushed to L2VPN.

VXLAN commands -- VXLAN IS-IS commands -- display vxlan isis tunnel

Use display vxlan isis tunnel to display VXLAN IS-IS settings on VXLAN tunnel interfaces.

Syntax

display vxlan isis tunnel [ tunnel-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

tunnel-number: Specifies a VXLAN tunnel interface by its number. If you do not specify a VXLAN tunnel interface, this command displays VXLAN IS-IS settings on all VXLAN tunnel interfaces.

Examples

# Display VXLAN IS-IS settings on Tunnel 101.

<Sysname> display vxlan isis tunnel 101

Tunnel101

MTU: 1400

DED: Yes

DED priority: 80

Hello timer: 10s

Hello multiplier: 3

CSNP timer: 10s

LSP timer: 100ms

Max LSP transmit number: 5

VXLANs:

1,50,100

Table 30 Command output

Field | Description
MTU | Link MTU of the tunnel.
DED | DED election result: · Yes—The device is a DED in the VXLAN network. · No—The device is not a DED in the VXLAN network.
DED priority | DED priority of the device on the VXLAN tunnel interface.
Hello timer | Interval in seconds, at which VXLAN IS-IS sends hello packets to maintain the adjacencies with neighbors.
Hello multiplier | Multiplier for calculating the VXLAN IS-IS adjacency hold time.
CSNP timer | Interval at which the VTEP sends CSNP packets to advertise LSP summaries for LSDB synchronization. This timer takes effect only if the VTEP is a DED.
LSP timer | Minimum LSP transmit interval in milliseconds. The device must wait for this timer to expire before sending LSPs.
LSP transmit-throttle count | Maximum number of LSPs that can be sent at each interval.
VXLANs | VXLANs on the VXLAN tunnel interface.

VXLAN commands -- VXLAN IS-IS commands -- graceful-restart

Use graceful-restart to enable Graceful Restart for the VXLAN IS-IS process.

Use undo graceful-restart to disable Graceful Restart for the VXLAN IS-IS process.

Syntax

graceful-restart

undo graceful-restart

Default

Graceful Restart is disabled for the VXLAN IS-IS process.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Enable Graceful Restart for the peer VXLAN IS-IS processes at two ends of the VXLAN tunnel.

This feature guarantees nonstop forwarding while the peer VXLAN IS-IS processes are re-establishing their adjacency after a process restart or active/standby switchover occurs.

Examples

# Enable Graceful Restart for the VXLAN IS-IS process.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis] graceful-restart

Related commands

display vxlan isis graceful-restart status

VXLAN commands -- VXLAN IS-IS commands -- graceful-restart interval

Use graceful-restart interval to set the GR restart interval for VXLAN IS-IS.

Use undo graceful-restart interval to restore the default.

Syntax

graceful-restart interval interval

undo graceful-restart interval

Default

The GR restart interval is 300 seconds for VXLAN IS-IS.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Specifies a GR restart interval in the range of 30 to 1800 seconds.

Usage guidelines

This command sets the T2 timer to control the maximum amount of time for LSDB synchronization during a restart.

The device advertises the T2 timer as the adjacency hold time to its neighbor during a GR process.

Before the timer expires, the neighbor maintains the adjacency with the device. If the device fails to complete the restart before this timer expires, the neighbor removes the adjacency. The GR process fails.

Examples

# Set the GR restart interval to 120 seconds for the VXLAN IS-IS process.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis] graceful-restart interval 120

Related commands

display vxlan isis graceful-restart status

VXLAN commands -- VXLAN IS-IS commands -- host-mac-learning enable

Use host-mac-learning enable to enable host route MAC learning.

Use undo host-mac-learning enable to disable host route MAC learning.

Syntax

host-mac-learning enable

undo host-mac-learning enable

Default

Host route MAC learning is disabled.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Host route MAC learning enables the VTEP to learn remote MAC addresses from received remote-host routes.

As a best practice, do not enable both host route MAC learning and MAC reachability information advertisement to prevent the VTEP from learning duplicate MAC addresses.

