HP FlexFabric 11900 Switch Series MPLS Command Reference Part number: 5998-5277 Software version: Release 2111 and later Document version: 6W100-20140110
Legal and notice information © Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Contents Basic MPLS commands ················································································································································ 1 display mpls forwarding ilm ···································································································································· 1 display mpls forwarding nhlfe ································································································································ 2 display mpls
snmp-agent trap enable ldp ································································································································· 54 targeted-peer ·························································································································································· 55 vpn-instance ··························································································································································· 56 MPLS TE
Tunnel policy commands ········································································································································ 121 display mpls tunnel ·············································································································································· 121 preferred-path ······················································································································································ 122 select-seq
display bgp routing-table vpnv6 advertise-info ································································································ 181 display bgp routing-table vpnv6 as-path-acl ···································································································· 182 display bgp routing-table vpnv6 community-list ······························································································· 184 display bgp routing-table vpnv6 inlabel ····························
VPLS commands ······················································································································································ 244 address-family l2vpn ··········································································································································· 244 auto-discovery ······················································································································································ 244 backup-p
display ip vpn-instance ······································································································································· 309 domain-id ····························································································································································· 310 export route-policy ··············································································································································· 311 ext-comm
Basic MPLS commands Unless otherwise specified, the term "interface" in this document collectively refers to VLAN interfaces and Layer 3 Ethernet interfaces. You can set an Ethernet port as a Layer 3 interface by using the port link-mode route command (see Layer 2—LAN Switching Configuration Guide). display mpls forwarding ilm Use display mpls forwarding ilm to display Incoming Label Map (ILM) entries.
A - Active forwarding information InLabel Oper VRF Flag SwapLabel Forwarding Info -------------------------------------------------------------------------------30 SWAP 0 T 1000 1024 # Display all ILM entries for the card in slot 3.
Syntax In standalone mode: display mpls forwarding nhlfe [ nid ] [ slot slot-number ] In IRF mode: display mpls forwarding nhlfe [ nid ] [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters nid: Displays the NHLFE entry with the specified NID. The NID value range is 0 to 4294967294. If you do not specify an NID, the command displays information about all NHLFE entries.
B - Backup forwarding information A - Active forwarding information NID Tnl-Type Flag OutLabel Forwarding Info -------------------------------------------------------------------------------10 - TA - 2049 20 - TA - 2050 2048 LSP NA 2025 Vlan2 10.11.112.26 2049 LSP NA 3024 Vlan2 10.11.112.26 TB 3026 20 NA 3025 Vlan10 2050 LSP 10.11.113.26 Table 2 Command output Field Description Total NHLFE entries Total number of NHLFE entries. NID NHLFE entry index.
network-operator mdc-admin mdc-operator Parameters interface-type interface-number: Specifies an interface by the interface type and number. If you do not specify an interface, the command displays MPLS information for all MPLS-enabled interfaces. Examples # Displays all MPLS interfaces. display mpls interface Interface Status MPLS MTU Vlan2 Down 1500 Vlan17 Up 1500 Vlan20 Up 1500 The MPLS MTU of an interface is in bytes.
Label Owner State 1025 LDP Alloc 1026 LDP Alloc 1027 LDP Inuse Table 3 Command output Field Description Label Label value. Owner Protocol that is using the label. Possible values include LDP, BGP, RSVP, and L2VPN. Usage state of the label: State • Idle—The label is idle. • Alloc—The label has been allocated. • Pending—The label has been released but is still used by an LSP entry. • Inuse—The label has been allocated and used by an LSP entry.
Ldp: Displays LDP LSPs. local: Displays the direct LSP. rsvp-te: Displays CRLSPs established by RSVP-TE. static: Displays static LSPs. static-cr: Displays static CRLSPs. transit: Displays the LSPs taking the current LSR as a transit LSR. vpn-instance vpn-instance-name: Displays LSPs for the specified VPN. The vpn-instance-name is a case-sensitive string of 1 to 31 characters. If you do not specify this option, the command displays LSPs for the public network.
150.140.150.100/64001/0 StaticCR -/1000 Vlan10 - StaticCR 50/1001 Vlan10 - StaticCR 51/- - Table 4 Command output Field Description Forwarding equivalence class: • IP address/mask—Classifies FECs by destination address. • IP address—Classifies FECs by next hop. • IP address/Out Label—Classifies FECs by next hop and outgoing label. FEC • Ingress LSR ID/Tunnel ID/LSP ID—RSVP TE FEC. • - (a hyphen)—The LSP is a static transit LSP, static egress LSP, static transit CRLSP, or static egress CRLSP.
Field Description Label distribution protocol: • • • • • • Protocol LDP. BGP. RSVP. Static. StaticCR—Static CRLSP. Local—Direct LSP. BkLabel Outgoing label of the backup LSP. BkInterface Outgoing interface of the backup LSP. # Display detailed information about all LSPs. display mpls lsp verbose Destination : 56.10.10.2 FEC : 56.10.10.2/32 Protocol : LDP LSR Type : Egress Service : - In-Label : 1024 State : Active Destination : 56.10.10.4 FEC : 56.10.10.
Table 6 Command output Field Description Destination LSP destination address. FEC • • • • • Forwarding equivalence class: IP address/mask—Classifies FECs by destination address. IP address—Classifies FECs by next hop. IP address/Out Label—Classifies FECs by next hop and outgoing label. Ingress LSR ID/Tunnel ID/LSP ID—RSVP TE FEC. - (a hyphen)—The LSP is a static transit LSP, static egress LSP, static transit CRLSP, or static egress CRLSP. Label distribution protocol: Protocol • • • • • • LDP. BGP.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display LSP statistics.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters nib-id: Specifies a next hop ID in the range of 1 to FFFFFFFFFFFFFFFE. If you do not specify a next hop, this command displays information about all MPLS next hops. Examples # Display information about all MPLS next hops.
network-operator mdc-admin mdc-operator Parameters nid-value1: Specifies an NID in the range of 0 to 65535. If used with the nid-value2 argument, the nid-value1 argument represents the start NID of an NID range. to nid-value2: Specifies the end NID of the NID range. The value range for the end NID is 0 to 65535. If you specify an NID range by using the nid-value1 argument and the to nid-value2 option, the command displays usage information for the specified range of NIDs.
display mpls summary Memory State : Normal MPLS LSR ID : 2.2.2.2 Egress Label Type: Implicit-null Labels: Range Idle 16-1023 1008 1024-1000000 998849 Protocols: Type State LDP Normal Static Normal Table 9 Command output Field Description Memory state: Memory State • • • • Normal—The memory is normal. Minor—The memory has a minor alarm. Severe—The memory has a severe alarm. Critical—The memory has a critical alarm.
Views Interface view Predefined user roles network-admin mdc-admin Usage guidelines Execute this command on all interfaces that need to perform MPLS forwarding. Examples # Enable MPLS on interface VLAN-interface 2. System-view [Sysname] interface vlan-interface 2 [Sysname-Vlan-interface2] mpls enable Related commands display mpls interface mpls label advertise Use mpls label advertise to specify the type of label the egress will advertise to the penultimate hop.
some special scenarios. For example, when OAM is configured on the egress, the egress can get the OAM function entity status only through non-null labels. As a penultimate hop, the device accepts the implicit null label, explicit null label, or normal label advertised by the egress device. For LDP LSPs, the mpls label advertise command triggers LDP to delete the LSPs established before the command is executed and reestablishes new LSPs.
mpls mtu Use mpls mtu to configure the MPLS MTU for an interface. Use undo mpls mtu to restore the default. Syntax mpls mtu value undo mpls mtu Default The MPLS MTU of an interface is not configured. Fragmentation for MPLS packets is based on the MTU of the interface, and the length of a fragment does not include that of the MPLS label. Thus, after an MPLS label is added into a fragment, the length of the MPLS fragment might exceed the interface MTU.
Default The MPLS TTL-expired messages sending function is enabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines The mpls ttl expiration enable command enables an LSR to generate an ICMP TTL-expired message upon receiving an MPLS packet with TTL being 1. If the MPLS packet has only one label, the LSR sends the ICMP TTL-expired message back to the source through IP routing.
When TTL propagation is disabled, MPLS sets the label TTL to 255 for packets entering the MPLS network, and pops the label for packets leaving the MPLS network, without copying the label TTL value to the IP TTL. The IP tracert facility cannot show the real path in the MPLS network. After TTL propagation is enabled or disabled, execute the reset mpls ldp command to make the configuration take effect. Within an MPLS network, TTL is always copied between the labels of an MPLS packet.
Static LSP commands display mpls static-lsp Use display mpls static-lsp to display static LSP information. Syntax display mpls static-lsp [ lsp-name lsp-name ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters lsp-name lsp-name: Specifies a static LSP by its name, a case-sensitive string of 1 to 15 characters. If you do not specify a static LSP, the command displays information about all static LSPs.
Syntax static-lsp egress lsp-name in-label in-label undo static-lsp egress lsp-name Default No static LSP exists on the device. Views System view Predefined user roles network-admin mdc-admin Parameters lsp-name: Specifies a name for the static LSP, a case-sensitive string of 1 to 15 characters. in-label in-label: Specifies an incoming label in the range of 16 to 1023. Examples # Configure a static LSP on the egress node: specify the LSP's name as bj-sh and incoming label as 233.
mask: Specifies the mask of the destination IP address. mask-length: Specifies the mask length of the destination address, in the range of 0 to 32. nexthop next-hop-addr: Specifies a next hop address. outgoing-interface interface-type interface-number: Specifies an outgoing interface by its type and number. The specified interface must be a point-to-point interface. out-label out-label: Specifies an outgoing label in the range of 16 to 1023.
outgoing-interface interface-type interface-number: Specifies an outgoing interface by its type and number. The specified interface must be a point-to-point interface. out-label out-label: Specifies an outgoing label in the range of 16 to 1023. Usage guidelines You must enable MPLS on the outgoing interface of the static LSP. Examples # Configure a static LSP on the transit node: specify the LSP's name as bj-sh, incoming label as 123, next hop address as 202.34.114.7, and outgoing label as 253.
LDP commands accept-label Use accept-label to configure a label acceptance policy. Use undo accept-label to remove the label acceptance policy. Syntax accept-label peer peer-lsr-id prefix-list prefix-list-name undo accept-label peer peer-lsr-id Default No label acceptance policy is configured. LDP accepts all label mappings from all peers. Views LDP view, LDP-VPN instance view Predefined user roles network-admin mdc-admin Parameters peer peer-lsr-id: Specifies an LDP peer by its LSR ID.
[Sysname-ldp] accept-label peer 1.1.1.9 prefix-list prefix-from-RTA Related commands • display mpls ldp peer verbose • ip prefix-list (Layer 3—IP Routing Command Reference) advertise-label Use advertise-label to configure a label advertisement policy. Use undo advertise-label to delete a label advertisement policy. Syntax advertise-label prefix-list prefix-list-name [ peer peer-prefix-list-name ] undo advertise-label prefix-list prefix-list-name Default No label advertisement policy is configured.
Examples # Configure two label advertisement policies. One policy advertises only the label mapping for subnet 10.1.1.0/24 to the peer 3.3.3.9; the other policy advertises only the label mapping for subnet 10.2.1.0/24 to the peer 4.4.4.9. system-view [Sysname] ip prefix-list prefix-to-C permit 10.1.1.0 24 [Sysname] ip prefix-list prefix-to-D permit 10.2.1.0 24 [Sysname] ip prefix-list peer-C permit 3.3.3.9 32 [Sysname] ip prefix-list peer-D permit 4.4.4.
After LDP fails to establish a session with a peer LSR for the first time, LDP does not start another attempt until the initial delay timer expires. If the session setup fails again, LDP waits for two times the initial delay before the next attempt. This process continues until the maximum delay time is reached. After that, the maximum delay time always takes effect. The maximum delay time must be larger than the initial delay time.
Examples # Display brief LDP discovery information for the public network. display mpls ldp discovery Type: L - Link Hello, T - Targeted Hello Discovery Source Peer LDP ID Hello Sent/Rcvd (L) Vlan17 100.100.100.18:0 83/80 200.100.100.18:0 83/60 100.100.100.18:0 23/20 (T) 100.100.100.18 Table 11 Command output Field Description Type of LDP discovery. • L—Basic discovery, which sends Link Hellos to discover peers. • T—Extended discovery, which sends Targeted Hellos to discover peers.
Table 12 Command output Field Link Hellos Description Information about basic discovery that sends Link Hellos on interfaces. In a non-point-to-point network, an interface might discover multiple peers. Interface Interface using basic discovery. Hello Interval Hello interval in milliseconds. Hello Sent/Rcvd Number of Hellos sent or received on the interface. Transport Address Local transport address. Peer LDP ID LDP identifier of the LDP peer.
mdc-admin mdc-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The command displays FEC-label mappings for the specified VPN. If you do not specify a VPN instance, the command displays FEC-label mappings for the public network. destination-address mask-length: Specifies an FEC by an IP address and a mask in the range of 0 to 32. summary: Displays summary information about all FEC-label mappings learned by LDP.
Field Description Upstream Info Upstream peer to which the local LSR advertised the FEC-label mapping and current state of the LSP. Peer LDP ID of an upstream peer. State • • • • Current state of the LSP established with the upstream peer: Established—Active state. Idle—Initial state. Release Awaited—Waiting for a Release message. Resource Awaited—Waiting for a label for the FEC. If the state is marked as stale, the FEC-label mapping is under a GR process.
display mpls ldp interface Use display mpls ldp interface to display LDP interface information. Syntax display mpls ldp interface [ interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about all LDP interfaces. Examples # Display information about all LDP interfaces.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The command displays LDP LSP information for the specified VPN. If you do not specify a VPN instance, the command displays LDP LSP information for the public network. destination-address mask-length: Specifies an FEC by an IP address and a mask length in the range of 0 to 32.
Field Description In/Out Label Incoming/outgoing label. Nexthop Next hop address for the FEC. OutInterface Outgoing interface for the FEC. Related commands display mpls lsp display mpls ldp parameter Use display mpls ldp parameter to display LDP running parameters.
Table 17 Command output Field Description Global Parameters Global parameters for all LDP-enabled networks. Protocol Version LDP protocol version. Nonstop Routing Whether the nonstop routing function is enabled. This field is not supported in the current software version and is reserved for future support. Whether the GR function is enabled. Graceful Restart • On—Enabled. • Off—Disabled. Reconnect Time Value of the Reconnect timer, in seconds.
mdc-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The command displays LDP peer and session information for the specified VPN. If you do not specify a VPN instance, the command displays the LDP peer and session information for the public network. peer peer-lsr-id: Specifies an LDP peer by its LSR ID. If you do not specify this option, the command displays all LDP peers and related session information.
Max PDU Length : 4096 bytes (Local: 4096 bytes, Peer: 4096 bytes) Keepalive Time : 45 sec (Local: 45 sec, Peer: 45 sec) Keepalive Interval : 15 sec Msgs Sent/Rcvd : 288/426 KA Sent/Rcvd : 13/13 Label Adv Mode : DU Graceful Restart : On Reconnect Time : 120 sec Recovery Time Loop Detection : On Path Vector Limit: 32 : 360 sec Discovery Sources: Targeted Hello 100.100.100.17 -> 100.100.100.
Field Description KA Sent/Rcvd Total number of Keepalive messages sent and received. Label Adv Mode Label advertisement mode negotiated. The device only supports the DU mode. Whether GR is enabled on the peer. Graceful Restart • On—Enabled. • Off—Disabled. Reconnect Time Reconnect time negotiated, in seconds. Recovery Time Recovery time (in seconds) carried in packets sent by the peer. Whether loop detection is enabled on the peer. Loop Detection • On—Enabled. • Off—Disabled.
