HP MSR2000/3000/4000 Router Series MPLS Command Reference (V7) Part number: 5998-4015 Software version: CMW710-R0007P02 Document version: 6PW100-20130927
Legal and notice information © Copyright 2013 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Contents Basic MPLS commands ················································································································································ 1 display mpls forwarding ilm ···································································································································· 1 display mpls forwarding nhlfe ································································································································ 2 display mpls
MPLS TE commands ··················································································································································· 53 disable ···································································································································································· 53 display explicit-path ·············································································································································· 53
display rsvp ·························································································································································· 104 display rsvp authentication ································································································································· 106 display rsvp lsp ···················································································································································· 110 display
ext-community-type ·············································································································································· 175 import route-policy ··············································································································································· 175 ip binding vpn-instance······································································································································· 176 ip vpn-instance
Websites······························································································································································· 229 Conventions ·································································································································································· 230 Index ··························································································································································
Basic MPLS commands display mpls forwarding ilm Use display mpls forwarding ilm to display Incoming Label Map (ILM) entries. Syntax MSR2000/MSR3000: display mpls forwarding ilm [ label ] MSR4000: display mpls forwarding ilm [ label ] slot slot-number Views Any view Predefined user roles network-admin network-operator Parameters label: Displays the ILM entry with the specified incoming label in the range of 16 to 1048575.
N - Forwarded through the outgoing interface to the nexthop IP address B - Backup forwarding information A - Active forwarding information InLabel Oper VRF Flag SwapLabel Forwarding Info -------------------------------------------------------------------------------30 SWAP 0 T 1300 1024 1279 POP 0 - - - 1407 SWAP 0 NA 1271 Eth1/3 50.2.0.2 NB 1270 Tun0 0.0.0.0 Table 1 Command output Field Description Total ILM entries Total number of ILM entries. InLabel Incoming label.
network-operator Parameters nid: Displays the NHLFE entry with the specified NID. The NID value range is 0 to 4294967294. If you do not specify an NID, the command displays information about all NHLFE entries. slot slot-number: Displays the NHLFE entries on a card. The slot-number argument specifies the number of the slot that holds the card. (MSR4000) Usage guidelines An NHLFE entry records label forwarding information, such as the outgoing label and outgoing interface.
Field Description Tunnel type: • • • • • • Tnl-Type LOCAL—Direct LSP tunnel. LSP—Static LSP tunnel, or LSP tunnel signaled using LDP or BGP. TE—TE tunnel. GRE—GRE tunnel. CRLSP—Static CRLSP tunnel or CRLSP tunnel signaled using RSVP. - (a hyphen)—The tunnel type is invalid. Forwarding flag: • • • • Flag OutLabel T—Forwarded through a tunnel. N—Forwarded through the outgoing interface to the next hop IP address. B—Backup forwarding information. A—Active forwarding information. Outgoing label.
Related commands • mpls enable • mpls mtu display mpls label Use display mpls label to display MPLS label usage information. Syntax display mpls label { label-value1 [ to label-value2 ] | all } Views Any view Predefined user roles network-admin network-operator Parameters label-value1: Specifies a label value in the range of 16 to 1048575. If used with the label-value2 argument, the label-value1 argument represents the start label of a label range.
display mpls lsp Use display mpls lsp to display LSP information.
Usage guidelines If no parameters are specified, the command displays brief information about all LSPs. If you specify only the verbose keyword, the command displays detailed information about all LSPs. Examples # Display brief information about all IPv4 LSPs. display mpls lsp FEC Proto In/Out Label Interface/Out NHLFE 100.100.100.100/24 LDP -/1049 Vlan20 -/1050 Vlan21 -/1051 Vlan22 Backup 100.100.100.10/24 LDP Backup -/1050 Vlan21 100.100.100.10/24 LDP -/1049 Vlan30 101.100.
Field Description Label distribution protocol: • • • • • • Proto In/Out Label LDP. BGP. RSVP. Static. StaticCR—Static CR-LSP. Local—The LSP is a direct LSP. Incoming label/outgoing label. Outgoing interface name or NHLFE entry index. Interface/Out NHLFE NHLFEnumber specifies the outer LSP that carries the current LSP. The outer LSP is that matches the NHLFE entry with an NID of number. # Display IPv6 LSP information.
LSR Type : Egress Service : Statistics In-Label : 1024 State : Active Inbound Statistics: Octets : 13000 Packets : 100 Errors : 0 Discards : 0 Destination : 56.10.10.4 FEC : 56.10.10.2/32 Protocol : LDP LSR Type : Transit Service : Statistics In-Label : 1026 Inbound Statistics: Octets : 0 Packets : 0 Errors : 0 Discards : 0 Path ID : 0x40000000.1 State : Active Out-Label : 1800 Nexthop : 10.1.1.2 Out-Interface: Vlan10 BkLabel : 1900 BkNexthop : 20.1.1.
Table 6 Command output Field Description Destination LSP destination address. FEC • • • • • Forwarding equivalence class: IP address/mask—Classifies FECs by destination address. IP address—Classifies FECs by next hop. IP address/Out Label—Classifies FECs by next hop and outgoing label. Ingress LSR ID/Tunnel ID/LSP ID—RSVP TE FEC. - (a hyphen)—The LSP is a static transit LSP, static egress LSP, static transit CR-LSP, or static egress CR-LSP. Label distribution protocol: Protocol • • • • • • LDP.
network-operator Parameters nib-id: Specifies a next hop ID in the range of 1 to FFFFFFFFFFFFFFFE. If you do not specify a next hop, this command displays information about all MPLS next hops. Examples # Display information about all MPLS next hops. display mpls nib NIB ID: 0x40000000 Users: 1 Status: Active ECMP number: 1 Outgoing NHLFE ID: 1024 Backup outgoing NHLFE ID: 1027 Table 7 Command output Field Description NIB ID ID of the next hop.
Usage guidelines If you do not specify any parameter, the command displays usage information for all NIDs. Examples # Display usage information for NIDs 1028 through 1500. display mpls nid 1028 to 1500 NID alloc state: '.' means not used, '$' means used 1028 :...$.... ........ ........ ........ ........ ........ ........ ........ 1092 :........ ........ ........ ........ ........ ........ ........ ........ 1156 :........ ........ ........ ........ ........ ........ ........ ........
Table 8 Command output Field Description Memory state: Memory State • • • • Normal—The memory is normal. Minor—The memory has a minor alarm. Severe—The memory has a severe alarm. Critical—The memory has a critical alarm. Label type that the egress assigns to the penultimate hop: Egress Label Type • Implicit-null. • Explicit-null. • Non-null. Labels Label information. Range Label range. Idle Number of idle labels in the label range.
[Sysname-Ethernet1/1] mpls enable Related commands display mpls interface mpls label advertise Use mpls label advertise to specify the type of label the egress will advertise to the penultimate hop. Use undo mpls label advertise to restore the default. Syntax mpls label advertise { explicit-null | implicit-null | non-null } undo mpls label advertise Default As an egress, the device advertises an implicit null label to the penultimate hop.
mpls lsr-id Use mpls lsr-id to configure an LSR ID for the local LSR. Use undo mpls lsr-id to delete the LSR ID of the local LSR. Syntax mpls lsr-id lsr-id undo mpls lsr-id Default An LSR has no LSR ID. Views System view Predefined user roles network-admin Parameters lsr-id: Specifies an ID for identifying the LSR, in dotted decimal notation. Usage guidelines HP recommends that you use the address of a loopback interface on the LSR as the LSR ID. Examples # Configure the LSR ID as 3.3.3.
Predefined user roles network-admin Parameters value: Specifies the MPLS MTU of the interface, in the range of 46 to 65535 bytes. Usage guidelines This command is effective only when MPLS is enabled on the interface. If the MPLS MTU is larger than the interface MTU, data forwarding might fail. MPLS TE tunnel interfaces do not support this command. Examples # Set the MPLS MTU of interface Ethernet 1/1 to 1000 bytes.
mpls ttl propagate Use mpls ttl propagate to enable TTL propagation. Use undo mpls ttl propagate to disable TTL propagation. Syntax mpls ttl propagate { public | vpn } undo mpls ttl propagate { public | vpn } Default TTL propagation is enabled for public network packets and disabled for VPN packets. Views System view Predefined user roles network-admin Parameters public: Specifies public network packets. vpn: Specifies VPN packets.
undo snmp-agent trap enable mpls Default SNMP notifications for MPLS are enabled. Views System view Predefined user roles network-admin Usage guidelines This command enables MPLS to generate SNMP notifications. The generated SNMP notifications are sent to the SNMP module. For more information about SNMP notifications, see Network Management and Monitoring Configuration Guide. Examples # Enable SNMP notifications for MPLS.
Static LSP commands display mpls static-lsp Use display mpls static-lsp to display static LSP information. Syntax display mpls static-lsp [ lsp-name lsp-name ] Views Any view Predefined user roles network-admin network-operator Parameters lsp-name lsp-name: Specifies a static LSP by its name, a case-sensitive string of 1 to 15 characters. If you do not specify a static LSP, the command displays information about all static LSPs. Examples # Display information about all static LSPs.
undo static-lsp egress lsp-name Default No static LSP exists on the device. Views System view Predefined user roles network-admin Parameters lsp-name: Specifies a name for the static LSP, a case-sensitive string of 1 to 15 characters. in-label in-label: Specifies an incoming label in the range of 16 to 1023. Examples # Configure a static LSP on the egress node: specify the LSP's name as bj-sh and incoming label as 233.
outgoing-interface interface-type interface-number: Specifies an outgoing interface by its type and number. The specified interface must be a point-to-point interface. out-label out-label: Specifies an outgoing label in the range of 16 to 1023. Usage guidelines The next hop or outgoing interface specified for the LSP must be consistent with the next hop or outgoing interface of the optimal route destined for the specified address.