Examples

# Enable host route MAC learning.

<Sysname> system-view

[Sysname] vxlan isis

[Sysname-vxlan-isis] host-mac-learning enable

VXLAN commands -- VXLAN IS-IS commands -- host-synchronization enable

Use host-synchronization enable to enable host route advertisement through VXLAN IS-IS.

Use undo host-synchronization enable to disable host route advertisement through VXLAN IS-IS.

Syntax

host-synchronization enable

undo host-synchronization enable

Default

Host route advertisement through VXLAN IS-IS is disabled.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Host route advertisement enables the VTEP to advertise and receive host routes (host IP address and MAC address mappings) through VXLAN IS-IS. VXLAN IS-IS obtains local-host routes from the ARP or ND module. A host route contains a host's IP address, MAC address, and VXLAN ID.

MAC reachability information and host route information might overlap. As a best practice, do not enable both MAC reachability information advertisement and host route advertisement on a network that is complex or has heavy traffic.

Examples

# Enable host route advertisement through VXLAN IS-IS.

<Sysname> system-view

[Sysname] vxlan isis

[Sysname-vxlan-isis] host-synchronization enable

VXLAN commands -- VXLAN IS-IS commands -- local-host proxy enable

Use local-host proxy enable to enable local-host route proxy.

Use undo local-host proxy enable to disable local-host route proxy.

Syntax

local-host proxy enable

undo local-host proxy enable

Default

Local-host route proxy is disabled.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Local-host route proxy enables VXLAN IS-IS to replace host MAC addresses with the MAC address of the local VSI interface before VXLAN IS-IS advertises host routes to remote VTEPs. This feature saves MAC address resources on VTEPs by associating multiple remote-host IP addresses with one MAC address.

Examples

# Enable local-host route proxy.

<Sysname> system-view

[Sysname] vxlan isis

[Sysname-vxlan-isis] local-host proxy enable

VXLAN commands -- VXLAN IS-IS commands -- log-peer-change enable

Use log-peer-change enable to enable VXLAN IS-IS adjacency change logging.

Use undo log-peer-change enable to disable outputting VXLAN IS-IS adjacency change log messages.

Syntax

log-peer-change enable

undo log-peer-change enable

Default

VXLAN IS-IS adjacency change logging is enabled.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Adjacency change logging enables the VXLAN IS-IS process to send a log message to the information center when an adjacency change occurs.

With the information center, you can set log message filtering and output rules, including output destinations. For more information about using the information center, see Network Management and Monitoring Configuration Guide.

Examples

# Disable adjacency change logging for the VXLAN IS-IS process.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis] log-peer-change enable

VXLAN commands -- VXLAN IS-IS commands -- mac-synchronization enable

Use mac-synchronization enable to enable MAC reachability information advertisement through VXLAN IS-IS.

Use undo mac-synchronization enable to disable MAC reachability information advertisement through VXLAN IS-IS.

Syntax

mac-synchronization enable

undo mac-synchronization enable

Default

MAC reachability information advertisement through VXLAN IS-IS is disabled.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command enables the VTEP to advertise and receive MAC reachability information through VXLAN IS-IS.

MAC reachability information and host route information might overlap. As a best practice, do not enable both MAC reachability information advertisement and host route advertisement on a network that is complex or has heavy traffic.

Examples

# Enable MAC advertisement through VXLAN IS-IS.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis] mac-synchronization enable

VXLAN commands -- VXLAN IS-IS commands -- negotiate-vni enable

Use negotiate-vni enable to enable VXLAN autonegotiation through VXLAN IS-IS.

Use undo negotiate-vni enable to disable VXLAN autonegotiation through VXLAN IS-IS.

Syntax

negotiate-vni enable

undo negotiate-vni enable

Default

VXLAN autonegotiation through VXLAN IS-IS is disabled.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

To automatically assign VXLAN tunnels to VXLANs, enable VXLAN autonegotiation on all VTEPs.