Field Description Remaining time of the session hold timer, in seconds. Holdup time remaining This field is displayed only when the session protection state is Protecting. A value of Infinite indicates that session protection takes effect permanently. Addresses received from peer IP addresses received from the peer. display mpls ldp summary Use display mpls ldp summary to display LDP summary information.
Initialized : 0 Non-Existent: 0 Table 20 Command output Field Description Memory state: Memory State • • • • Normal—The memory is normal. Minor—The memory has a minor alarm. Severe—The memory has a severe alarm. Critical—The memory has a critical alarm. Discarded Hellos Number of Hellos discarded when the memory is in an alarm state. If no Hello is discarded, this filed is not displayed. Instance ID VPN instance identifier. A value of 0 represents the public network.
Predefined user roles network-admin mdc-admin Usage guidelines GR enables an LSR to retain MPLS forwarding entries during an LDP restart, ensuring continuous MPLS forwarding. The graceful-restart command does not take effect for LDP sessions established before the command is executed. To apply the new setting, execute the reset mpls ldp command to reestablish LDP sessions. Examples # Enable GR for LDP.
Usage guidelines The MPLS Forwarding State Holding time must be greater than the Reconnect time. In a GR process, the timers work as follows: 1. When LDP restarts, the GR restarter starts the MPLS Forwarding State Holding timer, and marks the MPLS forwarding entries as stale. When a GR helper detects that the LDP session with the GR restarter is down, it marks the FEC-label mappings learned from the session as stale and starts the Reconnect timer, the value of which is received from the GR restarter. 2.
Views LDP view, LDP-VPN instance view Predefined user roles network-admin mdc-admin Parameters independent: Specifies Independent label distribution mode. In this mode, an LSR can distribute label mappings to the upstream LSR at any time. ordered: Specifies Ordered label distribution mode. In this mode, an LSR distributes a label mapping for a FEC to the upstream LSR only when the LSR receives a label mapping for that FEC from the downstream LSR or the LSR is the egress node of that FEC.
Usage guidelines This command enables LDP to detect and terminate LSP loops. LDP loop detection uses one of the following methods: • Hop count. For more information, see "maxhops." • Path vector. For more information, see "pv-limit." Use LDP loop detection only in networks with devices that do not support TTL mechanism such as ATM switches. Do not use LDP loop detection on other networks because it only results in extra LDP overhead. Examples # Enable LDP loop detection for the public network.
• In Independent mode, LDP can use all routes with a 32-bit mask to generate LSPs. After you configure an LSP generation policy, LDP uses all routes or the routes permitted by the IP prefix list to generate LSPs, regardless of the label distribution control mode. HP recommends using the default LSP generation policy. Examples # Configure an LSP generation policy to use only routes 10.10.1.0/24 and 10.20.1.0/24 to establish LSPs for the public network.
Examples # Configure the LDP LSR ID as 2.2.2.2 for the public network. system-view [Sysname] mpls ldp [Sysname-ldp] lsr-id 2.2.2.2 Related commands • display mpls ldp parameter • mpls lsr-id maxhops Use maxhops to specify the maximum hop count for loop detection. Use undo maxhops to restore the default. Syntax maxhops hop-number undo maxhops Default The maximum hop count for loop detection is 32.
• pv-limit md5-authentication Use md5-authentication to enable LDP MD5 authentication. Use undo md5- authentication to restore the default. Syntax md5-authentication peer-lsr-id { cipher | plain } password undo md5-authentication peer-lsr-id Default LDP MD5 authentication is disabled. Views LDP view, LDP-VPN instance view Predefined user roles network-admin mdc-admin Parameters peer-lsr-id: Specifies the LSR ID of a peer. cipher: Sets a ciphertext key. plain: Sets a plaintext key.
mpls ldp Use mpls ldp to enable LDP globally and enter LDP view. Use undo mpls ldp to disable LDP globally for an LSR and delete all LDP-VPN instances. Syntax mpls ldp undo mpls ldp Default LDP is globally disabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines You must enable LDP globally for an LSR to run LDP. The GR commands, the session protection command, and the targeted-peer command are available only in LDP view.
Views Interface view Predefined user roles network-admin mdc-admin Usage guidelines Before you enable LDP on an interface, use the mpls ldp command in system view to enable LDP globally. Disabling LDP on an interface terminates all LDP sessions on the interface, and removes all LSPs established through the sessions. If the interface is bound to a VPN instance, you must also use the vpn-instance command to enable LDP for the VPN instance.
Predefined user roles network-admin mdc-admin Parameters hello-hold timeout: Specifies the Hello hold time in the range of 1 to 65535 seconds. LDP keeps the hello adjacency during the Hello hold time. The negotiated Hello hold time takes the smaller value of the local Hello hold time and the peer Hello hold time. If LDP receives no Hello message from the peer before the Hello hold timer expires, LDP deletes the Hello adjacency with the peer.
# On VLAN-interface 2, set the Link Hello hold time to 100 seconds, Link Hello interval to 20 seconds, Keepalive hold time to 50 seconds, and Keepalive interval to 10 seconds.
Using mpls ldp transport-address in LDP peer view, you specify the transport address carried in the Targeted Hellos sent to the LDP peer. HP recommends using the default transport address. If two LSRs have multiple links in between and you want to establish an LDP session on each link, make sure that all the links use the same transport address. Examples # Specify the LDP transport address carried in Targeted Hellos sent to peer 3.3.3.3 as 2.2.2.2.
Examples # Set the path vector limit as 3 for LDP loop detection on the public network. system-view [Sysname] mpls ldp [Sysname-ldp] pv-limit 3 Related commands • display mpls ldp parameter • loop-detect • maxhops reset mpls ldp Use reset mpls ldp to reset LDP sessions.
Syntax session protection [ duration time ] [ peer peer-prefix-list-name ] undo session protection Default Session protection is disabled. Views LDP view Predefined user roles network-admin mdc-admin Parameters duration time: Specifies the session protection duration time in the range of 30 to 2147483 seconds. If you do not specify the duration, session protection always takes effect. peer peer-prefix-list-name: Specifies an IP prefix list by its name, a case-sensitive string of 1 to 63 characters.
Use undo snmp-agent trap enable ldp to disable SNMP notifications for LDP. Syntax snmp-agent trap enable ldp undo snmp-agent trap enable ldp Default SNMP notifications for LDP are enabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines This command enables generating SNMP notifications for LDP upon LDP session changes, as defined in RFC 3815. The generated SNMP notifications are sent to the SNMP module.
Examples # Configure the device to send Targeted Hellos to the peer 3.3.3.3, and enter LDP peer view. system-view [Sysname] mpls ldp [Sysname-ldp] targeted-peer 3.3.3.3 [Sysname-ldp-peer-3.3.3.3] Related commands • display mpls ldp discovery • display mpls ldp peer vpn-instance Use vpn-instance to enable LDP for a VPN instance and enter LDP-VPN instance view. Use undo vpn-instance to delete the LDP-VPN instance.
[Sysname-ldp] vpn-instance vpn1 [Sysname-ldp-vpn-instance-vpn1] Related commands • ip vpn-instance • mpls ldp 57
MPLS TE commands display mpls te tunnel-interface Use display mpls te tunnel-interface to display information about MPLS TE tunnel interfaces. Syntax display mpls te tunnel-interface [ tunnel number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters tunnel number: Displays information about the existing tunnel interface specified by its number. If you do not specify this option, this command displays information about all MPLS TE tunnel interfaces.
Backup Bandwidth Type: - Backup Bandwidth : - : 10 Retry Interval : 2 sec : - Reoptimization Freq : - Backup Type : - Backup LSP ID : - Auto Bandwidth : - Auto Bandwidth Freq : - Min Bandwidth : - Max Bandwidth : - Collected Bandwidth : - Route Pinning : - Retry Limit Reoptimization Table 21 Command output Field Description Tunnel Name Name of the tunnel interface. Running state of the tunnel: Down or Up.
Field Description Class Type CT of the tunnel. This field is not supported in the current software version and is reserved for future support. Tunnel Bandwidth Bandwidth required by the tunnel, in kbps. Reserved Bandwidth Bandwidth reserved for the tunnel, in kbps. Setup Priority Tunnel setup priority. Holding Priority Tunnel holding priority. Affinity Attr/Mask Tunnel affinity attribute and mask. This field is not supported in the current software version and is reserved for future support.
Field Description Min Bandwidth Minimum bandwidth (in kbps) that can be applied to the tunnel by automatic bandwidth adjustment. This field is not supported in the current software version and is reserved for future support. Max Bandwidth Maximum bandwidth (in kbps) that can be applied to the tunnel by automatic bandwidth adjustment. This field is not supported in the current software version and is reserved for future support. Collected Bandwidth Current output rate, in kbps.
Syntax mpls te backup { hot-standby | ordinary } undo mpls te backup Default Tunnel backup is disabled. Views Tunnel interface view Predefined user roles network-admin mdc-admin Parameters hot-standby: Enables hot backup for the tunnel. In this mode, a backup CRLSP is established immediately after the primary CRLSP is established. When the primary CRLSP fails, MPLS TE immediately switches traffic to the backup CRLSP. ordinary: Enables ordinary backup for the tunnel.
Views Tunnel interface view Predefined user roles network-admin mdc-admin Parameters associated reverse-lsp lsp-name lsp-name: Configures an associated bidirectional MPLS TE tunnel, and specifies the associated reverse CRLSP. The lsp-name argument specifies the name of a static CRLSP (the reverse CRLSP), a case-sensitive string of 1 to 15 characters.
# Enable the MPLS TE bidirectional tunnel function on interface Tunnel0, configure the local end as the passive end of the co-routed bidirectional tunnel, and specify the ingress node's LSR ID of the reverse CR-LSP as 10.0.0.1 and the tunnel ID of the reverse CR-LSP as 1. system-view [Sysname] interface tunnel 0 mode mpls-te [Sysname-Tunnel0] destination 10.0.0.1 [Sysname-Tunnel0] mpls te bidirectional co-routed passive reverse-lsp lsr-id 10.0.0.
mpls te loop-detection Use mpls te loop-detection to enable loop detection during establishment of an MPLS TE tunnel. Use undo mpls te loop-detection to disable loop detection for the MPLS TE tunnel. Syntax mpls te loop-detection undo mpls te loop-detection Default Loop detection is disabled for an MPLS TE tunnel.
Parameters label: Enables both route recording and label recording. If you do not specify this keyword, this command enables only route recording. Usage guidelines Route recording records the nodes that an MPLS TE tunnel traverses. Label recording records the label assigned by each node. The recorded information helps you know about the path used by the MPLS TE tunnel and the label distribution information, and when the tunnel fails, it helps you locate the fault.
system-view [Sysname] interface tunnel 0 mode mpls-te [Sysname-Tunnel0] mpls te resv-style ff Related commands • display mpls te tunnel-interface • mpls te signaling mpls te retry Use mpls te retry to configure the maximum number of tunnel setup attempts. Use undo mpls te retry to restore the default. Syntax mpls te retry times undo mpls te retry Default The maximum number of tunnel setup attempts is 3.
Use undo mpls te signaling to restore the default. Syntax mpls te signaling { rsvp-te | static } undo mpls te signaling Default MPLS TE uses RSVP-TE to establish tunnels. Views Tunnel interface view Predefined user roles network-admin mdc-admin Parameters rsvp-te: Uses the RSVP-TE signaling protocol to establish a tunnel. static: Uses a static CRLSP to establish a tunnel.
Predefined user roles network-admin mdc-admin Parameters lsp-name: Specifies a static CRLSP by its name, a case-sensitive string of 1 to 15 characters. Usage guidelines This command takes effect only when the mpls te signaling static command has been configured in tunnel interface view. Execute this command on the ingress node. The static CRLSP specified in this command must have been created by using the static-cr-lsp ingress command.
Usage guidelines After failing to establish an MPLS TE tunnel, the tunnel ingress node waits for the tunnel setup retry interval, and then try to set up the tunnel again until the tunnel is established successfully or until the number of tunnel setup attempts reaches the maximum (configured by the mpls te retry command). If the tunnel cannot be established when the number of attempts reaches the maximum, the ingress waits for a longer period and then repeats the previous process.
Static CRLSP commands display mpls static-cr-lsp Use display mpls static-cr-lsp to display information about static CRLSPs. Syntax display mpls static-cr-lsp [ lsp-name lsp-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters lsp-name lsp-name: Displays information about the static CRLSP specified by its name, a case-sensitive string of 1 to 15 characters.
LSR Type : Ingress In-Label : Null Out-Label : 60 Out-Interface : Vlan10 Nexthop : 20.1.1.2 Class Type : - Bandwidth : 0 kbps LSP State : Up Table 23 Command output Field Description LSP Name Name of the static CRLSP. LSR Type LSR type of the local node on the static CRLSP: Ingress, Transit, or Egress. In-Label Incoming label. Out-Label Outgoing label. Out-Interface Outgoing interface. Nexthop Next hop address. Class Type Class type of the static CRLSP.
Predefined user roles network-admin mdc-admin Parameters lsp-name: Specifies a name for the static CRLSP, a case-sensitive string of 1 to 15 characters. in-label in-label-value: Specifies an incoming label in the range of 16 to 1023. Examples # On the egress node, configure a static CRLSP with the name static-te-1 and incoming label 233.
Examples # Configure a static CRLSP on the ingress node, and configure its name as static-te-2, next hop IP address as 202.55.25.33, and outgoing label as 237. system-view [Sysname] static-cr-lsp ingress static-te-2 nexthop 202.55.25.33 out-label 237 Related commands • display mpls static-cr-lsp • static-cr-lsp egress • static-cr-lsp transit static-cr-lsp transit Use static-cr-lsp transit to configure a transit node for a static CRLSP.
Related commands • display mpls static-cr-lsp • static-cr-lsp egress • static-cr-lsp ingress 75
RSVP commands authentication challenge Use authentication challenge to enable the RSVP challenge-response handshake function globally or for a specific RSVP neighbor. Use undo authentication challenge to disable the challenge-response handshake function globally or for a specific RSVP neighbor. Syntax authentication challenge undo authentication challenge Default The RSVP challenge-response handshake function is disabled.
# Enable challenge-response handshake for RSVP neighbor 1.1.1.9. system-view [Sysname] rsvp [Sysname-rsvp] peer 1.1.1.9 [Sysname-rsvp-peer-1.1.1.
With RSVP authentication, the sender uses the MD5 algorithm and the authentication key to calculate a message digest for an RSVP message, and inserts the message digest to the RSVP message. When the receiver receives the message, it performs the same calculation and compares the result with the message digest received. If they match, the receiver accepts the message. Otherwise, it drops the message.
• rsvp authentication window-size authentication lifetime Use authentication lifetime in RSVP view to configure the global idle timeout for RSVP security associations, or in RSVP neighbor view to configure the idle timeout for RSVP security associations with a specific RSVP neighbor. Use authentication lifetime to restore the default. Syntax authentication lifetime life-time undo authentication lifetime Default The idle timeout for an RSVP security association is 1800 seconds.
[Sysname] rsvp [Sysname-rsvp] authentication lifetime 100 # Configure the idle timeout as 100 seconds for the security associations with the RSVP neighbor 1.1.1.9. system-view [Sysname] rsvp [Sysname-rsvp] peer 1.1.1.9 [Sysname-rsvp-peer-1.1.1.
Usage guidelines To protect against replay attacks, the sender places a unique sequence number in each RSVP message that contains authentication information. The sender monotonically increases the value of the sequence number each time it sends an RSVP message. If the sequence number of a received message is in the specified authentication window size, the receiver accepts the message. Otherwise, the receiver discards the message.