Examples # Configure a static LSP on the transit node: specify the LSP's name as bj-sh, incoming label as 123, next hop address as 202.34.114.7, and outgoing label as 253. system-view [Sysname] static-lsp transit bj-sh in-label 123 nexthop 202.34.114.
LDP commands accept-label Use accept-label to configure a label acceptance policy. Use undo accept-label to remove the label acceptance policy. Syntax accept-label peer peer-lsr-id prefix-list prefix-list-name undo accept-label peer peer-lsr-id Default No label acceptance policy is configured. LDP accepts all label mappings from all peers. Views LDP view, LDP-VPN instance view Predefined user roles network-admin Parameters peer peer-lsr-id: Specifies an LDP peer by its LSR ID.
Related commands • display mpls ldp peer verbose • ip prefix-list (Layer 3—IP Routing Command Reference) advertise-label Use advertise-label to configure a label advertisement policy. Use undo advertise-label to delete a label advertisement policy. Syntax advertise-label prefix-list prefix-list-name [ peer peer-prefix-list-name ] undo advertise-label prefix-list prefix-list-name Default No label advertisement policy is configured.
Examples # Configure two label advertisement policies. One policy advertises only the label mapping for subnet 10.1.1.0/24 to the peer 3.3.3.9; the other policy advertises only the label mapping for subnet 10.2.1.0/24 to the peer 4.4.4.9. system-view [Sysname] ip prefix-list prefix-to-C permit 10.1.1.0 24 [Sysname] ip prefix-list prefix-to-D permit 10.2.1.0 24 [Sysname] ip prefix-list peer-C permit 3.3.3.9 32 [Sysname] ip prefix-list peer-D permit 4.4.4.
before the next attempt. This process continues until the maximum delay time is reached. After that, the maximum delay time always takes effect. The maximum delay time must be larger than the initial delay time. Examples # Configure LDP backoff for the public network, and set the initial delay time to 100 seconds and the maximum delay time to 300 seconds.
Table 10 Command output Field Description Type of LDP discovery. • L—Basic discovery, which sends Link Hellos to discover peers. • T—Extended discovery, which sends Targeted Hellos to discover peers. The Type device does not support extended discovery in the current software version. Discovery source. • If the LDP discovery type is L, this field displays the interface that discovers Discovery Source the peer. • If the LDP discovery type is T, this field displays the LSR ID of the peer.
Field Description Interface Interface using basic discovery. Hello Interval Hello interval in milliseconds. Hello Sent/Rcvd Number of Hellos sent or received on the interface. Transport Address Local transport address. Peer LDP ID LDP identifier of the LDP peer. Source Address Source IP address of received Hello messages. Transport Address Transport address in the received Hello messages—the transport address of the LDP peer. Hello hold time in seconds. Local—Local hello hold time.
Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The command displays FEC-label mappings for the specified VPN. If you do not specify a VPN instance, the command displays FEC-label mappings for the public network. destination-address mask-length: Specifies an FEC by an IP address and a mask in the range of 0 to 32. summary: Displays summary information about all FEC-label mappings learned by LDP.
Field Description Downstream Info Downstream peer from which the local LSR received the FEC-label mapping, and current state of the LSP. Peer LDP ID of a downstream peer. Out Label Outgoing label assigned by the downstream LSR for the FEC. Current state of the LSP established with the downstream peer: • Established—Active state. • Idle—Inactive state. State If the state is marked as stale, the FEC-label mapping is under a GR process. Next Hops Next hops and outgoing interfaces.
Predefined user roles network-admin network-operator Parameters interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about all LDP interfaces. Examples # Display information about all LDP interfaces.
destination-address mask-length: Specifies an FEC by an IP address and a mask length in the range of 0 to 32. If you do not specify a FEC, the command displays information about LDP LSPs for all FECs. Examples # Display LDP LSP information for the public network. display mpls ldp lsp Status Flags: * - stale, L - liberal Statistics: FECs: 4 Ingress LSPs: 1 Transit LSPs: 1 Egress LSPs: 3 FEC In/Out Label Nexthop OutInterface 1.1.1.1/32 -/3 10.1.1.1 Eth1/2 1151/3 10.1.1.1 Eth1/2 2.2.
Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The command displays the LDP running parameters for the specified VPN. If you do not specify a VPN instance, the command displays the LDP running parameters for the public network. Examples # Display LDP running parameters for the public network.
Field Description Whether loop detection is enabled. Loop Detection • On—Enabled. • Off—Disabled. Hop Count Limit Hop count limit specified for loop detection. Path Vector Limit Path Vector length limit specified for loop detection. Label Retention Mode The device supports only the Liberal mode. IGP Sync Delay Delay time (in seconds) that LDP must wait before it notifies IGP of an LDP session-up event.
Field Description State of the LDP session between the local LSR and the peer: • • • • • State Non Existent—No TCP connection is established. Initialized—A TCP connection has been established. OpenRecv—LDP has received an acceptable initialization message. OpenSent—LDP has sent an initialization message. Operational—An LDP session has been established. Role of the local LSR in the session, Active or Passive. Role In a session, the LSR with a higher IP address takes the Active role.
Table 18 Command output Field Description Peer LDP ID LDP identifier of the peer. Local LDP ID LDP identifier of the local LSR. TCP connection TCP connection information of the session, including the IP addresses and port numbers used by both ends of the TCP connection, and whether MD5 authentication is enabled for the TCP connection. If MD5 authentication is enabled, MD5 On is displayed. If MD5 is not enabled, this field is blank.
Field Description LDP peer discovered by the extended discovery mechanism. • The address before -> (100.100.100.17 in this example) is the local LSR ID. • The address after -> (100.100.100.20 in this example) is the LSR ID of the peer. • (Active) indicates that the local LSR is the active end. It actively sends Targeted Hellos to its peer. Targeted Hello • (Passive) indicates that the local LSR is the passive end. It passively responds to the Targeted Hellos from its peer.
Global Information: Memory State : Minor Discarded Hellos: 60 VPN Instance Name : Public Instance ID : 0 Instance State : Active Interfaces : 1 (1 active) Targeted Peers : 0 Adjacencies : 1 Peers : 1 Operational : 1 (0 GR) OpenSent : 0 OpenRecv : 0 Initialized : 0 Non-Existent: 0 Table 19 Command output Field Description Memory state: Memory State • • • • Normal—The memory is normal. Minor—The memory has a minor alarm. Severe—The memory has a severe alarm.
graceful-restart Use graceful-restart to enable Graceful Restart (GR) for LDP. Use undo graceful-restart to disable LDP GR. Syntax graceful-restart undo graceful-restart Default LDP GR is disabled. Views LDP view Predefined user roles network-admin Usage guidelines GR enables an LSR to retain MPLS forwarding entries during an LDP restart, ensuring continuous MPLS forwarding. The graceful-restart command does not take effect for LDP sessions established before the command is executed.
Predefined user roles network-admin Parameters forwarding-hold hold-time: Specifies the MPLS Forwarding State Holding time in the range of 60 to 600 seconds. This time specifies how long the local LSR retains its MPLS forwarding entries after the control plane of the local LSR restarts. reconnect timeout: Specifies the Reconnect time in the range of 60 to 300 seconds.
label-distribution Use label-distribution to configure the label distribution control mode. Use undo label-distribution to restore the default. Syntax label-distribution { independent | ordered } undo label-distribution Default The label distribution control mode is ordered. Views LDP view, LDP-VPN instance view Predefined user roles network-admin Parameters independent: Specifies Independent label distribution mode. In this mode, an LSR can distribute label mappings to the upstream LSR at any time.
Default Loop detection is disabled. Views LDP view, LDP-VPN instance view Predefined user roles network-admin Usage guidelines This command enables LDP to detect and terminate LSP loops. LDP loop detection uses one of the following methods: • Hop count. For more information, see "maxhops." • Path vector. For more information, see "pv-limit." Use LDP loop detection only in networks with devices that do not support TTL mechanism such as ATM switches.
prefix-list prefix-name: Specifies an IP prefix list by its name, a case-sensitive string of 1 to 63 characters. LDP can only use the routes permitted by the IP prefix list to generate LSPs. Usage guidelines The default LSP generation policy depends on the label distribution control mode. • In Ordered mode, LDP can only use the Loopback interface address routes with a 32-bit mask and the routes with a 32-bit mask that match the FECs of label mappings received from downstream LSRs to generate LSPs.
LDP uses the same LSR ID for all sessions in the same VPN instance. After you configure a new LSR ID for a VPN instance, LDP does not use the new LSR ID unless you use the reset mpls ldp command to reestablish all LDP sessions in the VPN instance. For the public network, HP recommends using the default LDP LSR ID configured by the mpls lsr-id command.
[Sysname-ldp] maxhops 25 Related commands • display mpls ldp parameter • loop-detect • pv-limit md5-authentication Use md5-authentication to enable LDP MD5 authentication. Use undo md5- authentication to restore the default. Syntax md5-authentication peer-lsr-id { cipher | plain } password undo md5-authentication peer-lsr-id Default LDP MD5 authentication is disabled. Views LDP view, LDP-VPN instance view Predefined user roles network-admin Parameters peer-lsr-id: Specifies the LSR ID of a peer.
Related commands display mpls ldp peer mpls ldp Use mpls ldp to enable LDP globally and enter LDP view. Use undo mpls ldp to disable LDP globally for an LSR and delete all LDP-VPN instances. Syntax mpls ldp undo mpls ldp Default LDP is globally disabled. Views System view Predefined user roles network-admin Usage guidelines You must enable LDP globally for an LSR to run LDP. The GR commands are available only in LDP view.