VXLAN autonegotiation enables the VTEPs to advertise local VXLAN IDs through VXLAN IS-IS. Two VTEPs assign the VXLAN tunnel between them to a VXLAN if both of them have the VXLAN ID.

Examples

# Enable VXLAN autonegotiation through VXLAN IS-IS.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis] negotiate-vni enable

VXLAN commands -- VXLAN IS-IS commands -- overlay isis ded-priority

Use overlay isis ded-priority to change the DED priority of the VTEP on a tunnel interface.

Use undo overlay isis ded-priority to restore the default.

Syntax

overlay isis ded-priority priority

undo overlay isis ded-priority

Default

The DED priority value is 64.

Views

NVE tunnel interface view

VXLAN tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

priority: Specifies a DED priority value in the range of 0 to 127.

Usage guidelines

On each VXLAN tunnel, the VTEP with higher DED priority is elected the DED to send CSNP packets periodically for LSDB synchronization. If the VTEPs have the same DED priority, the one with the higher MAC address is elected.

Examples

# Set the DED priority value of Tunnel 101 to 2.

<Sysname> system-view

[Sysname] interface tunnel 101

[Sysname-tunnel101] overlay isis ded-priority 2

Related commands

display vxlan isis tunnel

VXLAN commands -- VXLAN IS-IS commands -- overlay isis timer csnp

Use overlay isis timer csnp to set the CSNP interval.

Use undo overlay isis timer csnp to restore the default.

Syntax

overlay isis timer csnp interval

undo overlay isis timer csnp

Default

The CSNP interval is 10 seconds.

Views

NVE tunnel interface view

VXLAN tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Specifies an interval in the range of 1 to 600 seconds.

Usage guidelines

The setting takes effect only if the VTEP is the DED on the tunnel.

The DED sends CSNP packets at the specified interval to advertise LSP summaries to the remote VTEP for LSDB synchronization.

Examples

# Set the CSNP interval to 15 seconds on Tunnel 101.

<Sysname> system-view

[Sysname] interface tunnel 101

[Sysname-tunnel101] overlay isis timer csnp 15

Related commands

display vxlan isis tunnel

VXLAN commands -- VXLAN IS-IS commands -- overlay isis timer hello

Use overlay isis timer hello to set the VXLAN IS-IS hello interval.

Use undo overlay isis timer hello to restore the default.

Syntax

overlay isis timer hello interval

undo overlay isis timer hello

Default

The VXLAN IS-IS hello interval is 10 seconds.

Views

NVE tunnel interface view

VXLAN tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Specifies an interval in the range of 3 to 255 seconds.

Usage guidelines

Set the hello interval depending on the network convergence requirement and system resources.

· To increase the speed of network convergence, decrease the hello interval.

· To conserve resources, increase the hello interval.

If the VTEP is a DED, its hello interval is one-third of the hello interval set by using this command.

Examples

# Set the VXLAN IS-IS hello interval to 6 seconds on Tunnel 101.

<Sysname> system-view

[Sysname] interface tunnel 101

[Sysname-tunnel101] overlay isis timer hello 6

Related commands

display vxlan isis tunnel

VXLAN commands -- VXLAN IS-IS commands -- overlay isis timer holding-multiplier

Use overlay isis timer holding-multiplier to set the hello multiplier for calculating the VXLAN IS-IS adjacency hold time.

Use undo overlay isis timer holding-multiplier to restore the default.

Syntax

overlay isis timer holding-multiplier value

undo overlay isis timer holding-multiplier

Default

The hello multiplier is 3 for calculating the VXLAN IS-IS adjacency hold time.

Views

NVE tunnel interface view

VXLAN tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

value: Specifies a multiplier in the range of 3 to 1000.

Usage guidelines

Adjacency hold time sets the amount of time that the remote VTEPs can retain the adjacency with the local VTEP before an adjacency update. VTEPs send their adjacency hold time in hello packets to update the adjacencies with their neighbors. A VTEP removes the adjacency with a neighbor if it does not receive a hello packet from the neighbor before the timer expires.

· If Graceful Restart is disabled, the adjacency hold time equals the VXLAN IS-IS hello interval multiplied by the hello multiplier.