• display rsvp authentication • reset rsvp authentication • rsvp authentication challenge • rsvp authentication key • rsvp authentication lifetime • rsvp authentication window-size display rsvp Use display rsvp to display RSVP information. Syntax display rsvp [ interface [ interface-type interface-number ] ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters interface: Displays RSVP information on interfaces.
PSB number: 5 RSB number: 5 LSP number: 5 Request number: 5 Peer number: 5 SA number: 5 Table 24 Command output Field Description Fast Reroute time Interval for detecting whether a better bypass CRLSP is available for a primary CRLSP, in seconds. This field is not supported in the current software version and is reserved for future support. Refresh interval Interval for refreshing Path and Resv messages, in seconds. Keep multiplier PSB and RSB timeout multiplier.
Summary Refresh: Disabled Reliability: Disabled Retransmit interval: 500 ms Retransmit increment: 1 Authentication: Enabled Lifetime: 300 sec Window size: 64 Challenge: Enabled Bypass tunnels: None Table 25 Command output Field Description Logical interface handle Logical interface handle, used to distinguish logical outgoing interfaces on the RSVP interface. State Interface state recorded by RSVP: UP or Down. IP address IP address of the current interface used by RSVP.
Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters from ip-address: Displays information about the security associations with the specified source IP address. to ip-address: Displays information about the security associations with the specified destination IP address. verbose: Displays detailed information about RSVP security associations. If you do not specify this keyword, this command displays brief information about RSVP security associations.
Message type received or sent Authentication source IP Authentication destination IP ACK Source IP address in the IP header Destination IP address in the IP header Srefresh Source IP address in the IP header Destination IP address in the IP header Hello Source IP address in the IP header Destination IP address in the IP header Examples # Display brief information about the security associations established with all RSVP neighbors.
Challenge: Not configured Peer: 20.1.1.2 Local key ID: 0x0 Peer key ID: 0x000104000000 Lifetime: 1800 sec Expiration time: 1798 sec Window size: 1 Received sequence numbers: 5781742445385482241 Table 28 Command output Field Description From RSVP authentication source IP address. To RSVP authentication destination IP address. Direction of the security association: Mode • Receive—Receive security association, used to authenticate messages received from an RSVP neighbor.
Related commands • authentication challenge • authentication key • authentication lifetime • authentication window-size • reset rsvp authentication • rsvp authentication challenge • rsvp authentication key • rsvp authentication lifetime • rsvp authentication window-size display rsvp lsp Use display rsvp lsp to display information about CRLSPs established by RSVP.
Table 29 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Tunnel direction: • Uni—Unidirectional tunnel. • Bi-Down—Forward CRLSP of a bidirectional tunnel. • Bi-Up—Backward CRLSP of a bidirectional tunnel. Direction # Display detailed information about all CRLSPs established by RSVP. display rsvp lsp verbose Tunnel name: Tunnel1 Destination: 3.3.3.9 Source: 1.1.1.
1025 Flag: 0x01 (Global label) 5.5.5.9/32 Flag: 0x20 (No FRR/Node-ID) 57.40.40.3/32 Flag: 0x00 (No FRR) 57.40.40.1/32 Flag: 0x40 (No FRR/In-Int) 3 Flag: 0x01 (Global label) 3.3.3.9/32 Flag: 0x20 ((No FRR/Node-ID) Fast Reroute protection: None Table 30 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Tunnel direction: Direction • Unidirectional—Unidirectional tunnel. • Bidirectional, Downstream—Forward CRLSP of a bidirectional tunnel.
Related commands • display rsvp request • display rsvp reservation • display rsvp sender display rsvp peer Use display rsvp peer to display RSVP neighbor information.
Field Description Role of the local device in the neighbor relationship: Type • Active—The local device actively sends hello requests to the neighbor. • Passive—The local end passively receives hello requests from the neighbor and replies with hello ACK messages. Reduction State of the Srefresh function on the neighbor: enabled or disabled. # Display detailed information about all RSVP neighbors. display rsvp peer verbose Peer: 57.10.10.
Field Description GR state of the neighbor: Graceful Restart state • • • • Invalid—Neighbor is not GR capable, or GR is disabled locally. Ready—Neighbor is GR capable. Restarting—Neighbor is restarting. Recovering—Neighbor is recovering. Peer GR restart time GR restart period of the neighbor, in milliseconds. Peer GR recovery time GR recovery period of the neighbor, in milliseconds.
Table 33 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Resource reservation style: Style • SE—Shared-explicit style. • FF—Fixed-filter style. # Display detailed information about the RSVP resource reservation requests sent to all upstream devices. display rsvp request verbose Destination: 3.3.3.9 Source: 1.1.1.9 Tunnel ID: 1 Style: SE Previous hop: 57.10.10.
Related commands • display rsvp lsp • display rsvp reservation • display rsvp sender display rsvp reservation Use display rsvp reservation to display information about RSVP resource reservation states.
Field Description Resource reservation style: • SE—Shared-explicit style. • FF—Fixed-filter style. Style # Display detailed information about all RSVP resource reservation states. display rsvp reservation verbose Destination: 3.3.3.9 Source: 1.1.1.9 Tunnel ID: 1 Style: SE Nexthop: 57.20.20.1 Nexthop LIH: 0x35 Recv message epoch: 0 Recv message ID: 0 In-Interface: Vlan10 Unknown object number: 0 Flow descriptor 1: Flow specification: Average bitrate: 50.00 kbps Maximum burst: 1000.
Field Description Flag value and its meaning in an RRO: • No FRR—FRR is not configured. • FRR Avail—FRR is available. This flag is not supported in the current software version and is reserved for future support. • In use—FRR has occurred. This flag is not supported in the current software version and is reserved for future support. Flag • BW—Bandwidth protection. This flag is not supported in the current software version and is reserved for future support. • Node-Prot—Node protection.
verbose: Displays detailed information. If you do not specify this keyword, this command displays brief information. Examples # Display brief information about all RSVP path states. display rsvp sender Destination Source Tunnel-ID LSP-ID Style Bitrate 3.3.3.9 1.1.1.9 1 5 SE 0.00 3.3.3.9 2.2.2.9 253 17767 SE 125.00 Table 37 Command output Field Description Destination Tunnel destination address. Source Tunnel source address.
Sender address: 2.2.2.9 LSP ID: 17767 Setup priority: 7 Holding priority: 7 FRR desired: Disabled Upstream label: 1115 Previous hop: 57.10.10.1 Previous hop LIH: 0xf0008 Average bitrate: 125.00 kbps Maximum burst: 0.00 bytes MTU: 1500 Qos service: Controlled-Load Recv message epoch: 0 Recv message ID: 0 Send message epoch: 0 Send message ID: 0 In-Interface: Vlan15 Local LIH: 0x67 Local address: 10.11.112.140 Refresh interval: 30000 ms Out-Interface: Vlan16 Nexthop: 10.11.112.
Field Description Local address IP address of the outgoing interface of the Path message. Refresh interval Refresh interval for Path and Resv messages, in milliseconds. Out-Interface Outgoing interface of the message. Unknown object number Number of unknown objects. Number of received Explicit Route Objects (EROs) and the ERO information. Receive ERO number ERO information includes the addresses of the nodes on the explicit path, and whether the current node is a loose or strict next hop.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters interface: Displays RSVP statistics on interfaces. interface-type interface-number: Displays RSVP statistics on the interface specified by its type and number. Usage guidelines If you do not specify the interface keyword, this command displays global RSVP statistics.
Packet Receive Send Path 2 2 Resv 2 2 PathError 0 0 ResvError 0 0 PathTear 0 0 ResvTear 0 0 ResvConf 0 0 Bundle 0 0 Ack 0 0 Srefresh 0 0 Hello 0 0 Challenge 0 0 Response 0 0 Error 0 0 Receive Send Path 3 3 Resv 3 3 PathError 0 0 ResvError 0 0 PathTear 0 0 ResvTear 0 0 ResvConf 0 0 Bundle 0 0 Ack 0 0 Srefresh 0 0 Hello 0 0 Challenge 0 0 Response 0 0 Error 0 0 Vlan11: Packet Table 39 Command output Field Description PS
Field Description Bundle Number of received/sent Bundle messages. Ack Number of received/sent Ack messages. Srefresh Number of received/sent Srefresh messages. Hello Number of received/sent Hello messages. Challenge Number of received/sent Integrity Challenge messages. Response Number of received/sent Integrity Response messages. Error Number of received/sent error messages. Related commands reset rsvp statistics graceful-restart enable Use graceful-restart enable to enable GR for RSVP.
Related commands rsvp hello enable hello interval Use hello interval to configure the interval for sending hello requests. Use undo hello interval to restore the default. Syntax hello interval interval undo hello interval Default Hello request messages are sent at an interval of 5 seconds. Views RSVP view Predefined user roles network-admin mdc-admin Parameters Interval: Specifies the interval at which RSVP sends hello requests, in the range of 1 to 60, in seconds.
undo hello lost Default The maximum number of consecutive lost or erroneous hellos is 4. Views RSVP view Predefined user roles network-admin mdc-admin Parameters times: Specifies the maximum number of consecutive lost or erroneous hellos, in the range of 3 to 10. Usage guidelines When the number of consecutive lost hellos or erroneous hellos received from a neighbor reaches the maximum value specified by this command, the device regards the neighbor failed.
Predefined user roles network-admin mdc-admin Parameters number: Specifies the PSB and RSB timeout multiplier in the range of 3 to 255. Usage guidelines The PSB and RSB timeout is computed in this formula: Timeout = (keep-multiplier+0.5) × 1.5 × refresh-time. Refresh-time is the interval at which the peer device advertises the Path and Resv messages to the local device.
After the device receives an RSVP message with an authentication object, it checks whether it has an RSVP authentication neighbor that matches the IP address in PHOP of the message (Path or Path Tear message) or matches the source IP address in the message (message other than Path and Path Tear). If a matching neighbor exists and an authentication key has been configured for the neighbor, the device verifies the validity of the message according to the key.
Parameters interval: Specifies the interval at which RSVP refreshes Path and Resv messages, in the range of 10 to 65535 seconds. Usage guidelines This command has the following functions: • Determines the interval for sending Path and Resv messages. • Adds the locally configured refresh interval in the sent Path and Resv messages, so the peer device can use this value to calculate the PSB and RSB timeout. Examples # Configure the refresh interval for Path and Resv messages as 60 seconds.
Related commands display rsvp authentication reset rsvp statistics Use reset rsvp statistics to clear RSVP statistics. Syntax reset rsvp statistics [ interface [ interface-type interface-number ] ] Views User view Predefined user roles network-admin mdc-admin Parameters interface: Clears RSVP statistics on interfaces. interface-type interface-number: Clears RSVP statistics on the interface specified by its type and number.
Views System view Predefined user roles network-admin mdc-admin Usage guidelines To enable global RSVP, you must enable both global RSVP (by using the rsvp command) and global MPLS TE (by using the mpls te command). Examples # Enable RSVP globally and enter RSVP view. system-view [Sysname] rsvp [Sysname-rsvp] Related commands • mpls te • rsvp enable rsvp authentication challenge Use rsvp authentication challenge to enable RSVP challenge-response handshake on an interface.
RSVP challenge-response handshake can be configured in the following views: • RSVP view—Configuration in this view applies to all RSVP security associations. • RSVP neighbor view—Configuration in this view applies only to RSVP security associations with the specified RSVP neighbor. • Interface view—Configuration in this view applies only to RSVP security associations established on the current interface. Examples # Enable RSVP challenge-response handshake on interface VLAN-interface 10.
auth-key: Specifies the authentication key. This argument is case sensitive. If the cipher keyword is specified, it must be a ciphertext string of 1 to 53 characters. If the plain keyword is specified, it must be a plaintext string of 1 to 16 characters. Usage guidelines RSVP authentication ensures integrity of RSVP messages, preventing fake resource reservation requests from occupying network resources.
• rsvp authentication lifetime • rsvp authentication window-size rsvp authentication lifetime Use rsvp authentication lifetime to configure the idle timeout for RSVP security associations on an interface. Use undo rsvp authentication lifetime to restore the default. Syntax rsvp authentication lifetime life-time undo rsvp authentication lifetime Default The idle timeout for RSVP security associations is 1800 seconds on an interface.
Examples # Configure the idle timeout for RSVP security associations on interface VLAN-interface 10 as 100 seconds.
When the receiver receives an RSVP message, it compares the sequence number of the last accepted RSVP message with the sequence number of the newly received RSVP message. • If the new sequence number is greater than the last sequence number, RSVP accepts the message and updates the last sequence number with the new sequence number. • If the received sequence number equals the last sequence number, RSVP regards the message a replay message and discards the message.
Syntax rsvp bfd enable undo rsvp bfd enable Default RSVP-TE does not use BFD to detect the link status to an RSVP neighbor. Views Interface view Predefined user roles network-admin mdc-admin Usage guidelines By sending hellos, RSVP cannot promptly detect neighbor status. By executing this command on an interface, a BFD session is established to detect the link status to the RSVP neighbor on the interface.
Examples # Enable RSVP on interface VLAN-interface 10. system-view [Sysname] rsvp [Sysname-rsvp] quit [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] rsvp enable Related commands rsvp rsvp hello enable Use rsvp hello enable to enable RSVP hello extension. Use undo rsvp hello enable to disable RSVP hello extension. Syntax rsvp hello enable undo rsvp hello enable Default RSVP hello extension is disabled.
Syntax rsvp reduction retransmit increment increment-value undo rsvp reduction retransmit increment Default The RSVP message retransmission increment is 1. Views Interface view Predefined user roles network-admin mdc-admin Parameters increment-value: Specifies the RSVP message retransmission increment in the range of 1 to 10.
mdc-admin Parameters retrans-timer-value: Specifies the RSVP message retransmission interval in the range of 500 to 3000 milliseconds. Usage guidelines After the reliable RSVP message delivery function is enabled by using the rsvp reduction srefresh reliability command, the retransmission increment and retransmission interval together determine the time for the next transmission of the RSVP message. For more information, see the usage guidelines in the rsvp reduction srefresh command.
When multiple RSVP sessions exist on a network, the periodically sent refresh messages can cause network degradation. In this case, the refreshing interval of Path and Resv messages should not be too short. However, delay sensitive applications want to recover from lost RSVP messages through the refresh messages as soon as possible. In this case, the refreshing interval should not be too long.
Tunnel policy commands display mpls tunnel Use display mpls tunnel to display tunnel information. Syntax display mpls tunnel { all | statistics | [ vpn-instance vpn-instance-name ] destination { tunnel-ipv4-dest | tunnel-ipv6-dest } } Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters all: Displays all tunnels. statistics: Displays tunnel statistics.
Field Description Tunnel or NHLFE entry. Tunnel/NHLFE VPN Instance NHLFEnumber represents the ingress LSP that matches the NHLFE entry with NID of number. VPN instance name. If this field is blank, the tunnel belongs to the public network. # Display tunnel statistics. display mpls tunnel statistics LSP : 1 CRLSP: 0 Table 41 Command output Field Description LSP Number of LSP tunnels. CRLSP Number of CRLSPs (MPLS TE tunnels).
If you specify multiple preferred tunnels that have the same destination address in a tunnel policy, only the first configured tunnel takes effect. If the first tunnel is not available, the second tunnel is used, and so forth. No load balancing will be performed on these tunnels. Examples # Configure tunnel 1 and tunnel 2 as preferred tunnels for tunnel policy policy1.