Default LDP is disabled on an interface. Views Interface view Predefined user roles network-admin Usage guidelines Before you enable LDP for an interface, use the mpls ldp command in system view to enable LDP globally. Disabling LDP on an interface terminates all LDP sessions on the interface, and removes all LSPs established through the sessions. If the interface is bound with a VPN instance, you must also use the vpn-instance command to enable LDP for the VPN instance.
Predefined user roles network-admin Parameters hello-hold timeout: Specifies the Hello hold time in the range of 1 to 65535 seconds. LDP keeps the hello adjacency during the Hello hold time. The negotiated Hello hold time takes the smaller value of the local Hello hold time and the peer Hello hold time. If LDP receives no Hello message from the peer before the Hello hold timer expires, LDP deletes the Hello adjacency with the peer.
• display mpls ldp peer mpls ldp transport-address Use mpls ldp transport-address to specify the LDP transport address. Use undo mpls ldp transport-address to restore the default. Syntax mpls ldp transport-address { ip-address | interface } undo mpls ldp transport-address Default If the interface belongs to the public network, the LDP transport address is the local LSR ID. If the interface belongs to a VPN, the LDP transport address is the primary IP address of the interface.
Syntax pv-limit pv-number undo pv-limit Default The path vector limit is 32. Views LDP view, LDP-VPN instance view Predefined user roles network-admin Parameters pv-number: Specifies the path vector limit in the range of 1 to 32. Usage guidelines LDP adds LSR ID information in a label request or label mapping message. Each LSR checks whether its LSR ID is contained in the message. If not, the LSR adds its own LSR ID into the message.
peer peer-id: Specifies a peer by its LSR ID. If you do not specify a peer, the command resets all LDP sessions in the specified VPN instance or the public network. Usage guidelines Resetting an LDP session deletes and re-establishes the session and all LSPs based on the session. To apply new parameters except the MD5 authentication key to an LDP session, you must use this command to reset the LDP session. Examples # Reset all LDP sessions in the public network.
Syntax vpn-instance vpn-instance-name undo vpn-instance vpn-instance-name Default LDP is disabled for a VPN instance. Views LDP view Predefined user roles network-admin Parameters vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. Usage guidelines Enabling LDP for VPNs is used for the Carrier's Carrier network that uses LDP between the Level 1 carrier and Level 2 carrier PEs.
MPLS TE commands disable Use disable to disable the current explicit path. Use undo disable to restore the default. Syntax disable undo disable Default The explicit path is enabled. Views Explicit path view Predefined user roles network-admin Usage guidelines You can use the disable command to prevent an explicit path from being used by a tunnel during explicit path configuration. Examples # Disable the explicit path named path1.
Parameters path-name: Displays information about the explicit path specified by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this argument, the command displays information about all explicit paths. Examples # Display information about all explicit paths. display explicit-path Path Name: path1 Hop Count: 3 Path Status: Enabled Index IP Address Hop Type Hop Attribute 1 1.1.1.1 Strict Include 101 2.2.2.2 Loose Include 201 3.3.3.
Examples # Display DS-TE information. display mpls te ds-te MPLS LSR ID : 0.0.0.0 MPLS DS-TE mode : Prestandard MPLS DS-TE BC model : RDM TE Class Class Type Priority 0 0 0 1 0 1 2 0 2 3 0 3 4 0 4 5 0 5 6 0 6 7 0 7 8 1 0 9 1 1 10 1 2 11 1 3 12 1 4 13 1 5 14 1 6 15 1 7 Table 21 Command output Field Description MPLS LSR ID MPLS LSR ID of the device. MPLS DS-TE mode DS-TE mode: Prestandard or IETF.
network-operator Parameters interface interface-type interface-number: Displays the bandwidth information on the interface specified by its type and number. If you do not specify this option, this command displays the bandwidth information on all interfaces enabled with MPLS TE. Examples # Display the bandwidth information on all interfaces enabled with MPLS TE.
Related commands • mpls te max-link-bandwidth • mpls te max-reservable-bandwidth • mpls te max-reservable-bandwidth mam • mpls te max-reservable-bandwidth rdm display mpls te tunnel-interface Use display mpls te tunnel-interface to display information about MPLS TE tunnel interfaces.
Backup Bandwidth Type: - Backup Bandwidth : - : 10 Retry Interval : 2 sec : - Reoptimization Freq : - Backup Type : - Backup LSP ID : - Auto Bandwidth : - Auto Bandwidth Freq : - Min Bandwidth : - Max Bandwidth : - Collected Bandwidth : - Route Pinning : - Retry Limit Reoptimization Table 23 Command output Field Description Tunnel Name Name of the tunnel interface. Running state of the tunnel: Down or Up.
Field Description Class Type CT of the tunnel: CT 0, CT 1, CT 2, or CT 3. Tunnel Bandwidth Bandwidth required by the tunnel, in kbps. Reserved Bandwidth Bandwidth reserved for the tunnel, in kbps. Setup Priority Tunnel setup priority. Holding Priority Tunnel holding priority. Affinity Attr/Mask Tunnel affinity attribute and mask. Explicit Path Name Name of the explicit path referenced by the tunnel. Backup Explicit Path Name of the explicit path referenced by the backup tunnel.
Syntax ds-te bc-model mam undo ds-te bc-model Default The BC model of IETF DS-TE is Russian Dolls Model (RDM). Views MPLS TE view Predefined user roles network-admin Parameters mam: Specifies the BC model as Maximum Allocation Model (MAM). Usage guidelines RDM does not define the bandwidth for one class type (CT) but limit the shared bandwidth for multiple CTs. In cooperation with priority preemption, the RDM model can also implement the isolation between CTs, ensuring each CT its share of bandwidth.
Default Table 24 Default TE classes in IETF mode TE class CT Priority 0 0 7 1 1 7 2 2 7 3 3 7 4 0 0 5 1 0 6 2 0 7 3 0 Views MPLS TE view Predefined user roles network-admin Parameters te-class-index: Specifies a TE class index in the range of 0 to 7. class-type class-type-number: Specifies a CT by its number in the range of 0 to 3. The system supports four CTs, CT 0 through CT 3. priority priority-number: Specifies a priority number in the range of 0 to 7.
ds-te mode Use ds-te mode to configure the DS-TE mode. Use undo ds-te mode to restore the default. Syntax ds-te mode ietf undo ds-te mode Default The DS-TE mode is prestandard. Views MPLS TE view Predefined user roles network-admin Parameters ietf: Specifies the DS-TE mode as IETF. Usage guidelines The prestandard and IETF modes of DS-TE have the following differences: • The prestandard mode supports two CTs (CT 0 and CT 1), eight priorities, and up to 16 TE classes.
Syntax explicit-path path-name undo explicit-path path-name Default No explicit path exists on the device. Views System view Predefined user roles network-admin Parameters path-name: Specifies a name for the explicit path, a case-sensitive string of 1 to 31 characters. Usage guidelines In explicit path view, you can use the nexthop command to explicitly specify a node or link that a tunnel must or must not traverse. Examples # Create an explicit path named path1 and enter its view.
Parameters interval: Specifies the interval for selecting an optimal bypass tunnel, in the range of 0 to 604800 seconds. If you set the interval to 0 seconds, RSVP does not periodically select an optimal bypass tunnel. Usage guidelines If you have specified multiple bypass tunnels for a primary CRLSP, RSVP selects an optimal bypass tunnel to protect the primary CRLSP.
If you set the interval to 0, the periodical flooding function is disabled. If you set the interval to a value less than 30 seconds (1 to 29 seconds), the device automatically sets the interval to 30 seconds. After you execute this command, the configured interval takes effect immediately. Examples # Configure IGP to flood TE information every 100 seconds.
Syntax mpls te affinity-attribute attribute-value [ mask mask-value ] undo mpls te affinity-attribute Default The affinity is 0x00000000, and the mask is 0x00000000. That is, a tunnel can use any link. Views Tunnel interface view Predefined user roles network-admin Parameters attribute-value: Specifies the affinity value in the range of 0x00000000 to 0xFFFFFFFF. An affinity is a 32-bit binary number. Each bit of the affinity represents an attribute, which takes a value of 0 or 1.
mpls te backup Use mpls te backup to enable CRLSP backup and specify the backup mode for a tunnel. Use undo mpls te backup to restore the default. Syntax mpls te backup { hot-standby | ordinary } undo mpls te backup Default Tunnel backup is disabled. Views Tunnel interface view Predefined user roles network-admin Parameters hot-standby: Enables hot backup for the tunnel. In this mode, a backup CRLSP is established immediately after the primary CRLSP is established.
Default Bypass tunnels do not provide bandwidth protection. Views Tunnel interface view Predefined user roles network-admin Parameters bandwidth: Specifies the total bandwidth that the bypass tunnel can protect, in the range of 1 to 4294967295, in kbps. ct0: Specifies the bypass tunnel to protect only CRLSPs of CT 0. ct1: Specifies the bypass tunnel to protect only CRLSPs of CT 1. ct2: Specifies the bypass tunnel to protect only CRLSPs of CT 2.
Syntax mpls te backup-path preference value explicit-path path-name undo mpls te backup-path preference value Views Tunnel interface view Predefined user roles network-admin Parameters preference value: Set a preference value for the specified path, in the range of 1 to 10. The smaller the value, the higher the preference. explicit-path path-name: Uses the specified explicit path to establish the backup CRLSP.
Views Tunnel interface view Predefined user roles network-admin Parameters ct0: Specifies CT 0 for the tunnel. ct1: Specifies CT 1 for the tunnel. ct2: Specifies CT 2 for the tunnel. ct3: Specifies CT 3 for the tunnel. bandwidth: Specifies the bandwidth required by the MPLS TE tunnel, in the range of 1 to 4294967295, in kbps. Usage guidelines If you do not specify a CT for the tunnel, the tunnel is available for CT 0.