· If Graceful Restart is enabled, the adjacency hold time equals the greater value between the following settings:

?span style='font:7.0pt "Times New Roman"'> The restart interval.

?span style='font:7.0pt "Times New Roman"'> The VXLAN IS-IS hello interval multiplied by the hello multiplier.

The maximum adjacency hold time is 65535 seconds. If this value is exceeded, the actual adjacency hold time is set to 65535 seconds.

Examples

# Set the hello multiplier to 6 for calculating the VXLAN IS-IS adjacency hold time.

<Sysname> system-view

[Sysname] interface tunnel 101

[Sysname-tunnel101] overlay isis timer holding-multiplier 6

Related commands

overlay isis timer hello

VXLAN commands -- VXLAN IS-IS commands -- overlay isis timer lsp

Use overlay isis timer lsp to set the minimum LSP transmit interval and the maximum number of LSPs that can be sent at each interval.

Use undo overlay isis timer lsp to restore the default.

Syntax

overlay isis timer lsp interval [ count count ]

undo overlay isis timer lsp

Default

The minimum LSP transmit interval is 100 milliseconds. A maximum of five LSPs can be sent at each interval.

Views

NVE tunnel interface view

VXLAN tunnel interface view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Specifies the minimum LSP transmit interval, a multiple of 100 in the range of 100 to 1000 milliseconds.

count count: Specifies the maximum number of LSP packets that can be sent at each interval. The value range is 1 to 1000.

Usage guidelines

The VTEP generates an LSP update when any LSDB content changes. For example, a MAC address is removed or added.

Use this command to control the amount of LSP packets that the VTEP sends out. To decrease the amount of LSP packets, increase the interval and decreases the maximum number of LSP packets sent at each interval.

Examples

# Set the minimum LSP transmit interval to 500 ms.

<Sysname> system-view

[Sysname] interface tunnel 101

[Sysname-tunnel101] overlay isis timer lsp 500

Related commands

display vxlan isis brief

VXLAN commands -- VXLAN IS-IS commands -- reserved vxlan

Use reserved vxlan to specify a VXLAN for the VTEP to exchange VXLAN IS-IS packets with other VTEPs.

Use undo reserved vxlan to restore the default.

Syntax

reserved vxlan vxlan-id

undo reserved vxlan

Default

No VXLAN has been reserved.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 1 to 16777215.

Usage guidelines

You can specify only one reserved VXLAN on the VTEP. All VSIs on the VTEP use the reserved VXLAN to send and receive VXLAN IS-IS packets.

To exchange VXLAN IS-IS packets, two VTEPs must use the same reserved VXLAN.

The reserved VXLAN cannot be the VXLAN created on any VSI.

Examples

# Specify VXLAN 10000 as the reserved VXLAN for VXLAN IS-IS.

<Sysname> system-view

[Sysname] reserved vxlan 10000

VXLAN commands -- VXLAN IS-IS commands -- reset vxlan isis

Use reset vxlan isis to clear dynamic VXLAN IS-IS data.

Syntax

reset vxlan isis

Views

User view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command clears data on the VXLAN IS-IS process, including neighbor information, local and remote MAC reachability information, VXLAN IDs, and the LSDB.

Examples

# Clear dynamic data on the VXLAN IS-IS process.

<Sysname> reset vxlan isis

VXLAN commands -- VXLAN IS-IS commands -- timer lsp-max-age

Use timer lsp-max-age to specify the maximum lifetime of LSPs generated by the VTEP.

Use undo timer lsp-max-age to restore the default.

Syntax

timer lsp-max-age second s

undo timer lsp-max-age

Default

The maximum LSP lifetime is 1200 seconds.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Parameters

seconds: Specifies the maximum LSP lifetime in the range of 3 to 65535 seconds.

Usage guidelines

This command specifies the maximum amount of time an LSP generated by the local VXLAN IS-IS process can be valid in an LSDB. When the timer decreases to zero, the LSP is removed from the LSDB.