1. If the destination address of the preferred tunnel identifies a peer PE, the tunnel policy uses the preferred tunnel to forward traffic destined for the peer PE without using any other tunnels. 2. If not, the tunnel policy selects tunnels as configured by the select-seq load-balance-number command. Examples # Configure tunnel policy policy1 to use only LDP LSP tunnels, and set the load balancing number to 2.
MPLS L3VPN commands address-family ipv4 (VPN instance view) Use address-family ipv4 in VPN instance view to enter IPv4 VPN view. Use undo address-family ipv4 to remove all configurations from IPv4 VPN view. Syntax address-family ipv4 undo address-family ipv4 Views VPN instance view Predefined user roles network-admin mdc-admin Usage guidelines In IPv4 VPN view, you can configure IPv4 VPN parameters such as inbound and outbound routing policies. Examples # Enter IPv4 VPN view.
Predefined user roles network-admin mdc-admin Usage guidelines A VPNv4 address comprises an RD and an IPv4 prefix. VPNv4 routes comprise VPNv4 addresses. For a PE to exchange BGP VPNv4 routes with a BGP peer, you must enable that peer by executing the peer enable command in BGP VPNv4 address family view or BGP-VPN VPNv4 address family view.
Parameters text: Configures a description for the VPN instance, a case-sensitive string of 1 to 79 characters. Examples # Configure a description of This is vpn1 for VPN instance vpn1. system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] description This is vpn1 display bgp group vpnv4 Use display bgp group vpnv4 to display information about a specific BGP VPNv4 peer group or all BGP VPNv4 peer groups.
Configured hold time: 180 seconds Keepalive time: 60 seconds Minimum time between advertisements: 30 seconds Peer preferred value: 0 Routing policy configured: No routing policy is configured Members: Peer 2.2.2.2 AS MsgRcvd 600 0 MsgSent OutQ PrefRcv Up/Down 0 0 State 0 00:00:05 Idle Table 42 Command output Field Description BGP peer-group Name of the BGP peer group. Remote AS AS number of the peer group. Type of the BGP peer group: • External—EBGP peer group. • Internal—IBGP peer group.
display bgp peer vpnv4 Use display bgp peer vpnv4 to display information about BGP VPNv4 peers. Syntax display bgp peer vpnv4 [ vpn-instance vpn-instance-name ] [ group-name log-info | ip-address { log-info | verbose } | verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Field Description Total number of peers Total number of peers. Peers in established state Number of peers in the state of established. Peer IP address of the peer. AS AS number of the peer. MsgRcvd Number of messages received. MsgSent Number of messages sent. OutQ Number of messages waiting to be sent to the peer. PrefRcv Number of received prefixes. Up/Down Duration of the BGP session in the current state. State State of the peer.
No routing policy is configured Table 44 Command output Field Description Peer IP address of the peer. Local IP address of the local router. Type BGP link type: IBGP link or EBGP link. BGP version BGP version of the peer. remote router ID Router ID of the peer. BGP current state Current state of the BGP session. Up for Duration since the peer was established. BGP current event Current event of the BGP session.
Peer: 10.1.1.1 Date Time State Notification Error/SubError 21-Nov-2011 12:36:58 Up 21-Nov-2011 12:22:29 Down Send notification with error 6/6 Cease/Other Configuration Change 21-Nov-2011 12:07:09 Up display bgp routing-table ipv4 unicast inlabel Use display bgp routing-table ipv4 unicast inlabel to display incoming labels for BGP IPv4 unicast routes.
Table 45 Command output Field Description BGP Local router ID Router ID of the local BGP router. Status Route status codes. See Table 47. Origin Route origin codes. See Table 47. In/Out Label Incoming/outgoing label. display bgp routing-table ipv4 unicast outlabel Use display bgp routing-table ipv4 unicast outlabel to display outgoing labels for BGP IPv4 unicast routes.
Table 46 Command output Field Description BGP Local router ID Router ID of the local BGP router. Status Route status codes. See Table 47. Origin Route origin codes. See Table 47. OutLabel Outgoing label. display bgp routing-table vpnv4 Use display bgp routing-table vpnv4 to display BGP VPNv4 routing information.
Examples # Display brief information about all BGP VPNv4 routes. display bgp routing-table vpnv4 BGP local router ID is 1.1.1.9 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Total number of routes from all PEs: 2 Route distinguisher: 100:1(vpn1) Total number of routes: 6 * > * Network NextHop MED 10.1.1.0/24 10.1.1.2 0 32768 ? 10.1.1.
* i 3.3.3.9 0 100 0 65420? Table 47 Command output Field Description BGP Local router ID Router ID of the local BGP router. Route status codes: • • • • • • • • Status codes * - valid—Valid route. > - best—Common best route. d – damped—Route damped for route flap. h - history—History route. i - internal—Internal route. e - external—External route. s - suppressed—Suppressed route. S - Stale—Stale route. Route origin: • i—IGP, originated in the AS.
Ext-Community : AS-path : (null) Origin : incomplete Attribute value : MED 0, localpref 100, pref-val 0 State : valid, internal, best, Route distinguisher: 200:1 Total number of routes: 1 Paths: 1 available, 1 best BGP routing table information of 10.3.1.0/24: From : 3.3.3.9 (3.3.3.9) Relay nexthop : 172.1.1.2 Original nexthop: 3.3.3.
Field Description Original nexthop Original next hop. If the route is learned from a BGP update, it is the next hop in the update message. Ext-Community Extended community attribute. BGP route attribute information: • • • • Attribute value MED—MED attribute. Localpref—Local preference. pref-val—Preferred value. pre—Protocol preference. Route status: • • • • • • State valid—Valid route. internal—Internal route. external—External route. local—Locally generated route.
mask-length: Specifies the length of the network mask, in the range of 0 to 32. Usage guidelines If the mask and mask-length arguments are not specified, the system ANDs the specified network address with the mask of each route. If the result matches the network address of the route, the command displays advertisement information for the route.
32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1. • as-path-acl-number: Specifies an AS path ACL by its number in the range of 1 to 256. Examples # Display BGP VPNv4 routes permitted by AS path ACL 1. display bgp routing-table vpnv4 as-path-acl 1 BGP local router ID is 1.1.1.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters route-distinguisher route-distinguisher: Specifies an RD, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1.
Route distinguisher: 200:1 Total number of routes: 2 Network NextHop MED LocPrf PrefVal Path/Ogn * >i 10.3.1.0/24 3.3.3.9 0 100 0 ? * >i 192.168.1.0 3.3.3.9 0 100 0 65420? For command output, see Table 47. display bgp routing-table vpnv4 inlabel Use display bgp routing-table vpnv4 inlabel to display incoming labels for BGP VPNv4 routes.
Field Description Status codes Route status codes. See Table 47. Origin Route origin. See Table 47. display bgp routing-table vpnv4 outlabel Use display bgp routing-table vpnv4 outlabel to display outgoing labels for BGP VPNv4 routes. Syntax display bgp routing-table vpnv4 outlabel Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display outgoing labels for all BGP VPNv4 routes.
Table 50 Command output Field Description BGP Local router ID Router ID of the local BGP router. Status Route status codes. See Table 47. Origin Route origin codes. See Table 47. OutLabel Outgoing label. display bgp routing-table vpnv4 peer Use display bgp routing-table vpnv4 peer to display BGP VPNv4 routing information advertised to or received from a specific BGP peer.
If network-address mask or network-address mask-length is specified, the command displays information about the route that exactly matches the specified address and mask (or mask length). Examples # Display all BGP VPNv4 routing information advertised to BGP peer 3.3.3.9 on the public network. display bgp routing-table vpnv4 peer 3.3.3.9 advertised-routes Total number of routes: 2 BGP local router ID is 1.1.1.
Table 51 Command output Field Description Advertised routes total Total number of routes advertised to the specified peer. Received routes total Total number of routes received from the specified peer. display bgp routing-table vpnv4 statistics Use display bgp routing-table vpnv4 statistics to display BGP VPNv4 route statistics.
mdc-admin mdc-operator Parameters vpn-instance vpn-instance-name: Displays BGP VPNv4 update group information for the MPLS L3VPN instance specified by its name, a case-sensitive string of 1 to 31 characters. If no VPN instance is specified, the command displays BGP VPNv4 update group information for the public network. ip-address: Displays BGP VPNv4 update group information for the specified BGP peer.
Update-group ID: 1 Type: EBGP link 4-byte AS number: Supported Nesting-vpn: vpn1 Minimum time between advertisements: 10 seconds OutQ: 0 Members: 1 1.1.1.3 Table 52 Command output Field Description Update-group ID ID of the update group. BGP link type: Type • • • • IBGP link. EBGP link. Confed IBGP link—Confederation IBGP link. Confed EBGP link—Confederation EBGP link. Label capability: Supported The peers in the update group support labeled routes.
Field Description UPE export route policy Outbound routing policy for UPEs in the update group. OutQ Number of prefixes to be advertised to peers in the update group. Members Number and IP addresses of peers in the update group. display ospf sham-link Use display ospf sham-link to display OSPF sham link information.
Examples # Display information about all OSPF sham links. display ospf sham-link OSPF Process 1 with Router ID 125.1.1.1 Sham link Area Neighbor ID Source IP Destination IP State Cost 0.0.0.0 95.1.1.1 125.2.1.1 95.2.1.1 P-2-P 1 # Display OSPF sham link information for OSPF area 1. display ospf sham-link area 1 OSPF Process 1 with Router ID 125.1.1.1 Sham link: 125.2.1.1 --> 95.2.1.1 Neighbor ID: 95.1.1.1 State: Full Area: 0.0.0.
Total VPN-Instances configured : 1 VPN-Instance Name RD Create time abc 1:1 2011/05/18 10:48:17 Table 53 Command output Field Description VPN-Instance Name Name of the VPN instance. RD RD of the VPN instance. Create Time Time when the VPN instance was created. # Display detailed information about VPN instance vpn1.
Views OSPF view Predefined user roles network-admin mdc-admin Parameters domain-id: Specifies an OSPF domain ID, in one of these formats: • Integer, in the range of 0 to 4294967295. For example, 1. • Dotted decimal notation. For example, 0.0.0.1. • Dotted decimal notation:16-bit user-defined number in the range of 0 to 65535. For example, 0.0.0.1:512. secondary: Specifies a secondary domain ID. Without this keyword, the command specifies a primary domain ID.
Predefined user roles network-admin mdc-admin Parameters route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters. Usage guidelines You can specify an export routing policy to filter advertised routes or modify their route attributes for the VPN instance. An export routing policy specified in VPN instance view applies to both IPv4 VPN and IPv6 VPN. An export routing policy specified in IPv4 VPN view or IPv6 VPN view applies to only IPv4 VPN or IPv6 VPN.
Views OSPF view Predefined user roles network-admin mdc-admin Parameters domain-id type-code1: Specifies the type code for domain ID. Valid values are 0x0005, 0x0105, 0x0205, and 0x8005. router-id type-code2: Specifies the type code for router ID. Valid values are 0x0107 and 0x8001. router-type type-code3: Specifies the type code for route type. Valid values are 0x0306 and 0x8000.
An import routing policy specified in IPv4 VPN view or IPv6 VPN view applies to only the IPv4 VPN or IPv6 VPN. IPv4/IPv6 VPN prefers the import routing policy specified in IPv4/IPv6 VPN view over the one specified in VPN instance view. Examples # Apply import routing policy poly-1 for VPN instance vpn1. system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] import route-policy poly-1 # Apply import routing policy poly-2 for IPv4 VPN vpn2.
Usage guidelines Use the command to associate the VPN instance with the interface connected to the CE. This command or its undo form clears the IP address and routing protocol configuration on the interface. After executing this command or its undo form, use the display this command to view the current configuration and reconfigure the IP address and routing protocol on the interface. The specified VPN instance must have been created by using the ip vpn-instance command in system view.
Related commands route-distinguisher nesting-vpn Use nesting-vpn to enable the nested VPN function. Use undo nesting-vpn to disable the nested VPN function. Syntax nesting-vpn undo nesting-vpn Default The nested VPN function is disabled. Views BGP-VPNv4 address family view Predefined user roles network-admin mdc-admin Usage guidelines To exchange VPNv4 routes with a peer in nested VPN, you must enable nested VPN and then execute the peer enable command to enable that peer in BGP VPNv4 view.
Predefined user roles network-admin mdc-admin Parameters group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. ip-address: Specifies a peer by its IP address. Usage guidelines On an RR in an inter-AS option C scenario, you must configure next-hop-invariable to not change the next hop of VPNv4 routes advertised to EBGP peers and RR clients. This command is exclusive with the peer next-hop-local command.
Usage guidelines A UPE is a special VPNv4 peer. It can accept one default route for each related VPN instance and routes permitted by the routing policy on the SPE. An SPE is a common VPN peer. Examples # Configure peer 1.1.1.1 as a UPE. system-view [Sysname] bgp 100 [Sysname-bgp] address-family vpnv4 [Sysname-bgp-vpnv4] peer 1.1.1.1 upe peer upe route-policy Use peer upe route-policy to advertise routes permitted by a routing policy to a UPE.
[Sysname-bgp-vpnv4] peer 1.1.1.1 upe [Sysname-bgp-vpnv4] peer 1.1.1.1 upe route-policy hope export Related commands • peer upe • route-policy (Layer 3—IP Routing Configuration Guide) policy vpn-target Use policy vpn-target to enable route target filtering of received VPNv4 routes. Only VPNv4 routes whose route target attribute matches local import route target attribute are added to the routing table. Use undo policy vpn-target to disable route target filtering, permitting all incoming VPNv4 routes.
Predefined user roles network-admin mdc-admin Parameters ip-address: Soft resets the BGP session with the BGP peer identified by this IP address. all: Soft resets all BGP sessions for VPNv4 address family. external: Soft resets all EBGP sessions for VPNv4 address family. group group-name: Soft resets BGP sessions with the BGP peer group identified by this name, a case-sensitive string of 1 to 47 characters. internal: Soft resets all IBGP sessions for VPNv4 address family.
Views User view Predefined user roles network-admin mdc-admin Parameters as-number: Resets BGP sessions in the AS specified by its number in the range of 1 to 4294967295. ip-address: Resets the BGP session with the BGP peer identified by this IP address. all: Resets all BGP sessions for VPNv4 address family. external: Resets all EBGP sessions for VPNv4 address family. group group-name: Resets BGP sessions with the BGP peer group identified by this name, a case-sensitive string of 1 to 47 characters.
Parameters route-distinguisher: Specifies the RD for the VPN instance, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1. Usage guidelines RDs enable VPNs to use the same address space.
An external route tag can be configured by different commands and has different priorities. The commands used to configure the external route tag (in the descending order of tag priority) are as follows: • import-route • route-tag • default tag If the external route tag in a Type 5 or 7 LSA received by a PE is the same as the locally configured external route tag, the PE ignores the LSA in route calculation to avoid routing loops.
specified threshold, the system gives an alarm message but still allows new active routes. If active routes in the VPN instance reach the maximum, no more active routes are added. simply-alert: Specifies that when active routes exceed the maximum number, the system still accepts active routes but generates a system log message. Usage guidelines A limit configured in VPN instance view applies to both the IPv4 VPN and the IPv6 VPN.
Views OSPF area view Predefined user roles network-admin mdc-admin Parameters source-ip-address: Specifies the source IP address of the sham link. destination-ip-address: Specifies the destination IP address of the sham link. cost cost: Specifies the cost of the sham link, in the range of 1 to 65535. The default cost is 1. dead dead-interval: Specifies the dead interval in the range of 1 to 32768 seconds. The default is 40 seconds.