Views Interface view Predefined user roles network-admin Parameters down: Configures the bandwidth decrease percentage threshold that triggers the IGP to flood TE information. When the percentage of the link reservable-bandwidth decrease to the maximum link reservable bandwidth reaches or exceeds the threshold, the IGP floods the TE information and updates the TE database (TEDB). up: Configures the bandwidth increase percentage threshold that triggers the IGP to flood TE information.
Predefined user roles network-admin Parameters associated reverse-lsp lsp-name lsp-name: Configures an associated bidirectional MPLS TE tunnel, and specifies the associated reverse CRLSP. The lsp-name argument specifies the name of a static CRLSP (the reverse CRLSP), a case-sensitive string of 1 to 15 characters. associated reverse-lsp lsr-id ingress-lsr-id tunnel-id tunnel-id: Configures an associated bidirectional MPLS TE tunnel, and specifies the associated reverse CRLSP.
[Sysname] interface tunnel 0 mode mpls-te [Sysname-Tunnel0] destination 10.0.0.1 [Sysname-Tunnel0] mpls te bidirectional co-routed passive reverse-lsp lsr-id 10.0.0.1 tunnel-id 1 Related commands display mpls te tunnel-interface mpls te enable Use mpls te enable to enable MPLS TE for an interface. Use undo mpls te enable to disable MPLS TE on an interface. Syntax mpls te enable undo mpls te enable Default MPLS TE is disabled on an interface.
undo mpls te fast-reroute Default FRR is disabled. Views Tunnel interface view Predefined user roles network-admin Usage guidelines FRR provides a quick link or node protection on a CRLSP. FRR traffic switching can happen in as fast as 50 milliseconds, minimizing data loss. After FRR is enabled for an MPLS TE tunnel, once a link or node fails on the primary CRLSP, FRR reroutes the traffic to a bypass CRLSP and the ingress node attempts to set up a new CRLSP.
Parameters attribute-value: Specifies the link attribute value in the range of 0x00000000 to 0xFFFFFFFF. A link attribute value is a 32-bit binary number. Each bit represents an attribute with a value of 0 or 1. Usage guidelines The TE information of a link advertised by the IGP includes the link attribute configured by this command.
record-route command. When establishing the MPLS TE tunnel, each node of the tunnel detects whether a loop has occurred according to the recorded route information. Examples # Enable loop detection for establishing MPLS TE tunnel 0. system-view [Sysname] interface tunnel 0 mode mpls-te [Sysname-Tunnel0] mpls te loop-detection mpls te max-link-bandwidth Use mpls te max-link-bandwidth to configure the maximum bandwidth for MPLS TE traffic on an interface.
mpls te max-reservable-bandwidth Use mpls te max-reservable-bandwidth to configure the maximum reservable bandwidth of the link (BC 0) and BC 1 in prestandard DS-TE RDM model. Use undo mpls te max-reservable-bandwidth to restore the default. Syntax mpls te max-reservable-bandwidth bandwidth-value [ bc1 bc1-bandwidth ] undo mpls te max-reservable-bandwidth Default The maximum reservable bandwidth of a link is 0 kbps and BC 1 is 0 kbps.
mpls te max-reservable-bandwidth mam Use mpls te max-reservable-bandwidth mam to configure the maximum reservable bandwidth of the link and the BCs in MAM model of the IETF DS-TE. Use undo mpls te max-reservable-bandwidth mam to restore the default.
[Sysname-Ethernet1/1] mpls te max-reservable-bandwidth mam 1158 bc0 500 bc1 300 bc2 400 bc3 100 Related commands • display mpls te link-management bandwidth-allocation • mpls te bandwidth • mpls te max-link-bandwidth • mpls te max-reservable-bandwidth • mpls te max-reservable-bandwidth rdm mpls te max-reservable-bandwidth rdm Use mpls te max-reservable-bandwidth rdm to configure the BCs in IETF DS-TE RDM model. Use undo mpls te max-reservable-bandwidth rdm to restore the default.
Examples # Set BC 0 in IETF RDM model to 500 kbps, BC 1 to 400 kbps, BC 2 to 300 kbps, and BC 3 to 100 kbps.
[Sysname] interface tunnel 0 mode mpls-te [Sysname-Tunnel0] mpls te path preference 1 explicit-path path1 [Sysname-Tunnel0] mpls te path preference 2 dynamic Related commands • display mpls te tunnel-interface • mpls te backup-path mpls te path-metric-type Use mpls te path-metric-type to specify the link metric type for a tunnel. Use undo mpls te path-metric-type to restore the default.
Use undo mpls te priority to restore the default. Syntax mpls te priority setup-priority [ hold-priority ] undo mpls te priority Default The setup priority and the holding priority of an MPLS TE tunnel are both 7. Views Tunnel interface view Predefined user roles network-admin Parameters setup-priority: Specifies the setup priority in the range of 0 to 7. A smaller number indicates a higher priority. hold-priority: Specifies the holding priority in the range of 0 to 7.
Syntax mpls te record-route [ label ] undo mpls te record-route Default A tunnel does not support route recording or label recording. Views Tunnel interface view Predefined user roles network-admin Parameters label: Enables both route recording and label recording. If you do not specify this keyword, this command enables only route recording. Usage guidelines Route recording records the nodes that an MPLS TE tunnel traverses. Label recording records the label assigned by each node.
Parameters frequency seconds: Specifies the tunnel reoptimization frequency in the range of 1 to 604800 seconds. The default is 3600 seconds. Usage guidelines MPLS TE uses the tunnel reoptimization function to implement dynamic CRLSP optimization. For example, when MPLS TE sets up a tunnel, if a link on the optimal path does not have enough reservable bandwidth, MPLS TE sets up the tunnel on another path.
mpls te resv-style Use mpls te resv-style to configure the resource reservation style for the MPLS TE tunnel. Use undo mpls te resv-style to restore the default. Syntax mpls te resv-style { ff | se } undo mpls te resv-style Default The resource reservation style is SE. Views Tunnel interface view Predefined user roles network-admin Parameters ff: Specifies the resource reservation style as fixed filter (FF). se: Specifies the resource reservation style as shared explicit (SE).
Default The maximum number of tunnel setup attempts is 3. Views Tunnel interface view Predefined user roles network-admin Parameters times: Number of tunnel setup attempts, in the range of 1 to 4294967295.
On a network where routes are often changed, to avoid CRLSPs from changing frequently with the routes, you can use this function to make sure the established CRLSPs are not re-established as long as they are available. In the same tunnel interface view, the mpls te route-pinning command cannot be used together with the mpls te reoptimization command and the mpls te auto-bandwidth adjustment command. Examples # Enable route pinning for tunnel 0.
Related commands • display mpls te tunnel-interface • mpls te static-cr-lsp mpls te static-cr-lsp Use mpls te static-cr-lsp to reference a static CRLSP for a tunnel. Use undo mpls te static-cr-lsp to remove the reference of the specified static CRLSP. Syntax mpls te static-cr-lsp lsp-name undo mpls te static-cr-lsp lsp-name Default A tunnel does not reference any static CRLSP.
Syntax mpls te timer retry seconds undo mpls te timer retry Default The retry interval is 2 seconds. Views Tunnel interface view Predefined user roles network-admin Parameters seconds: Specifies the interval at which MPLS TE tries to re-establish the tunnel, in the range of 1 to 604800 seconds.
Parameters index index-number: Specifies an index for the node in the explicit path, in the range of 1 to 65535. If you do not specify an index, MPLS TE automatically calculates an index for the node, the value of which is the current maximum index value plus 100. ip-address: Specifies a node by its IP address in dotted decimal notation. exclude: Excludes the specified node from the explicit path. include: Includes the specified node on the explicit path.
Default The IGP metric is used for path selection when no metric type is configured. Views MPLS TE view Predefined user roles network-admin Parameters igp: Uses the IGP metric. Usage guidelines Each MPLS TE link has a metric. The IGP metric represents a link delay (a smaller IGP metric value indicates a lower link delay). By using the IGP metric for MPLS TE links, you can make sure delay-sensitive traffic such as voice traffic travels through the path that has lower delay.
Usage guidelines The protected interface (where the command is executed) is the outgoing interface of a primary tunnel. When the outgoing interface is down or a neighbor failure is detected through the BFD or hello mechanism, the traffic of the primary tunnel is switched to the bypass tunnel. You can specify up to three bypass tunnels for an interface, and the interface prefers the bypass tunnel that provides node protection. A bypass tunnel can protect up to three interfaces.
Static CRLSP commands display mpls static-cr-lsp Use display mpls static-cr-lsp to display information about static CRLSPs. Syntax display mpls static-cr-lsp [ lsp-name lsp-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator Parameters lsp-name lsp-name: Displays information about the static CRLSP specified by its name, a case-sensitive string of 1 to 15 characters. If you do not specify this option, this command displays information about all static CRLSPs.
Out-Interface : Eth1/1 Nexthop : 20.1.1.2 Class Type : CT0 Bandwidth : 0 kbps LSP State : Up Table 26 Command output Field Description LSP Name Name of the static CRLSP. LSR Type LSR type of the local node on the static CRLSP: Ingress, Transit, or Egress. In-Label Incoming label. Out-Label Outgoing label. Out-Interface Outgoing interface. Nexthop Next hop address. Class Type Class type of the static CRLSP: CT 0, CT 1, CT 2, or CT 3.
in-label in-label-value: Specifies the incoming label in the range of 16 to 1023. Examples # On the egress node, configure a static CRLSP with the name static-te-1 and incoming label 233. system-view [Sysname] static-cr-lsp egress static-te-1 in-label 233 Related commands • display mpls static-cr-lsp • static-cr-lsp ingress • static-cr-lsp transit static-cr-lsp ingress Use static-cr-lsp ingress to configure the ingress node of a static CRLSP.