Examples

# Set the maximum LSP lifetime to 25 minutes (1500 seconds) on the VXLAN IS-IS process.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis] timer lsp-max-age 1500

Related commands

display vxlan isis brief

VXLAN commands -- VXLAN IS-IS commands -- timer lsp-refresh

Use timer lsp-refresh to specify the LSP refresh interval.

Use undo timer lsp-refresh to restore the default.

Syntax

timer lsp-refresh second s

undo timer lsp-refresh

Default

The LSP refresh interval is 900 seconds.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Parameters

second s: Specifies an interval in the range of 1 to 65534 seconds.

Usage guidelines

Each VTEP updates the LSPs that they generated at the LSP refresh interval to maintain LSDB consistency across the VXLAN network.

To avoid unnecessary LSP age-outs at remote VTEPs, make sure the LSP refresh interval is shorter than the LSP lifetime.

Examples

# Set the LSP refresh interval to 1500 seconds.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis] timer lsp-refresh 1500

Related commands

display vxlan isis brief

timer lsp-max-age

VXLAN commands -- VXLAN IS-IS commands -- virtual-system

Use virtual-system to create a VXLAN IS-IS virtual system.

Use undo virtual-system to delete a VXLAN IS-IS virtual system.

Syntax

virtual-system systemid

undo virtual-system systemid

Default

No VXLAN IS-IS virtual systems exist.

Views

VXLAN IS-IS view

Predefined user roles

network-admin

mdc-admin

Parameters

systemid: Specifies a virtual system ID in XXXX.XXXX.XXXX format. Each X represents a hexadecimal digit.

Usage guidelines

The virtual system ID must be unique among all VTEPs.

The VXLAN IS-IS process sends all local MAC reachability information in one LSP. By default, an LSP can convey a maximum of 55 x 210 MAC address entries.

To increase this number to include all local MAC address entries, create virtual systems. Each virtual system represents an increase of 55 x 210 MAC address entries.

Examples

# Create virtual system 0001.0001.0001.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis] virtual-system 0001.0001.0001

Related commands

display vxlan isis brief

VXLAN commands -- VXLAN IS-IS commands -- vxlan-isis

Use vxlan-isis to create a VXLAN IS-IS process and enter its view, or enter the view of the existing VXLAN IS-IS process.

Use undo vxlan-isis to delete the VXLAN IS-IS process.

Syntax

vxlan-isis

undo vxlan-isis

Default

The VXLAN IS-IS process does not exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

You can create only one VXLAN IS-IS process.

All settings configured in VXLAN IS-IS view are removed if you delete the VXLAN IS-IS process.

Examples

# Enter VXLAN IS-IS process view.

<Sysname> system-view

[Sysname] vxlan-isis

[Sysname-vxlan-isis]

Related commands

display vxlan isis brief

VXLAN commands -- OVSDB commands -- ovsdb server bootstrap ca-certificate

Use ovsdb server bootstrap ca-certificate to specify a CA certificate file for establishing OVSDB SSL connections.

Use undo ovsdb server bootstrap ca-certificate to restore the default.

Syntax

ovsdb server bootstrap ca-certificate ca-filename

undo ovsdb server bootstrap ca-certificate

Default

SSL uses the CA certificate file in the PKI domain.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

ca-filename: Specifies the CA certificate file name, a case-insensitive string. The file name cannot contain the slot string, and the file must be stored on the active MPU.

Usage guidelines

For the specified certificate to take effect, you must execute the ovsdb server enable command to enable the OVSDB server. You must disable and then re-enable the OVSDB server if it has been enabled.

If the specified CA certificate file does not exist, the device obtains a self-signed certificate from the controller. The obtained file uses the name specified for the ca-filename argument.

Examples

# Specify CA certificate file ca-new for establishing OVSDB SSL connections.

<Sysname> system-view

[Sysname] ovsdb server bootstrap ca-certificate ca-new

Related commands

ovsdb server enable

ovsdb server pki domain

ovsdb server pssl

ovsdb server ssl

VXLAN commands -- OVSDB commands -- ovsdb server enable

Use ovsdb server enable to enable the OVSDB server.