OSPF advertises both the new and old keys so the neighbor can pass authentication and the neighbor relationship is maintained. 2. Configure the same key for the sham link on the neighbor. After the local device receives a packet carrying the new key from the neighbor, it quits the key rollover process. 3. Execute the undo sham-link command on the local device and the neighbor to remove the old key.
[Sysname-bgp] address-family vpnv4 [Sysname-bgp-vpnv4] rr-filter 10 snmp-agent trap enable l3vpn Use snmp-agent trap enable l3vpn to enable SNMP notifications for MPLS L3VPN. Use undo snmp-agent trap enable l3vpn to disable SNMP notifications for MPLS L3VPN. Syntax snmp-agent trap enable l3vpn undo snmp-agent trap enable l3vpn Default SNMP notifications for MPLS L3VPN are enabled.
Predefined user roles network-admin mdc-admin Parameters tunnel-policy-name: Specifies a tunnel policy by its name, a case-insensitive string of 1 to 19 characters. Usage guidelines The VPN instance uses the specified tunnel policy to select tunnels for traffic. If a VPN instance is not associated with any tunnel policy or the associated tunnel policy is not configured, the VPN instance selects tunnels according to the default tunnel policy.
vpn popgo Use vpn popgo to specify the VPN label processing mode as POPGO forwarding on an egress PE, which will pop the label for each packet and forward the packet out of the interface corresponding to the label. Use undo vpn popgo to restore the default. Syntax vpn popgo undo vpn popgo Default The VPN label processing mode is POP forwarding on an egress PE, which will pop the label for each packet and forward the packet through the FIB table.
Views VPN instance view Predefined user roles network-admin mdc-admin Parameters vpn-id: Specifies a VPN ID for the VPN instance, in the form of OUI:Index. Both OUI and Index are hex numbers. The OUI is in the range of 0 to FFFFFF, and the index is in the range of 0 to FFFFFFFF. Usage guidelines The VPN ID uniquely identifies the VPN instance. Different VPN instances must have different VPN IDs. The VPN ID cannot be 0:0. Examples # Configure VPN ID 20:1 for the VPN instance vpn1.
• 32-bit AS number:16-bit user-defined number, where the AS number must not be less than 65536. For example, 65536:1. both: Uses the specified route targets as both import targets and export targets. The both keyword is also used when you do not specify any of the following keywords: both, export-extcommunity, and import-extcommunity. export-extcommunity: Uses the specified route targets as export targets. import-extcommunity: Uses the specified route targets as import targets.
IPv6 MPLS L3VPN commands This chapter describes only IPv6 MPLS L3VPN-specific commands. For information about the commands available for both IPv4 MPLS L3VPN and IPv6 MPLS L3VPN, see "MPLS L3VPN commands." address-family ipv6 (VPN instance view) Use address-family ipv6 to enter IPv6 VPN view. Use undo address-family ipv6 to remove all configurations from IPv6 VPN view.
Predefined user roles network-admin mdc-admin Usage guidelines A VPNv6 address comprises an RD and an IPv6 prefix. In IPv6 MPLS L3VPNs, PEs exchange BGP VPNv6 routes. For a PE to exchange BGP VPNv6 routes with a BGP peer, you must enable that peer by executing the peer enable command in BGP VPNv6 address family view.
2.2.2.2 # Display information about the BGP VPNv6 peer group named group1. display bgp group vpnv6 group1 BGP peer group: group1 Remote AS: 600 Type: external Maximum number of prefixes allowed: 4294967295 Threshold: 75% Configured hold time: 180 seconds Keepalive time: 60 seconds Minimum time between advertisements: 30 seconds Peer preferred value: 0 Routing policy configured: No routing policy is configured Members: Peer 2.2.2.
Field Description OutQ Number of messages waiting to be sent to the peer. PrefRcv Number of prefixes received. Up/Down Duration of the BGP session in the current state. State State of the peer. display bgp peer vpnv6 Use display bgp peer vpnv6 to display information about BGP VPNv6 peers.
Table 55 Command output Field Description BGP Local router ID Router ID of the local BGP router. Local AS number Local AS number Total number of peers Total number of peers Peers in established state Number of peers in the state of established. Peer IP address of the peer. AS AS number of the peer. MsgRcvd Number of messages received. MsgSent Number of messages sent. OutQ Number of messages waiting to be sent to the peer. PrefRcv Number of received prefixes.
Peer Preferred Value: 0 BFD: Enabled Routing policy configured: No routing policy is configured Table 56 Command output Field Description Peer IP address of the peer. Local IP address of the local router. Type BGP link type: IBGP link or EBGP link. BGP version BGP version of the peer. remote router ID Router ID of the peer. BGP current state Current state of the BGP session. Up for Duration since the peer was established. BGP current event Current event of the BGP session.
Field Description Connect-interface has been configured The source interface of TCP connections has been configured. Peer Preferred Value Preferred value for the routes from the peer. BFD Indicates whether BFD is enabled for the peer. # Display log information for the BGP VPNv6 peer 10.1.1.2. display bgp peer vpnv6 10.1.1.2 log-info Peer: 10.1.1.
network-address prefix-length: Displays the BGP VPNv6 route that exactly matches the specified network address and prefix length. The prefix length is in the range of 0 to 128. Without this parameter, the command displays all BGP VPNv6 routes. Examples # Display all BGP VPNv6 routes. display bgp routing-table vpnv6 BGP local router ID is 1.1.1.
Path/Ogn: ? Table 57 Command output Field Description BGP Local router ID Router ID of the local BGP router. Route status codes: • • • • • • • • Status codes * - valid—Valid route. > - best—Common best route. d – damped—Route damped for route flap. h - history—History route. i - internal—Internal route. e - external—External route. s - suppressed—Suppressed route. S - Stale—Stale route. Route origin: • i—IGP, originated in the AS.
mdc-admin mdc-operator Parameters route-distinguisher route-distinguisher: Specifies an RD, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1.
Parameters route-distinguisher route-distinguisher: Specifies an RD, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1. as-path-acl-number: Specifies an AS path ACL by its number in the range of 1 to 256.
Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 MED : 0 Path/Ogn: ? For command output, see Table 57. Related commands ip as-path (Layer 3—IP Routing Command Reference) display bgp routing-table vpnv6 community-list Use display bgp routing-table vpnv6 community-list to display BGP VPNv6 routing information matching a specific BGP community list.
display bgp routing-table vpnv6 community-list 100 BGP local router ID is 1.1.1.
display bgp routing-table vpnv6 inlabel Use display bgp routing-table vpnv6 inlabel to display incoming labels for BGP VPNv6 routes. Syntax display bgp routing-table vpnv6 inlabel Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display incoming labels for all BGP VPNv6 routes. display bgp routing-table vpnv6 inlabel Total number of routes: 1 BGP local router ID is 1.1.1.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display outgoing labels for all BGP VPNv6 routes. display bgp routing-table vpnv6 outlabel BGP local router ID is 1.1.1.
Syntax display bgp routing-table vpnv6 peer ip-address { advertised-routes | received-routes } [ network-address prefix-length | statistics ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters ip-address: Specifies a peer by its IP address. advertised-routes: Displays routing information advertised to the specified peer. received-routes: Displays routing information received from the specified peer.
s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 MED : 0 Path/Ogn: ? For command output, see Table 57. # Display statistics for BGP VPNv6 routes advertised to BGP peer 3.3.3.9 on the public network. display bgp routing-table vpnv6 peer 3.3.3.
Route distinguisher: 100:1(vpn1) Total number of routes: 4 Route distinguisher: 200:1 Total number of routes: 1 display bgp update-group vpnv6 Use display bgp update-group vpnv6 to display information about BGP update groups for the BGP VPNv4 address family. Syntax display bgp update-group vpnv6 [ ip-address ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters ip-address: Displays BGP VPNv6 update group information for the specified BGP peer.
1.1.1.2 1.1.1.3 Table 61 Command output Field Description Update-group ID ID of the update group. BGP link type: Type • • • • IBGP link. EBGP link. Confed IBGP link—Confederation IBGP link. Confed EBGP link—Confederation EBGP link. Label capability: Supported The peers in the update group support labeled routes. 4-byte AS number: Supported The peers in the update group support 4-byte AS numbers. 4-byte AS number: Suppressed The peers in the update group suppress 4-byte AS numbers.
Syntax policy vpn-target undo policy vpn-target Default The route target filtering function is enabled for received VPNv6 routes. Views BGP VPNv6 address family view Predefined user roles network-admin mdc-admin Usage guidelines In an inter-AS option B scenario, an ASBR-PE must save all incoming VPNv4 routes and advertises those routes to the peer ASBR-PE. For this purpose, you must execute the undo policy vpn-target command on the ASBR-PE to disable route target filtering.
import: Soft resets inbound EBGP sessions. Usage guidelines Soft reset can update BGP VPNv6 routing information without breaking down BGP neighbor relationships. You can apply a new route selection policy by executing this command. If you execute this command with the export keyword, BGP filters advertised routing information based on the new policy and sends the matching routes to the BGP peer.
Examples # Reset all BGP sessions for VPNv6 address family. reset bgp vpnv6 all rr-filter Use rr-filter to create an RR reflection policy so that only IBGP routes whose extended community attribute matches the specified extended community list are reflected. Use undo rr-filter to restore the default. Syntax rr-filter extended-community-number undo rr-filter Default An RR does not filter reflected routes.
MPLS L2VPN commands ac interface Use ac interface to bind an AC to a cross-connect. Use undo ac interface to remove the binding. Syntax ac interface interface-type interface-number [ service-instance instance-id ] [ access-mode { ethernet | vlan } ] undo ac interface interface-type interface-number [ service-instance instance-id ] Default No AC is bound to a cross-connect.
Examples # Configure service instance 200 on the Layer 2 interface Ten-GigabitEthernet 1/0/1 to match packets with an outer VLAN tag of 200, and bind the service instance to the cross-connect actopw in the cross-connect group vpn1.
Views BGP view Predefined user roles network-admin mdc-admin Usage guidelines To establish a BGP PW to a remote PE, you must execute the peer enable command in BGP L2VPN address family view to enable the remote PE. Examples # Create and enter BGP L2VPN address family view.
[Sysname-xcg-bbb] auto-discovery bgp [Sysname-xcg-bbb-auto] Related commands • display l2vpn pw • display l2vpn xconnect-group backup-peer Use backup-peer to configure a backup PW for a cross-connect, and enter cross-connect backup PW view. If the backup PW has been configured, this command places you into cross-connect backup PW view. Use undo backup-peer to remove the backup PW from a cross-connect.
PW redundancy is mutually exclusive from the multi-segment PW function. If you have configured two PWs by using the peer command in cross-connect view, you cannot configure a backup PW by using the backup-peer command in cross-connect PW view, and vice versa. Examples # Configure a primary PW and a backup PW for the cross-connect pw2pw in the cross-connect group vpn2. The primary PW is destined to 6.6.6.6 and has a PW ID of 100. The backup PW is destined to 7.7.7.7 and has a PW ID of 200.
• Execute peer twice to connect two PWs to form a multi-segment PW. Examples # Create cross-connect ac2pw for cross-connect group vpn1 and enter cross-connect view. system-view [Sysname] xconnect-group vpn1 [Sysname-xcg-vpn1] connection ac2pw [Sysname-xcg-vpn1-ac2pw] connection remote-site-id Use connection remote-site-id to create an auto-discovery cross-connect and enter auto-discovery cross-connect view.
control-word enable Use control-word enable to enable the control word function. Use undo control-word enable to restore the default. Syntax control-word enable undo control-word enable Default The control word function is disabled. Views PW class view Predefined user roles network-admin mdc-admin Usage guidelines The control word field is between the MPLS label stack and the Layer 2 data. It carries control information for the Layer 2 packet, such as the sequence number.
Syntax description text undo description Default No description is configured for a cross-connect group. Views Cross-connect group view Predefined user roles network-admin mdc-admin Parameters text: Configures a description, a case-sensitive string of 1 to 80 characters. Examples # Configure a description of vpws for vpn2 for the cross-connect group vpn2.
BGP peer group: group1 Remote AS: not specified Type: external Members: 10.1.1.1 # Display detailed information about the BGP L2VPN peer group group1.
Syntax display bgp l2vpn signaling [ peer ip-address { advertised | received } [ statistics ] | route-distinguisher route-distinguisher [ site-id site-id [ label-offset label-offset [ advertise-info ] ] ] | statistics ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters peer ip-address: Specifies a BGP peer by its IP address. advertised: Displays MPLS L2VPN label block information advertised to the BGP peer.
Route distinguisher: 2:2 Total number of label blocks: 2 Site ID LB offset LB range LB base Nexthop 1 0 10 65663 0.0.0.0 * >i 2 0 10 65664 192.3.3.3 * > Table 63 Command output Field Description Status codes: • • • • • • • • Status codes * – valid—Valid route. > – best—Best route. d – damped—Dampened route. h – history—History route. s – suppressed—Suppressed route. S – Stale—Stale route. i – internal—Internal route. e – external—External route.
LB base : 65663 LB range : 10 State : valid, internal, best, CSV : 0x01000ABFFF Table 64 Command output Field Description Number of label block messages: Paths • available—Number of available label block messages. • best—Number of best label block messages. From IP address of the peer from which the label block was received. Original nexthop Original next hop. If the label block was obtained from a BGP route update, this field displays the next hop address in that BGP route update.
Route distinguisher: 2:2 Total number of label blocks: 1 Paths: 1 best Site ID : 1 LB offset : 0 LB base : 65663 LB range : 10 CSV : 0x01000ADFFF Advertised to peers (1 in total): 192.3.3.3 Table 65 Command output Field Description Number of label block messages: Paths • available—Number of available label block messages. • best—Number of best label block messages. LB offset Offset of the label block. LB base Initial value of the label block. LB range Size of the label block.
log-info: Displays the log information for the specified BGP L2VPN peer or peer group. verbose: Displays detailed information. If a BGP L2VPN peer is specified, the command displays detailed information about the specified BGP L2VPN peer. If no BGP L2VPN peer is specified, the command displays detailed information about all BGP L2VPN peers. Examples # Displays brief information about all BGP L2VPN peers. display bgp peer l2vpn BGP local router ID: 2.2.2.
Threshold: 75% Minimum time between advertisements is 30 seconds Optional capabilities: Multi-protocol extended capability has been enabled Route refresh capability has been enabled Peer Preferred Value: 0 Routing policy configured: No routing policy is configured Table 67 Command output Field Description Type • IBGP link—IBGP connection. • EBGP link—EBGP connection. Peer optional capabilities Optional capabilities supported by the peer.
display bgp update-group l2vpn Use display bgp update-group l2vpn to display update group information for the BGP L2VPN address family. Syntax display bgp update-group l2vpn [ ip-address ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters ip-address: Displays update group information for the specified BGP L2VPN peer. If no peer is specified, the command displays all update group information for the BGP L2VPN address family.
Table 68 Command output Field Description Type of the BGP connection: Type • • • • IBGP link—IBGP connection. EBGP link—EBGP connection. Confed IBGP link—Confederation IBGP connection. Confed EBGP link—Confederation EBGP connection. 4-byte AS number: Supported The peers in the update group support 4-byte AS numbers. 4-byte AS number: Suppressed The peers in the update group suppress 4-byte AS numbers.
The local label block matches the received label block if the following condition is met: local label block LO ≤ remote site ID ≤ local label block LO + local label block LR – 1. If neither peer ip-address nor local is specified, the command displays label block information received from all peers, and the local block information that matches the received label block information.
