Service chain commands -- blade-load-balance-team

| NOTE: Support for this command depends on the device model.

Use blade-load-balance-team to specify a load sharing team for an intra-device service chain.

Use undo blade-load-balance-team to restore the default.

Syntax

blade-load-balance-team team-name

undo blade-load-balance-team

Default

No load sharing team exists.

Views

Service node view

Predefined user roles

network-admin

mdc-admin

Parameters

team-name: Specifies a load sharing team by its name. Load sharing team names are predefined by the system.

Usage guidelines

Use this command to specify load sharing teams according to the types of services supported by LPUs.

You can specify only one load sharing team for each service node. All load sharing teams in a service chain must be different from each other.

Examples

# Specify the load sharing team Blade3lb-m90001 for service node 1.

<Sysname> system-view

[Sysname] service-chain path 1

[Sysname-spath1] service function 1

[Sysname-spath1-func1] blade-load-balance-team Blade3lb-m90001

Related commands

service function

Service chain commands -- display service-chain path

Use display service-chain path to display service chain information.

Syntax

display service-chain path { path-id | all }

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

path-id: Specifies a service chain by its path ID in the range of 1 to 8388606.

all: Displays information for all service chains.

Examples

# Display information for all service chains.

<Sysname> display service-chain path all

PathID: 1

Local-send ACL: 3000

If-match 1: input-interface Tun0 acl number 3333

Function : 1

Load-team: Blade3fw-m90001

Service-list: fw

# Display information for all service chains.

<Sysname> display service-chain path all

PathID: 22

Next service node: 4.4.4.4

Previous service node: 5.5.5.5

Function: 1

Service-list: fw

Table 1 Command output

Field | Description
PathID | Path ID of the service chain.
Local-send ACL | Service chain policy for locally generated packets.
If-match | Service chain policy for received packets.
Next service node | IP address of the next service node.
Previous service node | IP address of the previous service node.
Function | ID of the service node.
Load-team | Load sharing team name.
Service-list | Services in the service list.

Service chain commands -- display service-chain statistics external

| NOTE: Support for this command depends on the device model.

Use display service-chain statistics external to display inter-device service chain statistics.

Syntax

display service-chain statistics external

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display inter-device service chain statistics.

<Sysname> display service-chain path statistics external

External Service-chain statistics

Board : all

Total receive : 0 Total send : 0

Service drop : 0 Error drop : 0

Table 2 Command output

Field | Description
Board | Card on which inter-device service chain statistics are displayed. The value for this field is fixed at all.
Total receive | Number of packets received by the inter-device service chains.
Total send | Number of packets sent by the inter-device service chains.
Service drop | Number of packets dropped by the inter-device service chains.
Error drop | Number of error packets dropped by the inter-device service chains.

Service chain commands -- if-match

| NOTE: Support for this command depends on the device model.

Use if-match to configure a service chain policy for received IP packets.

Use undo if-match to remove a service chain policy for received IP packets.

Syntax

if-match input-interface interface-type interface-number acl { ipv4-acl-number | name ipv4-acl-name }

undo if-match input-interface interface-type interface-number

Default

No service chain policies exist.

Views

Service chain view

Predefined user roles

network-admin

mdc-admin

Parameters

input-interface interface-type interface-number: Specifies an input interface by its type or number.

acl ipv4-acl-number: Specifies an IPv4 ACL by its number in the range of 2000 to 3999.

acl name ipv4-acl-name: Specifies an IPv4 ACL by its name, a case-insensitive string of 1 to 63 characters. The ACL name must start with a letter and cannot be all.

Usage guidelines

Each service chain policy for received IP packets includes an input interface and an ACL. Only packets that match the ACL can enter the service chain.

Examples

# Configure a service chain policy by specifying the input interface GigabitEthernet 1/0/1 and ACL 2000.

[Sysname] service-chain path 1

[Sysname-spath1] if-match input-interface gigabitethernet 1/0/1 acl 2000

Related commands

service-chain path

Service chain commands -- if-match local-send

| NOTE: Support for this command depends on the device model.

Use if-match local-send to configure a service chain policy for locally generated IP packets.

Use undo if-match local-send to remove the service chain policy for locally generated IP packets.

Syntax

if-match local-send acl { ipv4-acl-number | name ipv4-acl-name }

undo if-match local-send

Default

No service chain policy exists.

Views

Service chain view

Predefined user roles

network-admin

mdc-admin

Parameters

acl ipv4-acl-number: Specifies an IPv4 ACL by its number in the range of 2000 to 3999.

acl name ipv4-acl-name: Specifies an IPv4 ACL by its name, a case-insensitive string of 1 to 63 characters. The ACL name must start with a letter and cannot be all.