Use undo ovsdb server enable to disable the OVSDB server.

Syntax

ovsdb server enable

undo ovsdb server enable

Default

The OVSDB server is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

To obtain configuration data from controllers, you must enable the OVSDB server.

Before you enable the OVSDB server, you must establish an OVSDB SSL or TCP connection with a minimum of one controller.

Examples

# Enable the OVSDB server.

<Sysname> system-view

[Sysname] ovsdb server enable

VXLAN commands -- OVSDB commands -- ovsdb server pki domain

Use ovsdb server pki domain to specify a PKI domain for establishing OVSDB SSL connections.

Use undo ovsdb bootstrap server pki domain to restore the default.

Syntax

ovsdb server pki domain domain-name

undo ovsdb server pki domain

Default

No PKI domain is specified for establishing OVSDB SSL connections.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

domain-name: Specifies a PKI domain name, a case-sensitive string of 1 to 31 characters. The PKI domain must already exist and contain a complete certificate and key.

Usage guidelines

To communicate with controllers through SSL, you must specify a PKI domain.

For the specified PKI domain to take effect, you must execute the ovsdb server enable command to enable the OVSDB server. You must disable and then re-enable the OVSDB server if it has been enabled.

For more information about PKI domains, see PKI in Security Configuration Guide.

Examples

# Specify PKI domain ovsdb_test for establishing OVSDB SSL connections.

<Sysname> system-view

[Sysname] ovsdb server pki domain ovsdb_test

Related commands

ovsdb server bootstrap ca-certificate

ovsdb server enable

ovsdb server pssl

ovsdb server ssl

VXLAN commands -- OVSDB commands -- ovsdb server pssl

Use ovsdb server pssl to enable the device to listen for OVSDB SSL connection requests.

Use undo ovsdb server pssl to restore the default.

Syntax

ovsdb server pssl [ port port-number ]

undo ovsdb server pssl

Default

The device does not listen for OVSDB SSL connection requests.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

port port-number: Specifies a port to listen for OVSDB SSL connection requests. The value range for the port-number argument is 1 to 65535. If you do not specify a port, the device uses the port number 6640.

Usage guidelines

Before you use this command, you must specify a PKI domain for SSL.

You can specify only one port to listen for OVSDB SSL connection requests. If you execute this command multiple times, the most recent configuration takes effect.

For the specified port setting to take effect, you must execute the ovsdb server enable command to enable the OVSDB server. You must disable and then re-enable the OVSDB server if it has been enabled.

Examples

# Enable the device to listen for OVSDB SSL connection requests on port 6640.

<Sysname> system-view

[Sysname] ovsdb server pssl

Related commands

ovsdb server bootstrap ca-certificate

ovsdb server enable

ovsdb server pki domain

ovsdb server ssl

VXLAN commands -- OVSDB commands -- ovsdb server ptcp

Use ovsdb server ptcp to enable the device to listen for OVSDB TCP connection requests.

Use undo ovsdb server ptcp to restore the default.

Syntax

ovsdb server ptcp [ port port-number ]

undo ovsdb server ptcp

Default

The device does not listen for OVSDB TCP connection requests.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

port-number: Specifies a port to listen for OVSDB TCP connection requests. The value range for the port-number argument is 1 to 65535. If you do not specify a port, the device uses the port number 6640.

Usage guidelines

You can specify only one port to listen for OVSDB TCP connection requests. If you execute this command multiple times, the most recent configuration takes effect.

For the specified port setting to take effect, you must execute the ovsdb server enable command to enable the OVSDB server. You must disable and then re-enable the OVSDB server if it has been enabled.

Examples

# Enable the device to listen for OVSDB TCP connection requests on port 6640.

<Sysname> system-view

[Sysname] ovsdb server ptcp

Related commands

ovsdb server enable

ovsdb server tcp

VXLAN commands -- OVSDB commands -- ovsdb server ssl

Use ovsdb server ssl to set up an active OVSDB SSL connection to a controller.