Usage guidelines The nexthop address specified for the static CRLSP cannot be a public IP address on the local device. CT 2 and CT 3 are valid only in IETF DS-TE mode. In prestandard DS-TE mode, CT 2 and CT 3 are invalid and the tunnel cannot be established. Examples # Configure a static CRLSP on the ingress node, and configure its name as static-te-2, nexthop IP address as 202.55.25.33, outgoing label as 237, CT as CT 0, and required bandwidth as 20 kbps.
ct0: Specifies CT 0 for the static CR-LSP. ct1: Specifies CT 1 for the static CR-LSP. ct2: Specifies CT 2 for the static CR-LSP. ct3: Specifies CT 3 for the static CR-LSP. bandwidth-value: Specifies the bandwidth required by the static CRLSP, in the range of 1 to 4294967295 kbps. The default is 0 kbps. Usage guidelines The nexthop address specified for the static CRLSP cannot be a public IP address on the local device. CT 2 and CT 3 are valid only in IETF DS-TE mode.
RSVP commands authentication challenge Use authentication challenge to enable the RSVP challenge-response handshake function globally or for a specific RSVP neighbor. Use undo authentication challenge to disable the challenge-response handshake function globally or for a specific RSVP neighbor. Syntax authentication challenge undo authentication challenge Default The RSVP challenge-response handshake function is disabled.
system-view [Sysname] rsvp [Sysname-rsvp] peer 1.1.1.9 [Sysname-rsvp-peer-1.1.1.
receiver receives the message, it performs the same calculation and compares the result with the message digest received. If they match, the receiver accepts the message. Otherwise, it drops the message. RSVP authentication can be configured in the following views: • RSVP view—Configuration in this view applies to all RSVP messages. • RSVP neighbor view—Configuration in this view applies only to RSVP messages received from and sent to the specified neighbor.
authentication lifetime Use authentication lifetime in RSVP view to configure the global idle timeout for RSVP security associations or in RSVP neighbor view to configure the idle timeout for RSVP security associations with a specific RSVP neighbor. Use authentication lifetime to restore the default. Syntax authentication lifetime life-time undo authentication lifetime Default The idle timeout for an RSVP security association is 1800 seconds.
system-view [Sysname] rsvp [Sysname-rsvp] peer 1.1.1.9 [Sysname-rsvp-peer-1.1.1.
When the receiver receives an RSVP message, it compares the sequence number of the last accepted RSVP message with the sequence number of the newly received RSVP message. • If the new sequence number is greater than the last sequence number, RSVP accepts the message and updates the last sequence number with the new sequence number. • If the new sequence number equals the last sequence number, RSVP regards the message a replay message and discards the message.
rsvp authentication window-size • display rsvp Use display rsvp to display RSVP information. Syntax display rsvp [ interface [ interface-type interface-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters interface: Displays RSVP information on interfaces. interface-type interface-number: Displays RSVP information on the interface specified by its type and number.
Field Description Refresh interval Interval for refreshing Path and Resv messages, in seconds. Keep multiplier PSB and RSB timeout multiplier. Hello interval Interval for sending hello requests, in seconds. Hello lost Maximum number of consecutive lost or erroneous hellos allowed. Authentication RSVP authentication state. Lifetime Idle timeout for RSVP security associations, in seconds. Window size Maximum number of out-of-sequence authenticated RSVP messages that can be received.
Table 28 Command output Field Description Logical interface handle Logical interface handle, used to distinguish logical outgoing interfaces on the RSVP interface. State Interface state recorded by RSVP: UP or Down. IP address IP address of the current interface used by RSVP. MPLS TE MPLS TE state on the interface. RSVP RSVP state on the interface. Hello State of the hello extension function on the interface. BFD BFD state on the interface.
verbose: Displays detailed information about RSVP security associations. If you do not specify this keyword, this command displays brief information about RSVP security associations. Usage guidelines If you do not specify the from ip-address to ip-address options, the display rsvp authentication command displays information about the security associations established with all RSVP neighbors.
Table 30 Command output Field Description From RSVP authentication source IP address. To RSVP authentication destination IP address. Direction of the security association: • Receive—Receive security association, used to authenticate messages received from an RSVP neighbor. Mode • Send—Send security association, used to authenticate messages sent to an RSVP neighbor. Type of the security association: • Peer—Security association established in RSVP neighbor view.
Field Description Direction of the security association: Mode • Receive—Receive security association, used to authenticate messages received from an RSVP neighbor. • Send—Send security association, used to authenticate messages sent to an RSVP neighbor. Type of the security association: Type • Peer—Security association established in RSVP neighbor view. • Interface—Security association established in interface view. • Global—Security association established in RSVP view.
• rsvp authentication lifetime • rsvp authentication window-size display rsvp lsp Use display rsvp lsp to display information about CRLSPs established by RSVP. Syntax display rsvp lsp [ destination ip-address ] [ source ip-address ] [ tunnel-id tunnel-id ] [ lsp-id lsp-id ] [ verbose ] Views Any view Predefined user roles network-admin network-operator Parameters destination ip-address: Displays information about the CRLSP with the specified tunnel destination address.
Tunnel name: Tunnel1 Destination: 3.3.3.9 Source: 1.1.1.9 Tunnel ID: 1 LSP ID: 5 LSR type: Transit Direction: Unidirectional Setup priority: 7 Holding priority: 7 In-Label: 1146 Out-Label: 3 In-Interface: Eth0/0/2 Out-Interface: GE0/1/4 Nexthop: 57.20.20.1 Exclude-any: 0 Include-Any: 0 Include-all: 0 Average bitrate: 0.00 kbps Maximum burst: 1000.00 bytes Path MTU: 1500 Class type: CT0 RRO number: 8 57.10.10.1/32 Flag: 0x00 (No FRR) 57.10.10.
Field Description Source Tunnel source address. Tunnel direction: Direction • Unidirectional—Unidirectional tunnel. • Bidirectional, Downstream—Forward CRLSP of a bidirectional tunnel. • Bidirectional, Upstream—Backward CRLSP of a bidirectional tunnel. Exclude-any Affinity representing a set of attribute filters. Matching any filter renders a link unacceptable. Include-any Affinity representing a set of attribute filters. Matching any filter renders a link acceptable.
Syntax display rsvp peer [ interface interface-type interface-number ] [ ip ip-address ] [ verbose ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number: Displays information about RSVP neighbors connected to the interface specified by its type and number. ip ip-address: Displays information about the RSVP neighbor specified by its IP address. verbose: Displays detailed information about RSVP neighbors.
Peer GR restart time: 0 ms Peer GR recovery time: 0 ms Peer: 57.20.20.1 Interface: GE0/1/4 Hello state: Init Hello type: Active PSB count: 0 RSB count: 1 Src instance: 0x32e Dst instance: 0x0 Refresh reduction: Disabled Graceful Restart state: Ready Peer GR restart time: 0 ms Peer GR recovery time: 0 ms Table 35 Command output Field Description Peer Address of the RSVP neighbor. Interface Interface connecting the RSVP neighbor.
Views Any view Predefined user roles network-admin network-operator Parameters destination ip-address: Displays information about the RSVP resource reservation requests with the specified tunnel destination address. source ip-address: Displays information about the RSVP resource reservation requests with the specified tunnel source address. The tunnel source address is the extended tunnel ID in the Session object of an RSVP message.
Filter specification 1: Sender address: 1.1.1.9 LSP ID: 23 Label: 1110 Table 37 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Resource reservation style: Style • SE—Shared-explicit style. • FF—Fixed-filter style. Previous hop LIH Logical interface handle of the previous hop. Send message epoch Value of the Epoch field in the Message ID object of the sent message. Send message ID Message ID in the sent message.
source ip-address: Displays information about the RSVP resource reservation states with the specified tunnel source address. The tunnel source address is the extended tunnel ID in the Session object of an RSVP message. tunnel-id tunnel-id: Displays information about the RSVP resource reservation states with the specified tunnel ID. The value range for a tunnel ID is 0 to 65535. nexthop ip-address: Displays information about the RSVP resource reservation states received from the specified downstream device.
Table 39 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Resource reservation style: Style • SE—Shared-explicit style. • FF—Fixed-filter style. Nexthop LIH Logical interface handle of the local outgoing interface for the next hop. Recv message epoch Value of the Epoch field in the Message ID object of the received message. Recv message ID Message ID in the received message. In-Interface Incoming interface of the message.
Views Any view Predefined user roles network-admin network-operator Parameters destination ip-address: Displays information about the RSVP path states with the specified tunnel destination address. source ip-address: Displays information about the RSVP path states with the specified tunnel source address. The tunnel source address is the extended tunnel ID in the Session object of an RSVP message. tunnel-id tunnel-id: Displays information about the RSVP path states with the specified tunnel ID.
Send message epoch: 0 Send message ID: 0 In-Interface: Eth0/0/2 Local LIH: 0x35 Local address: 57.20.20.2 Refresh interval: 30000 ms Out-Interface: GE0/1/4 Nexthop: 57.20.20.1 Unknown object number: 0 Receive ERO number: 2 57.10.10.2/32 Strict 57.20.20.1/32 Loose Send ERO number: 1 57.20.20.1/32 Loose RRO number: 1 57.10.10.1/32 Flag: 0x00 (No FRR) Fast Reroute PLR: Active FRR inner label: 3 Bypass tunnel: Tunnel253 Sender Template: Sender address: 10.11.112.