# Display brief information about all local label blocks. display l2vpn bgp local Xconnect-group Name: vpnb Site Offset Range Label Base RD 1 0 10 65663 2:2 # Display detailed information about all local label blocks. display l2vpn bgp local verbose Xconnect-group Name: vpnb Site ID : 1 Offset : 0 RD : 2:2 Range : 10 Label Base : 65663 Link ID : 1 Table 71 Command output Field Description Offset Offset of the label block. RD RD of the label block.
Parameters peer ip-address: Displays LDP PW label information advertised by the specified peer PE. The ip-address argument specifies the LSR ID of the peer PE. If no peer PE is specified, the command displays LDP PW label information advertised by all peer PEs. pw-id pw-id: Displays LDP PW label information for the PW specified by its PW ID in the range of 1 to 4294967295. If peer ip-address is specified without this option, the command displays all LDP PW label information advertised by the peer PE.
Field Description Connection Cross-connect of the PW. PW state communicate: PW Status Communication • Notification method—Uses notifications to communicate PW states. • Label withdraw method—Assigns a PW label to the PW when the AC is up and withdraws the PW label when the AC goes down. VCCV CC Type This field is not supported in the current software version and is reserved for future support.
verbose: Displays detailed information. Without this keyword, the command displays brief information. Examples # Display brief AC forwarding information for all cross-connect groups.
Total number of cross-connections: 1 Total number of PWs: 2, 2 up, 0 blocked, 0 down Xconnect-group In/Out Label NID Link ID State vpn1 65663/65663 131 0 Up vpn1 65664/65665 133 1 Up Table 76 Command output Field Description Total number of cross-connections Total number of cross-connects, including those not bound with any PW. NHLFE ID for the public tunnel that carries the PW. If equal-cost tunnels are available, this field displays multiple NIDs.
Field Description PW attribute: PW Attributes • Main—The PW is the primary PW. • Backup—The PW is the backup PW. VCCV CC VCCV CC type. This field is not supported in the current software version and is reserved for future support. VCCV BFD VCCV BFD type. This field is not supported in the current software version and is reserved for future support. Tunnel Group ID ID of the tunnel group for the PW. NHLFE IDs of the public tunnels that carry the PW.
Total number of PWs: 2, 2 up, 0 blocked, 0 down, 0 defect Xconnect-group Name: ldp Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State 192.3.3.3 500 65663/65663 LDP M 0 Up Xconnect-group Name: vpnb Peer PW ID/Rmt Site In/Out Label Proto Flag Link ID State 192.3.3.3 2 65664/65665 BGP M 1 Up Table 78 Command output Field Description PW flag: Flag • M—Primary PW. • B—Backup PW.
Tunnel Group ID : 0x1800000860000006 Tunnel NHLFE IDs : 135 Table 79 Command output Field Description Xconnect-group Name Cross-connect group name. Connection Cross-connect name, which is displayed for LDP and static PWs. Peer IP address of the peer PE of the PW. PW State Wait to Restore Time PW state: Up, Down, or Blocked. Blocked indicates that the PW is a backup PW. Wait time to switch traffic from the backup PW to the primary PW when the primary PW recovers, in seconds.
network-operator mdc-admin mdc-operator Parameters class-name: Displays information about the PW class specified by its name, a case-sensitive string of 1 to 19 characters. If no PW class is specified, the command displays information about all PW classes. Examples # Display information about all PW classes.
service-instance instance-id: Displays information about the service instance specified by its ID in the range of 1 to 4096. If interface interface-type interface-number is specified without this option, the command displays information about all service instances on the specified Layer 2 Ethernet interface or Layer 2 aggregate interface. verbose: Displays detailed information. Without this keyword, the command displays brief information. Examples # Display brief information about all service instances.
Table 82 Command output Field Description Interface Layer 2 Ethernet interface or Layer 2 aggregate interface. Encapsulation Match criteria of the service instance. If no match criteria are configured, the field is blank. Xconnect-group Name of the cross-connect group bound to the service instance. AD connection Name of the auto-discovery cross-connect bound to the service instance, identified by the local and remote site IDs.
Table 83 Command output Field Description Connection ID Cross-connect ID. State Cross-connect group state: Up, Down, or Admin down. Admin down indicates the cross-connect group has been shut down by the shutdown command. # Display detailed information about all cross-connect groups. display l2vpn xconnect-group verbose Xconnect-group Name: ldp Description : ldp-pw Connection Name : ldp Connection ID : 1 State : Down MTU : 1500 LDP PWs: Peer PW ID Link ID State 192.3.3.
Field Description State Cross-connect group state: Up, Down, or Admin down. Admin down indicates the cross-connect group has been shut down by the shutdown command. State PW state: Up, Down, or Blocked. AC AC type. The value is a service instance on a Layer 2 interface, such as XGE1/0/3 srv1. Related commands xconnect-group encapsulation Use encapsulation to configure match criteria for a service instance. Use undo encapsulation to remove match criteria for a service instance.
• Match incoming packets with any VLAN ID or no VLAN ID. • Match incoming packets with a specific VLAN ID. The match criteria for different service instances configured on an interface must be different. You can create multiple service instances on an interface, but only one service instance can use the default match criteria (encapsulation default) to match packets that do not match any other service instance.
l2vpn switchover Use l2vpn switchover to switch traffic from the specified PW to its backup or primary PW. Syntax l2vpn switchover peer ip-address pw-id pw-id Views User view Predefined user roles network-admin mdc-admin Parameters peer ip-address: Specifies the LSR ID of the peer PE on the PW. pw-id pw-id: Specifies the PW ID in the range of 1 to 4294967295. Usage guidelines The specified LSR ID and PW ID uniquely identify a PW. The specified PW must be in up state.
Usage guidelines The PEs at the two ends of an LDP PW must have the same MTU. Otherwise, the PW cannot come up. The MTU specifies the maximum packet length, including the control word, PW label, and network layer packet. Examples # Configure an MTU of 1400 bytes for the cross-connect ac2pw in the cross-connect group vpn1.
pw-class class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters. If no PW class is specified, the PW type is determined by the interface type. The control word function is not supported for PW types that do not require using control word. tunnel-policy tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 19 characters. If no tunnel policy is specified, the default tunnel policy is used.
Syntax peer { group-name | ip-address } signaling [ non-standard ] undo peer { group-name | ip-address } signaling Default BGP can exchange label block information with a peer or peer group through RFC 4761 MP_REACH_NLRI. Views BGP L2VPN address family Predefined user roles network-admin mdc-admin Parameters group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The specified peer group must have been created. ip-address: Specifies a peer by its IP address.
Syntax policy vpn-target undo policy vpn-target Default Route target-based filtering of incoming BGP L2VPN information is enabled. Views BGP L2VPN address family view Predefined user roles network-admin mdc-admin Usage guidelines In an inter-AS VPN option B network, an ASBR-PE needs to store all BGP L2VPN information (label block information) and advertises the information to the remote ASBR-PE.
Usage guidelines In PW class view, you can configure PW attributes such as the PW type and control word. PWs with the same attributes can use the same PW class to simplify configuration. Examples # Create a PW class named pw100 and enter PW view. system-view [Sysname] pw-class pw100 [Sysname-pw-pw100] Related commands • control-word enable • display l2vpn pw-class • pw-type pw-class (auto-discovery cross-connect view) Use pw-class to reference a PW class.
Related commands • control-word enable • display l2vpn pw-class • pw-class • pw-type pw-type Use pw-type to specify a PW type for a PW class. Use undo pw-type to restore the default. Syntax pw-type { ethernet | vlan } undo pw-type Default The PW type is VLAN. Views PW class view Predefined user roles network-admin mdc-admin Parameters ethernet: Specifies the PW type as Ethernet. vlan: Specifies the PW type as VLAN.
peer PE requires the ingress to modify the P-Tag. Then the PE adds the PW label and public tunnel encapsulation, and forwards the traffic through the PW. • For traffic received from the PW, if the AC access mode (configured by ac interface) is VLAN, the PE modifies or keeps the P-Tag and forwards the traffic through the AC. If the AC access mode is Ethernet, the PE removes the P-Tag and forwards the traffic through the AC. This command takes effect only when the AC type is Ethernet.
To apply a new policy to inbound sessions, execute this command with the import keyword. BGP advertises a route-refresh message to the peer and the peer resends its L2VPN information. After receiving the L2VPN information, BGP uses the new policy to filter the L2VPN information. This command requires that both the local router and the peer support route refresh. Examples # Soft-reset all inbound L2VPN BGP sessions.
Syntax revertive { wtr wtr-time | never } undo revertive { wtr | never } Default When the primary PW recovers, traffic is immediately switched from the backup PW to the primary PW. Views Cross-connect view Predefined user roles network-admin mdc-admin Parameters wtr wtr-time: Specifies the wait time in the range of 0 to 180 seconds. When the primary PW recovers, the PE waits for the specified time before switching traffic from the backup PW to the primary PW.
Parameters route-distinguisher: Specifies an RD, a string of 3 to 21 characters. An RD can be in one of these formats: • 16-bit AS number:32-bit user-defined number, such as 101:3. • 32-bit IP address:16-bit user-defined number, such as 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, such as 65536:1. In this format, the minimum value of the AS number is 65536. Usage guidelines MPLS L2VPN uses RDs to differentiate the sites that reside in different VPNs and have the same site ID.
Examples # Configure the route reflector to reflect only the BGP L2VPN information that contains the extended community number 10. system-view [Sysname] bgp 100 [Sysname-bgp] address-family l2vpn [Sysname-bgp-l2vpn] rr-filter 10 service-instance Use service-instance to create a service instance on an interface, and enter service instance view. Use undo service-instance to delete a service instance.
undo shutdown Default A cross-connect group is enabled. Views Cross-connect group view Predefined user roles network-admin mdc-admin Usage guidelines After you disable a cross-connect group, all cross-connects in the group cannot provide L2VPN services. Use the shutdown command when you want to temporarily disable L2VPN (for example, to modify a cross-connect group).
default-offset default-offset: Specifies the initial site ID, 0 or 1. The default value is 0. Usage guidelines The range range-value and default-offset default-offset options determine the label block of the site. If you execute the site command with the range-value of range1, and default-offset of 0 (or 1), a label block with LR of range1 and LO of 0 (or 1) is assigned to the site.
Views Auto-discovery cross-connect view Predefined user roles network-admin mdc-admin Parameters tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 19 characters. Usage guidelines The PWs on the auto-discovery cross-connect use the referenced tunnel policy to select public tunnels.
Parameters vpn-target&<1-8>: Configures route targets. &<1-8> means that you can configure up to 8 route targets in one command line. A route target is a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number, such as 101:3. • 32-bit IP address:16-bit user-defined number, such as 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, such as 65536:1. In this format, the minimum value of the AS number is 65536.
Parameters group-name: Specifies the name of the cross-connect group, a case-sensitive string of 1 to 31 characters excluding hyphens. Usage guidelines L2VPN can create multiple LDP, BGP, and static PWs for a cross-connect group. Examples # Create a cross-connect group named vpn1 and enter cross-connect group view.
VPLS commands address-family l2vpn Use address-family l2vpn to create and enter BGP L2VPN address family view. Use undo address-family l2vpn to delete all settings from BGP L2VPN address family view. Syntax address-family l2vpn undo address-family l2vpn Default The BGP L2VPN address family view is not created.
Views VSI view Predefined user roles network-admin mdc-admin Parameters bgp: Enables the VSI to automatically discover neighbors through BGP. Usage guidelines In auto-discovery VSI view, you can configure parameters such as the local site, VPLS ID, and route targets for BGP, so the local PE can use BGP to discover remote PEs. You can use the signaling-protocol command to specify the signaling protocol, LDP or BGP, to establish PWs to the remote PEs found by BGP.
Views VSI LDP PW view, VSI static PW view Predefined user roles network-admin mdc-admin Parameters ip-address: Specifies the LSR ID of the peer PE on the backup PW. pw-id pw-id: Specifies a PW ID for the backup PW, in the range of 1 to 4294967295. If no PW ID is specified, the default PW ID is used (specified by the default-pw-id command). in-label label-value: Specifies the incoming label for the backup PW, in the range of 16 to 1023.
control-word enable Use control-word enable to enable the control word function. Use undo control-word enable to restore the default. Syntax control-word enable undo control-word enable Default Control word is disabled. Views PW class view Predefined user roles network-admin mdc-admin Usage guidelines The control word field is between the MPLS label stack and the Layer 2 data. It carries extra control information about the Layer 2 frame, such as the sequence number.
Default No default PW ID is configured for a VSI. Views VSI view Predefined user roles network-admin mdc-admin Parameters default-pw-id: Specifies the default PW ID for the VSI, in the range of 1 to 4294967295. Usage guidelines After you configure the default PW ID for a VSI, you do not need to provide a PW ID in the backup-peer and peer commands. Examples # Configure the default PW ID for VSI vpn1 as 200.
Examples # Configure a description of vsi for vpn1 for VSI vpn1. system-view [Sysname] vsi vpn1 [Sysname-vsi-vpn1] description vsi for vpn1 Related commands display l2vpn vsi display bgp group l2vpn Use display bgp group l2vpn to display information about BGP L2VPN peer groups.
Peer preferred value: 0 Routing policy configured: No routing policy is configured Members: Peer AS 10.1.1.1 600 MsgRcvd MsgSent OutQ PrefRcv Up/Down 0 0 0 State 0 00:00:05 Idle Table 85 Command output Field Description Type • external—EBGP peer group. • internal—IBGP peer group. Type of the peer group: Maximum number of prefixes allowed This field is ignored in BGP L2VPN. Threshold This field is ignored in BGP L2VPN. Peer preferred value This field is ignored in BGP L2VPN.
received: Displays VPLS PE information received from the BGP peer. statistics: Displays BGP VPLS PE statistics. route-distinguisher route-distinguisher: Displays BGP VPLS PE information for the route distinguisher (RD), which is a string of 3 to 21 characters. You can specify an RD in one of the following formats: • 16-bit AS number:32-bit user-defined number, such as 101:3. • 32-bit IP address:16-bit user-defined number, such as 192.168.122.15:1.
Field Description Origin of the label block: • i – IGP—Originated in the AS. • e – EGP—Learned through EGP. • ? – incomplete—Unknown origin. Origin # Display detailed information about the VPLS PE that has RD 2:2 and IP address 2.2.2.9. display bgp l2vpn auto-discovery route-distinguisher 2:2 pe-address 2.2.2.9 BGP local router ID: 192.168.1.140 Local AS number: 100 Route distinguisher: 2:2 Total number of automatically discovered PEs: 1 Paths: 1 available, 1 best From : 2.2.2.9 (192.168.
Field Description State of the VPLS PE information: • • • • • State valid. internal. external. local. best. # Display BGP advertisement information for the specified VPLS PE. display bgp l2vpn auto-discovery route-distinguisher 2:2 pe-address 1.1.1.9 advertise-info BGP local router ID: 192.168.1.140 Local AS number: 100 Route distinguisher: 2:2 Total number of automatically discovered PEs: 1 Paths: 1 best VPLS ID : 100:100 PE address : 1.1.1.9 Advertised to peers (2 in total): 2.2.2.
route-distinguisher route-distinguisher: Displays BGP VPLS label block information for the route distinguisher (RD), which is a string of 3 to 21 characters. You can specify an RD in one of the following formats: • 16-bit AS number:32-bit user-defined number, such as 101:3. • 32-bit IP address:16-bit user-defined number, such as 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, such as 65536:1. In this format, the minimum value of the AS number is 65536.
Field Description Origin of the label block: • i – IGP—Originated in the AS. • e – EGP—Learned through EGP. • ? – incomplete—Unknown origin. Origin LB offset Offset of the label block. LB range Size of the label block. LB base Initial value of the label block. # Display detailed information about the BGP VPLS label block that has RD 1:1, site ID 2, and offset 0. display bgp l2vpn signaling route-distinguisher 1:1 site-id 2 label-offset 0 BGP local router ID: 192.168.1.