Use undo ovsdb server ssl to remove an OVSDB SSL connection from a controller.

Syntax

ovsdb server ssl ip ip-address port port-number

undo ovsdb server ssl ip ip-address port port-number

Default

The device does not have active OVSDB SSL connections to a controller.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

ip ip-address: Specifies the destination IP address for the SSL connection.

port port-number: Specifies the destination port for the SSL connection. The value range for the port-number argument is 1 to 65535.

Usage guidelines

Before you use this command, you must specify a PKI domain for SSL.

The device can have a maximum of eight active SSL connections.

To establish the connection, you must execute the ovsdb server enable command. You must disable and then re-enable the OVSDB server if it has been enabled.

Examples

# Set up an active SSL connection to port 6632 at 192.168.12.2.

<Sysname> system-view

[Sysname] ovsdb server ssl ip 192.168.12.2 port 6632

Related commands

ovsdb server bootstrap ca-certificate

ovsdb server enable

ovsdb server pki domain

ovsdb server pssl

VXLAN commands -- OVSDB commands -- ovsdb server tcp

Use ovsdb server tcp to set up an active OVSDB TCP connection to a controller.

Use undo ovsdb server tcp to remove an OVSDB TCP connection.

Syntax

ovsdb server tcp ip ip-address port port-number

undo ovsdb server tcp ip ip-address port port-number

Default

The device does not have active OVSDB TCP connections.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

ip ip-address: Specifies the destination IP address for the TCP connection.

port port-number: Specifies the destination port for the TCP connection. The value range for the port-number argument is 1 to 65535.

Usage guidelines

The device can have a maximum of eight active OVSDB TCP connections.

To establish the connection, you must execute the ovsdb server enable command. You must disable and then re-enable the OVSDB server if it has been enabled.

Examples

# Set up an active OVSDB TCP connection to port 6632 at 192.168.12.2.

<Sysname> system-view

[Sysname] ovsdb server tcp ip 192.168.12.2 port 6632

Related commands

ovsdb server enable

ovsdb server ptcp

VXLAN commands -- OVSDB commands -- vtep access port

Use vtep access port to specify a site-facing interface as a VTEP access port.

Use undo vtep access port to restore the default.

Syntax

vtep access port

undo vtep access port

Default

An interface is not a VTEP access port.

Views

Layer 2 aggregate interface view

Layer 2 Ethernet interface view

Layer 3 interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

For controllers to manage a site-facing interface, you must specify the interface as a VTEP access port.

Examples

# Specify GigabitEthernet 1/0/1 as a VTEP access port.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] vtep access port

VXLAN commands -- OVSDB commands -- vtep enable

Use vtep enable to enable the OVSDB VTEP service.

Use undo vtep enable to disable the OVSDB VTEP service.

Syntax

vtep enable

undo vtep enable

Default

The OVSDB VTEP service is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable the OVSDB VTEP service.

<Sysname> system-view

[Sysname] vtep enable

VXLAN commands -- OVSDB commands -- vxlan tunnel flooding-proxy

Use vxlan tunnel flooding-proxy to enable flood proxy on multicast VXLAN tunnels.

Use undo vxlan tunnel flooding-proxy to disable flood proxy on multicast VXLAN tunnels.

Syntax

vxlan tunnel flooding-proxy

undo vxlan tunnel flooding-proxy

Default

Flood proxy is disabled on multicast VXLAN tunnels.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If you use a flood proxy server, you must enable flood proxy globally on multicast tunnels. Then the multicast tunnels are converted into flood proxy tunnels. The VTEP sends broadcast, multicast, and unknown unicast traffic for a VXLAN to the flood proxy server through the tunnels. The flood proxy server then replicates and forwards flood traffic to remote VTEPs.

The vxlan tunnel flooding-proxy command and its undo form affect only VXLAN tunnels that are issued after the vxlan tunnel flooding-proxy command.

Examples

# Enable flood proxy on all multicast VXLAN tunnels.

<Sysname> system

[Sysname] vxlan tunnel flooding-proxy