Sender Template: Sender address: 10.11.112.140 LSP ID: 5 Table 41 Command output Field Description Destination Tunnel destination address. Source LSR ID of the device at the tunnel source end. Resource reservation style: Style • SE—Shared-explicit style. • FF—Fixed-filter style. Sender address Sender address identifies the tunnel source end. FRR desired State of FRR: enabled or disabled. Upstream label Incoming label of the forward LSP.
Field Description Flag value and its meaning in an RRO: Flag • • • • • • • • No FRR—FRR is not configured. FRR Avail—FRR is available. In use—FRR has occurred. BW—Bandwidth protection. Node-Prot—Node protection. Node-ID—The IP address in the RRO is the LSR ID of the node. In-Int—The IP address in the RRO is that of the incoming interface. Global label—Per-platform label space. Point of Local Repair (PLR) information: Fast Reroute PLR • None—Not bound to an FRR bypass tunnel.
Parameters interface: Displays RSVP statistics on interfaces. interface-type interface-number: Displays RSVP statistics on the interface specified by its type and number. Usage guidelines • If you do not specify the interface keyword, this command displays global RSVP statistics. • If you specify the interface keyword without the interface-type interface-number argument, this command displays RSVP statistics on all RSVP-enabled interfaces.
Srefresh 0 0 Hello 0 0 Challenge 0 0 Response 0 0 Error 0 0 Receive Send Path 3 3 Resv 3 3 PathError 0 0 ResvError 0 0 PathTear 0 0 ResvTear 0 0 ResvConf 0 0 Bundle 0 0 Ack 0 0 Srefresh 0 0 Hello 0 0 Challenge 0 0 Response 0 0 Error 0 0 GE0/1/4: Packet Table 42 Command output Field Description PSB Number of added/deleted PSBs. RSB Number of added/deleted RSBs. LSP Number of added/deleted LSPs. Path Number of received/sent Path messages.
Related commands reset rsvp statistics graceful-restart enable Use graceful-restart enable to enable GR for RSVP. Use undo graceful-restart enable to disable RSVP GR. Syntax graceful-restart enable undo graceful-restart enable Default RSVP GR is disabled. Views RSVP view Predefined user roles network-admin Usage guidelines RSVP supports only the GR helper function. The device is not able to perform GR, but it can help neighbor devices to perform GR.
Default Hello request messages are sent at an interval of 5 seconds. Views RSVP view Predefined user roles network-admin Parameters Interval: Specifies the interval at which RSVP sends hello requests, in the range of 1 to 60, in seconds. Usage guidelines If no hello request is received from a neighbor within the hello interval, the device sends a hello request to the neighbor.
Usage guidelines When the number of consecutive lost hellos or erroneous hellos received from a neighbor reaches the maximum value specified by this command, the device regards the neighbor failed. If RSVP GR is enabled, the local device acts as a GR helper to help the neighbor to perform GR. If RSVP GR is disabled but FRR is enabled on the local device, it performs an FRR. If the maximum number is too big, neighbor failures cannot be promptly detected.
Examples # Set the PSB and RSB timeout multiplier to 5. system-view [Sysname] rsvp [Sysname-rsvp] keep-multiplier 5 Related commands refresh interval peer Use peer to create an RSVP authentication neighbor and enter RSVP neighbor view. Use undo peer to delete the specified RSVP authentication neighbor. Syntax peer ip-address undo peer ip-address Default The device does not have any RSVP authentication neighbors.
If an FRR occurs, the downstream authentication neighbor of the PLR node is the destination IP address of the bypass tunnel. The upstream authentication neighbor of the MP node is the IP address of the physical outgoing interface of the bypass tunnel on the PLR. Examples # Create RSVP authentication neighbor 1.1.1.1, enter RSVP neighbor view, and configure a plaintext authentication key abcdfegh for the neighbor. system-view [Sysname] rsvp [Sysname-rsvp] peer 1.1.1.1 [Sysname-rsvp-peer-1.1.1.
[Sysname-rsvp] refresh interval 60 Related commands keep-multiplier reset rsvp authentication Use reset rsvp authentication to clear RSVP security associations. Syntax reset rsvp authentication [ from ip-address to ip-address ] Views User view Predefined user roles network-admin Parameters from ip-address: Clears the RSVP security associations with the specified authentication source IP address.
Parameters interface: Clears RSVP statistics on interfaces. interface-type interface-number: Clears RSVP statistics on the interface specified by its type and number. Usage guidelines When you execute this command: • If you do not specify the interface keyword, this command clears global RSVP statistics. • If you specify the interface keyword without the interface-type interface-number argument, this command clears RSVP statistics on all RSVP-enabled interfaces.
Related commands • mpls te • rsvp enable rsvp authentication challenge Use rsvp authentication challenge to enable RSVP challenge-response handshake on an interface. Use undo rsvp authentication challenge to disable RSVP challenge-response handshake on an interface. Syntax rsvp authentication challenge undo rsvp authentication challenge Default RSVP challenge-response handshake is disabled on an interface.
• authentication lifetime • authentication window-size • display rsvp authentication • reset rsvp authentication • rsvp authentication key • rsvp authentication lifetime • rsvp authentication window-size rsvp authentication key Use rsvp authentication key to enable RSVP authentication on an interface, and configure the authentication key. Use undo rsvp authentication key to disable RSVP authentication on an interface.
• Interface view—Configuration in this view applies only to RSVP messages received and sent by the current interface. Configurations in RSVP neighbor view, interface view, and RSVP view are in descending order of priority. For example, if you have enabled RSVP authentication for a neighbor in both RSVP neighbor view and RSVP view but configured different authentication keys, the authentication key configured in RSVP neighbor view is used to authenticate the RSVP messages received from the neighbor.
Views Interface view Predefined user roles network-admin Parameters life-time: Specifies the RSVP security association idle timeout in the range of 30 to 86400 seconds. Usage guidelines When RSVP authentication is enabled, the device dynamically establishes security associations when receiving and sending RSVP messages to record the message sequence numbers, which are used in RSVP authentication. To release memory resources, each security association has an idle timeout.
rsvp authentication window-size Use rsvp authentication window-size to configure the RSVP authentication window size, which is the maximum number of authenticated RSVP messages that can be received out of sequence on an interface. Use undo rsvp authentication window-size to restore the default. Syntax rsvp authentication window-size number undo rsvp authentication window-size Default Only one authenticated RSVP message can be received out of sequence on an interface.
A security association established by using the authentication key configured in a view uses the window size configured in that view. A modification to the window size affects only security associations established after the modification. To apply the new setting to existing security associations, you must execute the reset rsvp authentication command to delete and then reestablish the security associations.
Examples # Enable BFD to detect the link status to the RSVP neighbor on interface Ethernet 1/1. system-view [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] rsvp bfd enable rsvp enable Use rsvp enable to enable RSVP for an interface. Use undo rsvp enable to disable RSVP for an interface. Syntax rsvp enable undo rsvp enable Default RSVP is disabled on an interface.
Default RSVP hello extension is disabled. Views Interface view Predefined user roles network-admin Usage guidelines With RSVP hello extension enabled, an interface sends and receives hello messages to detect the neighbor status. Examples # Enable RSVP hello extension on interface Ethernet 1/1.
Examples # On interface Ethernet 1/1, set the RSVP message retransmission increment value to 2. system-view [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] rsvp reduction retransmit increment 2 Related commands • rsvp reduction retransmit interval • rsvp reduction srefresh rsvp reduction retransmit interval Use rsvp reduction retransmit interval to configure the RSVP message retransmission interval. Use undo rsvp reduction retransmit interval to restore the default.
rsvp reduction srefresh Use rsvp reduction srefresh to enable summary refresh and reliable RSVP message delivery. Use undo rsvp reduction srefresh to disable summary refresh and reliable RSVP message delivery. Syntax rsvp reduction srefresh [ reliability ] undo rsvp reduction srefresh Default Summary refresh and reliable RSVP message delivery are disabled. Views Interface view Predefined user roles network-admin Parameters reliability: Enables reliable RSVP message delivery.
After the summary refresh is enabled, RSVP maintains the path and reservation states by sending Srefresh messages rather than standard refresh messages. The Srefresh message sending interval is configured by the refresh interval command. Examples # On interface Ethernet 1/1, enable summary refresh and reliable RSVP message delivery.
Tunnel policy commands display mpls tunnel Use display mpls tunnel to display tunnel information. Syntax display mpls tunnel { all | statistics | [ vpn-instance vpn-instance-name ] destination { tunnel-ipv4-dest | tunnel-ipv6-dest } } Views Any view Predefined user roles network-admin network-operator Parameters all: Displays all tunnels. statistics: Displays tunnel statistics. vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Table 43 Command output Field Description Destination Tunnel destination address. Type Tunnel type: LSP, GRE, or CRLSP (MPLS TE tunnel). Tunnel or NHLFE entry. Tunnel/NHLFE VPN Instance NHLFEnumber represents the ingress LSP that matches the NHLFE entry with NID of number. VPN instance name. If this field is blank, the tunnel belongs to the public network. # Display tunnel statistics.
Usage guidelines This command specifies an MPLS TE or GRE tunnel interface. The destination address of the tunnel interface identifies a peer PE so the local PE will forward traffic destined for that peer PE over the specified tunnel. HP recommends using this method. For a tunnel policy to solely use a tunnel, do not specify the tunnel as the preferred tunnel in other tunnel policies.
gives LSP higher priority over GRE. If no LSP is available or the number of LSPs is less than 3, VPN uses GRE tunnels. Tunnels selected by this method are not fixed, making it hard to plan VPN traffic. HP recommends not using this method. If you configure both the select-seq load-balance-number command and the preferred-path command for a tunnel policy, the tunnel policy selects tunnels in the following steps: 1.