Field Description Attribute of the label block: • • • • Attribute value MED—Multi-Exit Discriminator attribute. localpref—Local preference value. pref-val—Preferred value. Pre—Preference value. LB offset Offset of the label block. LB base Initial value of the label block. LB range Size of the label block. State of the label block: • • • • • State valid. internal. external. local. best. # Display BGP advertisement information for the specified VPLS label block.
Syntax display bgp peer l2vpn [ group-name log-info | ip-address { log-info | verbose } | verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters group-name: Specifies a BGP L2VPN peer group by its name, a case-sensitive string of 1 to 47 characters. ip-address: Specifies a BGP L2VPN peer by its IP address. log-info: Displays the log information for the specified BGP L2VPN peer or peer group. verbose: Displays detailed information.
BGP current state: Established, Up for 00h01m25s BGP current event: KATimerExpired BGP last state: OpenConfirm Port: Local - 179 Remote - 1049 Configured: Active Hold Time: 180 sec Received Keepalive Time: 60 sec : Active Hold Time: 180 sec Negotiated: Active Hold Time: 180 sec Keepalive Time: 60 sec Peer optional capabilities: Peer support BGP multi-protocol extended Peer support BGP route refresh capability Peer support BGP route AS4 capability Address family IPv4 Unicast: advertised and received
Field Description Route refresh capability has been enabled The local device supports route refresh. Peer Preferred Value This field is ignored in BGP L2VPN. Routing policy configured This field is ignored in BGP L2VPN. # Display log information for the BGP L2VPN peer 10.1.1.1. display bgp peer l2vpn 10.1.1.1 log-info Peer: 10.1.1.
L2VPN signaling (VPWS): RFC mode L2VPN auto-discovery: RFC mode Minimum time between advertisements: 15 seconds OutQ: 0 Members: 2 2.2.2.9 3.3.3.9 # Display update group information for the BGP L2VPN peer 1.1.1.3. display bgp update-group l2vpn 1.1.1.3 Update-group ID: 0 Type: EBGP link 4-byte AS number: Supported L2VPN signaling (VPLS): Supported L2VPN signaling (VPWS): RFC mode L2VPN auto-discovery: Non-standard mode Minimum time between advertisements: 30 seconds OutQ: 0 Members: 1 1.1.1.
display l2vpn auto-discovery Use display l2vpn auto-discovery to display information about automatically discovered VPLS PEs. Syntax display l2vpn auto-discovery [ peer ip-address ] [ vsi vsi-name ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters peer ip-address: Displays information about the specified VPLS PE. If no PE is specified, this command displays information about all automatically discovered VPLS PEs.
network-operator mdc-admin mdc-operator Parameters local: Displays local VPLS label block information from BGP. peer ip-address: Displays VPLS label block information received from the remote BGP peer. vsi vsi-name: Displays VPLS label block information for the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If no VSI is specified, this command displays VPLS label block information for all VSIs. verbose: Displays detailed information.
Remote VC Label : 131255 Link ID : 9 Local Label Block : 131153/10/0 Remote Label Block : 131250/10/0 Export Route Target: 1:1 Remote Site ID : 3 Offset : 0 RD : 1:1 PW State : Up Encapsulation : BGP-VPLS MTU : 1500 Nexthop : 3.3.3.9 Local VC Label : 131160 Remote VC Label : 131256 Link ID : 10 Local Label Block : 131153/10/0 Remote Label Block : 131250/10/0 Export Route Target: 1:1 Table 95 Command output Field Description Local VC Label Incoming label of the PW.
Site ID : 2 Offset : 0 RD : 1:1 Range : 10 Label Base : 131153 Link ID : 8,9,10,11,12,13,14,15,16 Table 97 Command output Field Description Offset Offset of the label block. RD RD of the label block. If no RD is configured, this field displays a hyphen (-). Range Range of the label block. Label Base Initial value of the label block. Link ID Link ID of the PW established using the label block.
32-bit AS number:16-bit user-defined number, such as 65536:1. In this format, the minimum value of the AS number is 65536. • vsi vsi-name: Displays LDP PW label information for the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If no VSI is specified, the command displays LDP PW label information for all VSIs. verbose: Displays detailed information. If you do not specify this keyword, the command displays brief information.
VCCV CV Type: -/VCCV CC Type: -/MTU : 1500/1500 PW Status : PW forwarding/PW forwarding Peer: 2.2.2.9 VPLS ID: 100:100 VSI Name: bbb PW State: Up PW Status Communication: Notification method PW ID FEC (Local/Remote): Local AII : (1.1.1.9, 2.2.2.9) Remote AII : (2.2.2.9, 1.1.1.9) PW Type : VLAN/VLAN Group ID : 0/0 Label : 131164/131165 Control Word: Disabled/Disabled VCCV CV Type: -/VCCV CC Type: -/MTU : 1500/1500 PW Status : PW forwarding/PW forwarding Peer: 3.3.3.
Field Description VCCV CC Type This field is not supported in the current software version and is reserved for future support. MTU Maximum transmission unit of the VSI. PW status: PW Status • • • • • • PW forwarding—PW is ready for packet forwarding. PW not forwarding—PW is not ready for packet forwarding. AC receive fault—AC cannot receive packets. AC transmit fault—AC cannot send packets. PW receive fault—PW cannot receive packets. PW transmit fault—PW cannot send packets.
slot slot-number: Displays L2VPN forwarding information on a card. The slot-number argument specifies the slot number of the card. If no card is specified, the command displays L2VPN forwarding information on the active MPU. (In standalone mode.) chassis chassis-number slot slot-number: Displays L2VPN forwarding information for a card on an IRF member device. The chassis-number argument specifies the ID of the IRF member device and the slot-number argument specifies the slot number of the card.
Access Mode : VLAN Encapsulation: s-vid 2003 VSI Name: 2004 Interface: BAGG111 Service Instance: 2004 Link ID : 0 Access Mode : VLAN Encapsulation: s-vid 2004 Table 101 Command output Field Description Service Instance Service instance ID. Link ID Link ID of the AC in the VSI. AC access mode: Access Mode • VLAN. • Ethernet. Encapsulation Match criterion of the service instance. # Display brief PW forwarding information for all VSIs.
PW Attributes : Main VCCV CC : - VCCV BFD : - Tunnel Group ID : 0x1800000760000005 Tunnel NHLFE IDs: 133 Link ID: 9 PW Type : VLAN PW State : Up In Label : 131154 Out Label: 131156 MTU : 1500 PW Attributes : Main VCCV CC : - VCCV BFD : - Tunnel Group ID : 0x1800000860000006 Tunnel NHLFE IDs: 135 Table 103 Command output Field Description Link ID Link ID of the PW in the VSI. PW Type Data encapsulation type of the PW. PW State PW state: Up, Down, or Blocked.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters vsi vsi-name: Displays MAC address table information for the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If no VSI is specified, the command displays MAC address table information for all VSIs. dynamic: Displays dynamically generated MAC address entries. If this keyword is not specified, the command displays all types of MAC address entries.
Syntax display l2vpn pw [ vsi vsi-name ] [ protocol { bgp | ldp | static } ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters vsi vsi-name: Displays L2VPN PW information for the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If no VSI is specified, the command displays L2VPN PW information for all VSIs. protocol: Specifies a signaling protocol.
Table 105 Command output Field Description PW ID/Rmt Site This field displays the PW ID for an LDP PW (FEC 128) or a static PW, displays a hyphen (-) for a BGP auto-discovery LDP PW (FEC 129), and displays the remote site ID for a BGP PW. Proto Protocol used to establish the PW: LDP, Static, or BGP. PW attribute flag: Flag • M—Primary PW. • B—Backup PW. • H—The PW is the hub link in the VPLS hub-spoke network. This flag is not supported in the current software version.
MTU : 1500 PW Attributes : Main VCCV CC : - VCCV BFD : - Tunnel Group ID : 0x1800000860000007 Tunnel NHLFE IDs : 136 Peer: 3.3.3.9 VPLS ID: 100:100 Signaling Protocol : LDP Link ID : 9 PW State : Up In Label : 131159 Out Label: 131160 MTU : 1500 PW Attributes : Main VCCV CC : - VCCV BFD : - Tunnel Group ID : 0x1800000860000008 Tunnel NHLFE IDs : 137 VSI Name: ccc Peer: 2.2.2.
Field Description PW attribute: PW Attributes • Main—The PW is the primary PW. • Backup—The PW is the backup PW. • Hub link—The PW is the hub link in the VPLS hub-spoke network. This value is not supported in the current software version. • Spoke link—The PW is a spoke link in the VPLS hub-spoke network. This value is not supported in the current software version. • No-split-horizon—Split horizon forwarding is disabled. VCCV CC VCCV CC type.
pw1 Ethernet Enabled - - pw2 VLAN Disabled - - Table 107 Command output Field Description VCCV CC VCCV CC type. This field is not supported in the current software version and is reserved for future support. VCCV BFD VCCV BFD type. This field is not supported in the current software version and is reserved for future support. Related commands pw-class display l2vpn service-instance Use display l2vpn service-instance to display Ethernet service instance information.
XGE1/1/3 2 vpls2 1 Up VPLS XGE1/1/3 3 vpls3 1 Up VPLS XGE1/1/3 4 vpls4 1 Up VPLS XGE1/1/3 5 Up Table 108 Command output Field Description Interface Layer 2 Ethernet interface or Layer 2 aggregate interface. SrvID Service instance ID. Owner Name of the VSI bound to the service instance. If no VSI is bound, this field is blank. LinkID Link ID of the AC in the VSI. State Service instance state. Type L2VPN type of the service instance: VPLS or VPWS.
Related commands service-instance display l2vpn vsi Use display l2vpn vsi to display VSI information. Syntax display l2vpn vsi [ name vsi-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters name vsi-name: Displays information about the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If no VSI is specified, the command displays information about all VSIs. verbose: Displays detailed information.
MTU : 1500 Bandwidth : - Broadcast Restrain : - Multicast Restrain : - Unknown Unicast Restrain: MAC Learning : Enabled MAC Table Limit : - Drop Unknown : - LDP PWs: Peer PW ID Link ID State 192.3.3.3 1 256 Up 192.3.3.3 1001 257 Blocked Peer Remote Site Link ID State 192.4.4.
Related commands vsi encapsulation Use encapsulation to configure match criteria for a service instance. Use undo encapsulation to remove match criteria for a service instance. Syntax encapsulation default encapsulation { tagged | untagged } encapsulation s-vid vlan-id [ only-tagged ] undo encapsulation Default No match criteria are configured for a service instance. Views Service instance view Predefined user roles network-admin mdc-admin Parameters default: Specifies the default match criteria.
This command cannot be executed multiple times for a service instance. Removing the match criteria for a service instance also removes the association between the service instance and the VSI. Examples # Configure service instance 1 on Layer 2 Ethernet interface Ten-GigabitEthernet 1/0/1 to match packets that have an outer VLAN ID of 111.
Views User view Predefined user roles network-admin mdc-admin Parameters peer ip-address: Specifies the LSR ID of the peer PE on the PW. pw-id pw-id: Specifies the PW ID in the range of 1 to 4294967295. Usage guidelines The specified LSR ID and PW ID uniquely identify a PW. The specified PW must be in up state. If the PW has a backup PW, executing this command switches traffic from the PW to the backup PW. If the PW does not have a backup PW, this command does not perform the switchover.
Related commands display l2vpn vsi mtu Use mtu to configure an MTU for a VSI. Use undo mtu to restore the default. Syntax mtu mtu undo mtu Default A VSI has an MTU of 1500 bytes. Views VSI view Predefined user roles network-admin mdc-admin Parameters mtu: Specifies an MTU value in the range of 300 to 65535. Usage guidelines When LDP is used to create PWs, all PEs in a VPLS instance must have the same MTU configured for the VSI.
peer ip-address [ pw-id pw-id ] [ no-split-horizon | pw-class class-name | tunnel-policy tunnel-policy-name ] * undo peer ip-address pw-id pw-id VSI static configuration view: peer ip-address [ pw-id pw-id ] [ in-label label-value out-label label-value [ no-split-horizon | pw-class class-name | tunnel-policy tunnel-policy-name ] * ] undo peer ip-address pw-id pw-id Default No PW is configured for VPLS.
[Sysname] vsi vpn1 [Sysname-vsi-vpn1] pwsignaling ldp [Sysname-vsi-vpn1-ldp] peer 4.4.4.4 pw-id 200 no-split-horizon [Sysname-vsi-vpn1-ldp-4.4.4.4-200] # Configure a static PW for the VSI vpn1 and enter VSI static PW view: specify the peer PE address as 5.5.5.5, set the PW ID to 200, incoming label to 100, and outgoing label to 200, and disable split horizon forwarding for the PW. system-view [Sysname] vsi vpn1 [Sysname-vsi-vpn1] pwsignaling static [Sysname-vsi-vpn1-static] peer 5.5.5.
non-standard: Uses non-standard MP_REACH_NLRI to exchange VPLS PE information. If this keyword is not specified, RFC 6074 MP_REACH_NLRI is used to exchange VPLS PE information. Usage guidelines L2VPN can use MP-BGP to exchange VPLS PE information and find remote PEs in the same VPLS instance. After you execute the peer enable command in BGP L2VPN address family view, BGP can exchange VPLS PW information with the specified peer or peer group through RFC 6074 MP_REACH_NLRI.
Parameters group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The specified peer group must have been created. ip-address: Specifies a peer by its IP address. The specified peer must have been created. Usage guidelines L2VPN uses MP-BGP to exchange label blocks when creating a BGP PW. After you execute the peer enable command, BGP can exchange label blocks with the specified peer or peer group. To disable the capability, execute the undo peer signaling command.
Examples # Disable route target-based filtering of incoming BGP L2VPN information. system-view [Sysname] bgp 100 [Sysname-bgp] address-family l2vpn [Sysname-bgp-l2vpn] undo policy vpn-target pw-class (system view) Use pw-class to create a PW class and enter PW class view. Use undo pw-class to delete a PW class. Syntax pw-class class-name undo pw-class class-name Default No PW class is created.
Syntax pw-class class-name undo pw-class class-name Default No PW class is referenced. Views Auto-discovery VSI view Predefined user roles network-admin mdc-admin Parameters class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters. Usage guidelines The referenced PW class applies to all PWs established on the auto-discovery VSI. Examples # Reference a PW class named pw100 on the auto-discovery VSI.
Predefined user roles network-admin mdc-admin Parameters ethernet: Specifies the PW type as Ethernet. vlan: Specifies the PW type as VLAN. Usage guidelines When the PW type is Ethernet, the PE encapsulates packets forwarded between the AC and PW as follows: • Traffic from the AC to the PW cannot carry the P-Tag assigned by the service provider. If traffic from the AC has the P-Tag, the PE removes the P-Tag, adds the PW label and public tunnel encapsulation, and forwards the traffic through the PW.
undo pwsignaling { ldp | static } Default No PW signaling protocol is specified for a VSI. Views VSI view Predefined user roles network-admin mdc-admin Parameters ldp: Establishes PWs through LDP (FEC 128) and enters VSI LDP signaling view. static: Establishes PWs statically and enters VSI static configuration view. Examples # Configure the VSI vpn1 to use LDP to establish FEC 128 PWs, and enter VSI LDP signaling view.
import: Soft-resets all inbound L2VPN BGP sessions. Usage guidelines A soft-reset operation enables BGP to update BGP L2VPN information without tearing down BGP connections. To apply a new policy to outbound BGP sessions, execute this command with the export keyword. BGP uses the new policy to filter local L2VPN information and sends the L2VPN information that passes the filtering to the BGP peer. To apply a new policy to inbound sessions, execute this command with the import keyword.
reset l2vpn mac-address Use reset l2vpn mac-address to clear MAC address entries for VSIs. Syntax reset l2vpn mac-address [ vsi vsi-name ] Views User view Predefined user roles network-admin mdc-admin Parameters vsi vsi-name: Clears MAC address entries for the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If no VSI is specified, the command clears MAC address entries for all VSIs.
mdc-admin Parameters wtr wtr-time: Specifies the wait time in the range of 0 to 180 seconds. When the primary PW recovers, the PE waits for the specified time before switching traffic from the backup PW to the primary PW. never: Disables backup to primary switchover. Examples # Specify the switchover wait time as 120 seconds for static PWs in the VSI vpn1.