Usage guidelines

For the locally generated traffic, the source and destination IP addresses in the traffic are compared with the source and destination IP addresses in the ACL, respectively. Only the packets that match the ACL can enter the service chain.

Examples

# Configure a service chain policy by specifying ACL 2002.

<Sysname> system-view

[Sysname] service-chain path 1

[Sysname-spath1] if-match local-send acl 2002

Related commands

service-chain path

Service chain commands -- next-service-node

| NOTE: Support for this command depends on the device model.

Use next-service-node to specify the IP address of the next service node in an inter-device service chain.

Use undo next-service-node to restore the default.

Syntax

next-service-node ip-address

undo next-service-node

Default

The IP address of the next service node in an inter-device service chain is not specified.

Views

Service chain view

Predefined user roles

network-admin

mdc-admin

Parameters

ip-address: Specifies the IP address of the next service node.

Usage guidelines

If the service node is the end node, you do not need to specify the IP address of the next service node.

Examples

# Specify the IP address of the next service node as 2.2.2.2 for service chain 1.

<Sysname> system-view

[Sysname] service-chain path 1

[Sysname-spath1] next-service-node 2.2.2.2

Related commands

display service-chain path

Service chain commands -- previous-service-node

| NOTE: Support for this command depends on the device model.

Use previous-service-node to specify the IP address of the previous service node in an inter-device service chain.

Use undo previous-service-node to restore the default.

Syntax

previous-service-node ip-address

undo previous-service-node

Default

The IP address of the previous service node in an inter-device service chain is not specified.

Views

Service chain view

Predefined user roles

network-admin

mdc-admin

Parameters

ip-address: Specifies the IP address of the previous service node.

Usage guidelines

If the service node is the head node, you do not need to specify the IP address of the previous service node.

Examples

# Specify the IP address of the previous service node as 3.3.3.3 for service chain 1.

<Sysname> system-view

[Sysname] service-chain path 1

[Sysname-spath1] previous-service-node 3.3.3.3

Related commands

display service-chain path

Service chain commands -- service function

Use service function to create a service node and enter its view, or enter the view of an existing service node.

Use undo service function to delete a service node or all service nodes on the service chain.

Syntax

service function function-number

undo service function { function-number | all }

Default

No service nodes exist.

Views

Service chain view

Predefined user roles

network-admin

mdc-admin

Parameters

function-number: Assigns an ID to the service node. The value range for the function-number argument depends on the device model.

all: Deletes all service nodes on the service chain.

Usage guidelines

The maximum number of service nodes supported by a service chain depends on the device model.

Examples

# Create service node 1 and enter its view.

<Sysname> system-view

[Sysname] service-chain path 1

[Sysname-spath1] service function 1

[Sysname-spath1-func1]

Related commands

display service-chain path

Service chain commands -- service list

Use service list to create a service list.

Use undo service list to restore the default.

Syntax

service list { acg | dpi | fw | ips | ipsec | lb | nat }*

undo service list

Default

No service list exists.

Views

Service node view

Predefined user roles

network-admin

mdc-admin

Parameters

acg: Specifies the application control gateway (ACG) service.

dpi: Specifies the deep packet inspection (DPI) service.

fw: Specifies the firewall (FW) service.

ips: Specifies the intelligent protection switching (IPS) service.

ipsec: Specifies the IP security (IPsec) service.

lb: Specifies the load balancing (LB) service.

nat: Specifies the network address translation (NAT) service.

Usage guidelines

The types of services supported by a service list depend on the device model.

You can configure only one service list for each service node. All services on a service node must be different from each other.

The services in a service list must be supported by the device's LPUs. If not, the LPUs cannot apply the services to the traffic.

For an intra-device service chain, the services might not be applied to the traffic in the same order as they are specified in a service list.

For an inter-device service chain, the services in a service list are applied to traffic in the order they are specified in a service list.

Examples

# Create a service list that contains the FW and LB services for service node 1.

<Sysname> system-view

[Sysname] service-chain path 1

[Sysname-spath1] service function 1

[Sysname-spath1-func1] service list fw lb

Related commands

display service-chain path

Service chain commands -- service-chain path

Use service-chain path to create a service chain and enter its view, or enter the view of an existing service chain.

Use undo service-chain path to delete a service chain or all service chains on a device.

Syntax

service-chain path path-id

undo service-chain path { path-id | all }

Default

No service chains exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

path-id: Specifies the path ID of a service chain, in the range of 1 to 8388606. A path ID uniquely identifies a service chain.

all: Deletes all service chains on the device.

Examples

# Create service chain 1 and enter its view.

<Sysname> system-view

[Sysname] service-chain path 1

[Sysname-spath1]

Related commands

display service-chain path