MPLS L3VPN commands address-family ipv4 (VPN instance view) Use address-family ipv4 in VPN instance view to enter IPv4 VPN view. Use undo address-family ipv4 to remove all configurations from IPv4 VPN view. Syntax address-family ipv4 undo address-family ipv4 Views VPN instance view Predefined user roles network-admin Usage guidelines In IPv4 VPN view, you can configure IPv4 VPN parameters such as inbound and outbound routing policies. Examples # Enter IPv4 VPN view.
Predefined user roles network-admin Usage guidelines A VPNv4 address comprises an RD and an IPv4 prefix. VPNv4 routes comprise VPNv4 addresses. For a PE to exchange BGP VPNv4 routes with a BGP peer, you must enable that peer by executing the peer enable command in BGP VPNv4 address family view or BGP-VPN VPNv4 address family view.
Examples # Configure a description of "This is vpn1" for VPN instance vpn1. system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] description This is vpn1 display bgp group vpnv4 Use display bgp group vpnv4 to display information about a specific BGP VPNv4 peer group or all BGP VPNv4 peer groups.
No routing policy is configured Members: Peer 2.2.2.2 AS MsgRcvd 600 0 MsgSent OutQ PrefRcv Up/Down 0 0 State 0 00:00:05 Idle Table 45 Command output Field Description BGP peer-group Name of the BGP peer group. Remote AS AS number of the peer group. Type of the BGP peer group: • External—EBGP peer group. • Internal—IBGP peer group. Type Maximum number of prefixes allowed Maximum number of routes that can be learned from the peer group. Threshold Warning threshold.
Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. If no VPN instance is specified, this command displays BGP VPNv4 peer information for the public network. group-name: Displays peers in the specified peer group. The group name is a case-sensitive string of 1 to 47 characters. ip-address: Specifies a BGP VPNv4 peer. log-info: Displays log information.
Field Description Up/Down Duration of the BGP session in the current state. State State of the peer. # Display detailed information about BGP VPNv4 peer 10.1.1.1. display bgp peer vpnv4 10.1.1.1 verbose Peer: 10.1.1.1 Local: 192.168.1.136 Type: EBGP link BGP version 4, remote router ID 192.168.1.
Field Description remote router ID Router ID of the peer. BGP current state Current state of the BGP session. Up for Duration since the peer was established. BGP current event Current event of the BGP session. BGP last state State that the BGP session was in before transitioning to the current state. Port Local and remote ports of the BGP session. Configured Settings of the local timers, including the active hold interval and keepalive interval. Received Received active hold interval.
21-Nov-2011 12:07:09 Up display bgp routing-table ipv4 unicast inlabel Use display bgp routing-table ipv4 unicast inlabel to display incoming labels for BGP IPv4 unicast routes. Syntax display bgp routing-table ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] inlabel Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters.
display bgp routing-table ipv4 unicast outlabel Use display bgp routing-table ipv4 unicast outlabel to display outgoing labels for BGP IPv4 unicast routes. Syntax display bgp routing-table ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] outlabel Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters.
display bgp routing-table vpnv4 Use display bgp routing-table vpnv4 to display BGP VPNv4 routing information. Syntax display bgp routing-table vpnv4 [ route-distinguisher route-distinguisher ] [ network-address [ { mask | mask-length } [ longest-match ] ] ] Views Any view Predefined user roles network-admin network-operator Parameters route-distinguisher route-distinguisher: Specifies an RD, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number.
Total number of routes: 6 * > * Network NextHop MED 10.1.1.0/24 10.1.1.2 0 32768 ? 10.1.1.1 0 0 65410? 32768 ? 0 ? e * > 10.1.1.2/32 LocPrf PrefVal Path/Ogn 127.0.0.1 0 * >i 10.3.1.0/24 3.3.3.9 0 * >e 192.168.1.0 10.1.1.1 0 0 65410? * 3.3.3.9 0 100 0 65420? i 100 Route distinguisher: 200:1 Total number of routes: 2 Network NextHop MED LocPrf PrefVal Path/Ogn * >i 10.3.1.0/24 3.3.3.9 0 100 0 ? * >i 192.168.1.0 3.3.3.
Field Description Route status codes: • • • • • • • • Status codes * - valid—Valid route. > - best—Common best route. d – damped—Route damped for route flap. h - history—History route. i - internal—Internal route. e - external—External route. s - suppressed—Suppressed route. S - Stale—Stale route. Route origin: • i—IGP, originated in the AS. The origin of summary routes and routes advertised by the network command is IGP. Origin • e—EGP, learned through EGP. • ?—Incomplete.
State : valid, internal, best, Route distinguisher: 200:1 Total number of routes: 1 Paths: 1 available, 1 best BGP routing table information of 10.3.1.0/24: From : 3.3.3.9 (3.3.3.9) Relay nexthop : 172.1.1.2 Original nexthop: 3.3.3.9 OutLabel : 1279 Ext-Community : AS-path : (null) Origin : incomplete Attribute value : MED 0, localpref 100, pref-val 0 State : valid, internal, best, # Display detailed information about the BGP VPNv4 route destined for 10.3.1.
Field Description BGP route attribute information: • • • • Attribute value MED—MED attribute. Localpref—Local preference. pref-val—Preferred value. pre—Protocol preference. Route status: • • • • • • State valid—Valid route. internal—Internal route. external—External route. local—Locally generated route. synchronize—Synchronized route. best—Best route.
If the mask or mask-length argument is specified, the command displays advertisement information for the BGP VPNv4 route that exactly matches the specified address and mask. • Examples # Display advertisement information for the BGP VPNv4 route destined to network 10.2.1.0/24. display bgp routing-table vpnv4 10.1.1.0 24 advertise-info BGP local router ID: 1.1.1.9 Local AS number: 100 Route distinguisher: 100:1 Total number of routes: 1 Paths: 1 best BGP routing table information of 10.1.1.
BGP local router ID is 1.1.1.9 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Total number of routes from all PEs: 2 Route distinguisher: 100:1(vpn1) Total number of routes: 6 * > * Network NextHop MED 10.1.1.0/24 10.1.1.2 0 32768 ? 10.1.1.1 0 0 65410? 32768 ? 0 ? e * > 10.1.1.2/32 LocPrf PrefVal Path/Ogn 127.0.0.1 0 * >i 10.3.1.0/24 3.3.3.9 0 * >e 192.168.1.0 10.1.1.
Parameters route-distinguisher route-distinguisher: Specifies an RD, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1. basic-community-list-number: Specifies a basic community list by its number in the range of 1 to 99.
display bgp routing-table vpnv4 inlabel Use display bgp routing-table vpnv4 inlabel to display incoming labels for BGP VPNv4 routes. Syntax display bgp routing-table vpnv4 inlabel Views Any view Predefined user roles network-admin network-operator Examples # Display incoming labels for all BGP VPNv4 routes. display bgp routing-table vpnv4 inlabel Total number of routes: 2 BGP local router ID is 1.1.1.
Views Any view Predefined user roles network-admin network-operator Examples # Display outgoing labels for all BGP VPNv4 routes. display bgp routing-table vpnv4 outlabel BGP local router ID is 1.1.1.9 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Total number of routes from all PEs: 2 Route distinguisher: 100:1(vpn1) Total number of routes: 2 Network NextHop OutLabel * >i 10.3.1.
Syntax display bgp routing-table vpnv4 [ vpn-instance vpn-instance-name ] peer ip-address { advertised-routes | received-routes } [ network-address [ mask | mask-length ] | statistics ] Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
* > 10.1.1.0/24 10.1.1.2 0 ? * >e 192.168.1.0 10.1.1.1 0 65410? # Display all BGP VPNv4 routing information received from BGP peer 3.3.3.9 on the public network. display bgp routing-table vpnv4 peer 3.3.3.9 received-routes Total number of routes: 2 BGP local router ID is 1.1.1.
Predefined user roles network-admin network-operator Examples # Display BGP VPNv4 route statistics for the public network. display bgp routing-table vpnv4 statistics Total number of routes from all PEs: 2 Route distinguisher: 100:1(vpn1) Total number of routes: 6 Route distinguisher: 200:1 Total number of routes: 2 display bgp update-group vpnv4 Use display bgp update-group vpnv4 to display information about BGP update groups for the BGP VPNv4 address family.
Members: 1 99.1.1.1 # Display BGP VPNv4 update group information for the peer 1.1.1.2 in the VPN instance vpn1. display bgp update-group vpnv4 vpn-instance vpn1 1.1.1.2 Update-group ID: 0 Type: EBGP link 4-byte AS number: Supported Nesting-vpn: vpn1 Minimum time between advertisements: 30 seconds OutQ: 0 Members: 2 1.1.1.2 1.1.1.3 # Display all BGP VPNv4 update group information in the VPN instance vpn1.
Field Description Nesting-vpn The peers in the update group are enabled with nested VPN. Fake AS: number A fake local AS number is configured for the peers in the update group. Public-AS-Only: Yes BGP route updates advertised to the peers in the update group only include the public AS number without the private AS number. Substitute-AS: Yes AS number substitution is enabled. Minimum time between advertisements: number seconds Minimum time between advertisements.
network-operator Parameters process-id: Displays sham link information for the OSPF process specified by its ID in the range of 1 to 65535. If no process is specified, the command displays sham link information for all OSPF processes. area area-id: Displays sham link information for the OSPF area specified by its ID, which is an IP address, or an integer in the range of 0 to 4294967295. If no area is specified, the command displays sham link information for all OSPF areas.
Syntax display ip vpn-instance [ instance-name vpn-instance-name ] Views Any view Predefined user roles network-admin network-operator Parameters instance-name vpn-instance-name: Displays information about the specified VPN instance. The vpn-instance-name is a case-sensitive string of 1 to 31 characters. If no VPN instance is specified, the command displays brief information about all VPN instances. Examples # Display brief information about all VPN instances.