To change the RD, you must use the undo route-distinguisher to remove the old RD and then use the route-distinguisher command to configure the new RD. Examples # Configure the RD 22:1 for the BGP VSI aaa. system-view [Sysname] vsi aaa [Sysname-vsi-aaa] auto-discovery bgp [Sysname-vsi-aaa-auto] route-distinguisher 22:1 rr-filter Use rr-filter to configure the filtering of reflected L2VPN information.
Syntax service-instance instance-id undo service-instance instance-id Default No service instance is created on an interface. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin mdc-admin Parameters instance-id: Specifies the ID of the service instance, in the range of 1 to 4096. Examples # Create service instance 1 on the Layer 2 Ethernet interface Ten-GigabitEthernet 1/0/1 and enter service instance 1 view.
Use the shutdown command when you want to temporally disable VPLS. After a VSI is disabled, all existing configurations of the VSI keep unchanged, and you can further configure the VSI. After the configuration, use the undo shutdown command to enable the VSI, which will provide VPLS services using the new settings. Examples # Disable the VSI vpn1.
Related commands • display l2vpn pw • display l2vpn vsi site Use site to create a local site and enter site view. Use undo site to delete a local site. Syntax site site-id [ range range-value ] [ default-offset default-offset-value ] undo site site-id Default No site is created. Views Auto-discovery VSI BGP signaling view Predefined user roles network-admin mdc-admin Parameters site-id: Specifies a local site ID in the range of 0 to 32.
• display l2vpn vsi tunnel-policy Use tunnel-policy to reference a tunnel policy. Use undo tunnel-policy to cancel referencing the tunnel policy. Syntax tunnel-policy tunnel-policy-name undo tunnel-policy Default No tunnel policy is referenced. Views Auto-discovery VSI view Predefined user roles network-admin mdc-admin Parameters tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 19 characters.
Default No VPLS ID is specified for a VSI. Views Auto-discovery VSI LDP signaling view Predefined user roles network-admin mdc-admin Parameters vpls-id: Specifies a VPLS ID, a string of 3 to 21 characters. You can specify a VPLS ID in one of the following formats: • 16-bit AS number:32-bit user-defined number, such as 101:3. • 32-bit IP address:16-bit user-defined number, such as 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, such as 65536:1.
Syntax vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] undo vpn-target { vpn-target&<1-8> | all } [ both | export-extcommunity | import-extcommunity ] Default No route targets are configured for an auto-discovery VSI. Views Auto-discovery VSI Predefined user roles network-admin mdc-admin Parameters vpn-target&<1-8>: Configures route targets. &<1-8> means that you can configure up to 8 route targets in one command line.
Syntax vsi vsi-name undo vsi vsi-name Default No VSI is created. Views System view Predefined user roles network-admin mdc-admin Parameters vsi-name: Specifies a name for the VSI, a case-sensitive string of 1 to 31 characters. Usage guidelines You can create multiple LDP, BGP, and static PWs for a VSI. Examples # Create a VSI named vpls1 and enter VSI view.
access-mode: Specifies the AC access mode. By default, the access mode is VLAN. ethernet: Specifies the access mode as Ethernet. vlan: Specifies the access mode as VLAN. Usage guidelines After you bind a Layer 3 interface to a VSI, packets received from the interface are forwarded according to the MAC address table of the VSI.
MCE commands address-family ipv4 (VPN instance view) Use address-family ipv4 to enter IPv4 VPN view. Use undo address-family ipv4 to remove all configurations from IPv4 VPN view. Syntax address-family ipv4 undo address-family ipv4 Views VPN instance view Predefined user roles network-admin mdc-admin Usage guidelines In IPv4 VPN view, you can configure IPv4 VPN parameters such as inbound and outbound routing policies. Examples # Enter IPv4 VPN view.
Default command level 2: System level Parameters text: Specifies a description for the VPN instance, a case-sensitive string of 1 to 79 characters. Examples # Configure a description of This is vpn1 for VPN instance vpn1. system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] description This is vpn1 display bgp group ipv4 vpn-instance Use display bgp group ipv4 vpn-instance to display BGP VPNv4 peer group information.
Remote AS number: Not specified Type: external Maximum allowed prefix number: 4294967295 Threshold: 75% Configured hold timer value: 180 seconds Keepalive timer value: 60 seconds Minimum time between advertisements: 30 seconds Peer preferred value: 0 Routing policy configured: No routing policy is configured Members: Peer AS MsgRcvd 10.1.1.1 10 0 MsgSent OutQ PrefRcv Up/Down 0 0 State 0 00:01:02 Connect Table 112 Command output Field Description Peer group type: Type • external—EBGP peer group.
display bgp peer ipv4 vpn-instance Use display bgp peer ipv4 vpn-instance to display information about BGP peers. Syntax display bgp peer ipv4 vpn-instance vpn-instance-name [ group-name log-info | ip-address { log-info | verbose } | verbose ] Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies the name of a VPN instance, a string of 1 to 31 case-sensitive characters. ip-address: Specifies the IP address of a peer.
Field Description State Current state of the BGP session between the local device and the peer. # Display detailed information about BGP peers for VPN instance vpn1. display bgp peer ipv4 vpn-instance vpn1 verbose Peer: 10.1.1.1 Local: 10.1.1.2 Type: EBGP link BGP version 4, remote router ID 0.0.0.
Field Description Peer Preferred Value Preferred value specified for the routes from the peer. # Display log information for BGP peer 10.1.1.1 in VPN instance vpn1. display bgp peer ipv4 vpn-instance vpn1 10.1.1.1 log-info Peer : 10.1.1.1 Date Time State Notification Error/SubError 27-Mar-2011 15:36:12 Down Receive notification with error 6/4 Cease/Administrative Reset 27-Mar-2011 15:34:29 Up Table 115 Command output Field Description Peer IP address of the peer.
Examples # Display brief information about all VPN instances. display ip vpn-instance Total VPN-Instances configured : 1 VPN-Instance Name RD Create time abc 1:1 2011/05/18 10:48:17 Table 116 Command output Field Description VPN-Instance Name Name of the VPN instance. RD RD of the VPN instance. Create Time Time when the VPN instance was created. # Display detailed information about VPN instance vpn1.
undo domain-id [ domain-id ] Default The OSPF domain ID is 0. Views OSPF view Predefined user roles network-admin mdc-admin Parameters domain-id: Specifies an OSPF domain ID, in one of these formats: • Integer, in the range of 0 to 4294967295. For example, 1. • Dotted decimal notation. For example, 0.0.0.1. • Dotted decimal notation:16-bit user-defined number in the range of 0 to 65535. For example, 0.0.0.1:512. secondary: Specifies a secondary domain ID.
Views VPN instance view, IPv4 VPN view, IPv6 VPN view Predefined user roles network-admin mdc-admin Parameters route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters. Usage guidelines You can specify an export routing policy to filter advertised routes or modify their route attributes for the VPN instance. An export routing policy specified in VPN instance view applies to both IPv4 VPN and IPv6 VPN.
Default The type codes for domain ID, router ID, and route type are 0x0005, 0x0107, and 0x0306. Views OSPF view Predefined user roles network-admin mdc-admin Parameters domain-id type-code1: Specifies the type code for domain ID. Valid values are 0x0005, 0x0105, 0x0205, and 0x8005. router-id type-code2: Specifies the type code for router ID. Valid values are 0x0107 and 0x8001. router-type type-code3: Specifies the type code for route type. Valid values are 0x0306 and 0x8000.
Usage guidelines You can specify an import routing policy to filter received routes or modify their route attributes for the VPN instance. An import routing policy specified in VPN instance view applies to both IPv4 VPN and IPv6 VPN. An import routing policy specified in IPv4 VPN view or IPv6 VPN view applies to only the IPv4 VPN or IPv6 VPN. IPv4/IPv6 VPN prefers the import routing policy specified in IPv4/IPv6 VPN view over the one specified in VPN instance view.
Parameters vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. Usage guidelines Use the command on an MCE to associate the VPN instance with the interface connected to the site and the interface connected to the PE. This command or its undo form clears the IP address and routing protocol configuration on the interface.
[Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] Related commands route-distinguisher route-distinguisher (VPN instance view) Use route-distinguisher to configure an RD for a VPN instance. Use undo route-distinguisher to remove the RD of a VPN instance. Syntax route-distinguisher route-distinguisher undo route-distinguisher Default No RD is specified for a VPN instance.
Use undo route-tag to restore the default. Syntax route-tag tag-value undo route-tag Default If the AS number is not greater than 65535, the first two octets of the default external route tag are 0xD000 and the last two octets are the local AS number. For example, if the local BGP AS number is 100, the default value of the external route tag is 3489661028. If the AS number is greater than 65535, the default external route tag is 0.
routing-table limit Use routing-table limit to limit the maximum number of active routes in a VPN instance. Use undo routing-table limit to restore the default. Syntax routing-table limit number { warn-threshold | simply-alert } undo routing-table limit Default The maximum number of active routes in a VPN instance is not limited. Views VPN instance view, IPv4 VPN view, IPv6 VPN view Predefined user roles network-admin mdc-admin Parameters number: Specifies the maximum number of active routes.
[Sysname-vpn-ipv4-vpn2] routing-table limit 1000 simply-alert # Specify that the IPv6 VPN vpn3 supports up to 1000 active routes, and when active routes exceed the upper limit, can receive new active routes but generates a system log message.
Use undo vpn-instance-capability to restore the default. Syntax vpn-instance-capability simple undo vpn-instance-capability Default OSPF routing loop detection is enabled for a VPN instance. Views OSPF view Predefined user roles network-admin mdc-admin Usage guidelines In an MCE network, you must disable OSPF routing loop detection for a VPN instance on the MCE. Otherwise, the MCE does not receive OSPF routes from the PE. This command is applicable only to OSPF view for a VPN instance.
• 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the AS number must not be less than 65536. For example, 65536:1. both: Uses the specified route targets as both import targets and export targets. The both keyword is also used when you do not specify any of the following keywords: both, export-extcommunity, and import-extcommunity.
IPv6 MCE commands For information about the commands available for both MCE and IPv6 MCE, see "MCE commands." address-family ipv6 (VPN instance view) Use address-family ipv6 to enter IPv6 VPN view. Use undo address-family ipv6 to remove all configurations from IPv6 VPN view.
network-operator Parameters group-name: Specifies a BGP IPv6 peer group by its name, a case-sensitive string of 1 to 47 characters. If no group is specified, this command displays brief information about all BGP IPv6 peer groups. vpn-instance vpn-instance-name: Specifies the name of a VPN instance, a case-sensitive string of 1 to 31 characters. Examples # Display brief information about all BGP IPv6 peer groups in the VPN instance vpn1.
Field Description Type of the peer groups: Type • external—EBGP peer group. • internal—IBGP peer group. Maximum allowed prefix number Maximum number of routes allowed to learn from a peer in the group. Threshold Percentage of received routes from a peer to maximum routes allowed to learn from the peer. If the percentage is reached, the system generates alarm messages. Configured hold time value Configured Hold Interval in seconds. Keepalive timer value Keepalive interval in seconds.
Parameters vpn-instance vpn-instance-name: Specifies the name of a VPN instance, a case-sensitive string of 1 to 31 characters. group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. ipv6-address: Specifies a peer by its IPv6 address. log-info: Displays log information. verbose: Displays detailed information. Usage guidelines If no parameter is specified, the command displays brief information about all BGP IPv6 peers in the specified VPN instance.
Sent: Total 0 messages, Update messages 0 Maximum allowed prefix number: 12345 Threshold: 23% Minimum time between advertisements is 30 seconds Optional capabilities: Multi-protocol extended capability has been enabled Route refresh capability has been enabled Peer preferred value: 0 Table 119 Command output Field Description Peer IP address of the peer. Local Local router ID. BGP connection type between the local device and the peer: Type • IBGP link—IBGP connection. • EBGP link—EBGP connection.
Table 120 Command output Field Description Peer IP address of the peer. Date Date on which the notification was sent or received. Time Time at which the notification was sent or received. State BGP session state. Error code of the notification, indicating the cause of why the BGP session is down. Notification Error/SubError • Error—Refers to the error code, which identifies the type of the notification.
Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. [] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x | y | ... } Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-WLAN module, or the switching engine on a unified wired-WLAN switch. Represents an access point.
Index ABCDEGHIKLMNPRSTVWX display bgp group l2vpn,202 A display bgp group vpnv4,127 ac interface,195 display bgp group vpnv6,174 accept-label,24 display bgp l2vpn auto-discovery,250 address-family ipv4 (VPN instance view),125 display bgp l2vpn signaling,253 address-family ipv4 (VPN instance view),304 display bgp l2vpn signaling,203 address-family ipv6 (VPN instance view),173 display bgp peer ipv4 vpn-instance,307 address-family ipv6 (VPN instance view),322 display bgp peer ipv6 vpn-instance,32
display l2vpn bgp,211 domain-id,151 display l2vpn forwarding,267 E display l2vpn forwarding,215 encapsulation,225 display l2vpn ldp,213 encapsulation,280 display l2vpn ldp,264 export route-policy,152 display l2vpn mac-address,270 export route-policy,311 display l2vpn pw,218 ext-community-type,153 display l2vpn pw,271 ext-community-type,312 display l2vpn pw-class,275 display l2vpn pw-class,220 G display l2vpn service-instance,276 graceful-restart,40 display l2vpn service-instance,221 gra
mpls ldp timer,49 R mpls ldp transport-address,51 refresh bgp l2vpn,291 mpls lsr-id,16 refresh bgp l2vpn,234 mpls mtu,17 refresh bgp vpnv4,160 mpls te,61 refresh bgp vpnv6,192 mpls te backup,61 refresh interval,107 mpls te bidirectional,62 reset bgp l2vpn,235 mpls te enable,64 reset bgp l2vpn,292 mpls te loop-detection,65 reset bgp vpnv4,161 mpls te record-route,65 reset bgp vpnv6,193 mpls te resv-style,66 reset l2vpn mac-address,293 mpls te retry,67 reset mpls ldp,53 mpls te signali
sham-link,165 tunnel-policy,124 shutdown,238 V shutdown,296 vpls-id,299 signaling-protocol,297 vpn popgo,170 site,298 vpn-id,170 site,239 vpn-id,319 snmp-agent trap enable l3vpn,168 vpn-instance,56 snmp-agent trap enable ldp,54 vpn-instance-capability simple,319 snmp-agent trap enable mpls,19 vpn-target,241 static-cr-lsp egress,72 vpn-target,300 static-cr-lsp ingress,73 vpn-target (VPN instance view/IPv4 VPN view/IPv6 VPN view),320 static-cr-lsp transit,74 static-lsp egress,20 vpn-tar