3:3 Export Route Policy : outpolicy Import Route Policy : inpolicy Tunnel Policy : tunnel1 Maximum Routes Limit : 5000 domain-id Use domain-id to configure an OSPF domain ID. Use undo domain-id to restore the default. Syntax domain-id domain-id [ secondary ] undo domain-id [ domain-id ] Default The OSPF domain ID is 0. Views OSPF view Predefined user roles network-admin Parameters domain-id: Specifies the OSPF domain ID, in one of these formats: • Integer, in the range of 0 to 4294967295.
export route-policy Use export route-policy to apply an export routing policy for a VPN instance. Use undo export route-policy to remove the application. Syntax export route-policy route-policy undo export route-policy Default No export routing policy is applied for a VPN instance. Views VPN instance view, IPv4 VPN view, IPv6 VPN view Predefined user roles network-admin Parameters route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
• route-policy (Layer 3—IP Routing Configuration Guide) ext-community-type Use ext-community-type to configure the type code of an OSPF extended community attribute. Use undo ext-community-type to restore the default. Syntax ext-community-type { domain-id type-code1 | router-id type-code2 | route-type type-code3 } undo ext-community-type { domain-id | router-id | route-type } Default The type codes for domain ID, router ID, and route type are 0x0005, 0x0107, and 0x0306.
Predefined user roles network-admin Parameters route-policy: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters. Usage guidelines You can specify an import routing policy to filter received routes or modify their route attributes for the VPN instance. An import routing policy specified in VPN instance view applies to both IPv4 VPN and IPv6 VPN. An import routing policy specified in IPv4 VPN view or IPv6 VPN view applies to only the IPv4 VPN or IPv6 VPN.
Views Interface view Predefined user roles network-admin Parameters vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. Usage guidelines Use the command to associate the VPN instance with the interface connected to the CE. This command or its undo form clears the IP address and routing protocol configuration on the interface.
Examples # Create a VPN instance named vpn1. system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] Related commands route-distinguisher nesting-vpn Use nesting-vpn to enable the nested VPN function. Use undo nesting-vpn to disable the nested VPN function. Syntax nesting-vpn undo nesting-vpn Default The nested VPN function is disabled.
Default The device uses its address as the next hop of routes advertised to an EBGP peer or peer group. Views BGP VPNv4 address family view Predefined user roles network-admin Parameters group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. ip-address: Specifies a peer by its IP address.
Parameters group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The specified peer group must have been created. ip-address: Specifies a peer by its IP address. The specified peer must have been created. Usage guidelines A UPE is a special VPNv4 peer. It can accept one default route for each related VPN instance and routes permitted by the routing policy on the SPE. An SPE is a common VPN peer. Examples # Configure peer 1.1.1.1 as a UPE.
[Sysname-bgp] peer 1.1.1.1 as-number 200 [Sysname-bgp] address-family vpnv4 [Sysname-bgp-vpnv4] peer 1.1.1.1 enable [Sysname-bgp-vpnv4] peer 1.1.1.1 upe [Sysname-bgp-vpnv4] peer 1.1.1.1 upe route-policy hope export Related commands • peer upe • route-policy (Layer 3—IP Routing Configuration Guide) policy vpn-target Use policy vpn-target to enable route target filtering of received VPNv4 routes.
Views User view Predefined user roles network-admin Parameters ip-address: Soft resets the BGP session with the BGP peer identified by this IP address. all: Soft resets all BGP sessions for VPNv4 address family. external: Soft resets all EBGP sessions for VPNv4 address family. group group-name: Soft resets BGP sessions with the BGP peer group identified by this name, a case-sensitive string of 1 to 47 characters. internal: Soft resets all IBGP sessions for VPNv4 address family.
Views User view Predefined user roles network-admin Parameters as-number: Resets BGP sessions in the AS specified by its number in the range of 1 to 4294967295. ip-address: Resets the BGP session with the BGP peer identified by this IP address. all: Resets all BGP sessions for VPNv4 address family. external: Resets all EBGP sessions for VPNv4 address family. group group-name: Resets BGP sessions with the BGP peer group identified by this name, a case-sensitive string of 1 to 47 characters.
• 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1. Usage guidelines RDs enable VPNs to use the same address space. An RD and an IPv4 prefix comprise a unique VPN IPv4 prefix. To change the RD of a VPN instance, you must delete the RD with the undo route-distinguisher command, and then use the route-distinguisher command to configure a new RD. Examples # Configure RD 22:1 for VPN instance vpn1.
If the external route tag in a Type 5 or 7 LSA received by a PE is the same as the locally configured external route tag, the PE ignores the LSA in route calculation to avoid routing loops. HP recommends configuring the same external route tag for PEs in the same area. An external route tag is not transferred in any BGP extended community attribute. It is only locally significant and takes effect only on the PEs that receive BGP routes and generate OSPF Type 5 or 7 LSAs.
simply-alert: Specifies that when routes exceed the maximum number, the system still accepts routes but generates a system log message. Usage guidelines A limit configured in VPN instance view applies to both the IPv4 VPN and the IPv6 VPN. A limit configured in IPv4 VPN view or IPv6 VPN view applies to only the IPv4 VPN or the IPv6 VPN. IPv4/IPv6 VPN prefers the limit configured in IPv4/IPv6 VPN view over the limit configured in VPN instance view.
Predefined user roles network-admin Parameters source-ip-address: Specifies the source IP address of the sham link. destination-ip-address: Specifies the destination IP address of the sham link. cost cost: Specifies the cost of the sham link, in the range of 1 to 65535. The default cost is 1. dead dead-interval: Specifies the dead interval in the range of 1 to 32768 seconds. The default is 40 seconds.
3. Execute the undo sham-link command on the local device and the neighbor to remove the old key. This operation can avoid attacks to the sham link that uses the old key and reduce bandwidth consumption by key rollover. Examples # Create a sham link with the source address 1.1.1.1 and destination address 2.2.2.2. system-view [Sysname] ospf [Sysname-ospf-1] area 0 [Sysname-ospf-1-area-0.0.0.0] sham-link 1.1.1.1 2.2.2.
snmp-agent trap enable l3vpn Use snmp-agent trap enable l3vpn to enable SNMP notifications for MPLS L3VPN. Use undo snmp-agent trap enable l3vpn to disable SNMP notifications for MPLS L3VPN. Syntax snmp-agent trap enable l3vpn undo snmp-agent trap enable l3vpn Default SNMP notifications for MPLS L3VPN are enabled.
Parameters tunnel-policy-name: Specifies a tunnel policy by its name, a case-insensitive string of 1 to 19 characters. Usage guidelines The VPN instance uses the specified tunnel policy to select tunnels for traffic. If a VPN instance is not associated with any tunnel policy or the associated tunnel policy is not configured, the VPN instance selects tunnels according to the default tunnel policy. The default tunnel policy selects only one tunnel in this order: LSP tunnel, GRE tunnel, CRLSP tunnel.
Syntax vpn popgo undo vpn popgo Default The VPN label processing mode is POP forwarding on an egress PE, which will pop the label for each packet and forward the packet through the FIB table. Views BGP view Predefined user roles network-admin Usage guidelines After you execute the vpn popgo command, the egress PE disconnects and reestablishes BGP sessions to re-learn VPN routes. After the vpn popgo command is executed, the egress PE does not support load sharing among VPN BGP peers.
Parameters vpn-id: Specifies a VPN ID for the VPN instance, in the form of OUI:Index. Both OUI and Index are hex numbers. The OUI is in the range of 0 to FFFFFF, and the index is in the range of 0 to FFFFFFFF. Usage guidelines The VPN ID uniquely identifies the VPN instance. Different VPN instances must have different VPN IDs. The VPN ID cannot be 0:0. Examples # Configure VPN ID 20:1 for the VPN instance vpn1.
Use undo vpn-target to remove the specified or all route targets of a VPN instance. Syntax vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] undo vpn-target { all | vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] } Default No route targets are configured for a VPN instance. Views VPN instance view, IPv4 VPN view, IPv6 VPN view Predefined user roles network-admin Parameters vpn-target&<1-8>: Specifies route targets.
[Sysname-vpn-instance-vpn1] vpn-target 4:4 import-extcommunity [Sysname-vpn-instance-vpn1] vpn-target 5:5 both # Configure route targets for the IPv4 VPN vpn2. system-view [Sysname] ip vpn-instance vpn2 [Sysname-vpn-instance-vpn2] address-family ipv4 [Sysname-vpn-ipv4-vpn2] vpn-target 3:3 export-extcommunity [Sysname-vpn-ipv4-vpn2] vpn-target 4:4 import-extcommunity [Sysname-vpn-ipv4-vpn2] vpn-target 5:5 both # Configure route targets for the IPv6 VPN vpn3.
IPv6 MPLS L3VPN commands This chapter describes only IPv6 MPLS L3VPN-specific commands. For information about the commands available for both IPv4 MPLS L3VPN and IPv6 MPLS L3VPN, see "MPLS L3VPN commands." address-family ipv6 (VPN instance view) Use address-family ipv6 to enter IPv6 VPN view. Use undo address-family ipv6 to remove all configurations from IPv6 VPN view.
Predefined user roles network-admin Usage guidelines A VPNv6 address comprises an RD and an IPv6 prefix. In IPv6 MPLS L3VPNs, PEs exchange BGP VPNv6 routes. For a PE to exchange BGP VPNv6 routes with a BGP peer, you must enable that peer by executing the peer enable command in BGP VPNv6 address family view.
Remote AS: 600 Type: external Maximum number of prefixes allowed: 4294967295 Threshold: 75% Configured hold time: 180 seconds Keepalive time: 60 seconds Minimum time between advertisements: 30 seconds Peer preferred value: 0 Routing policy configured: No routing policy is configured Members: Peer 2.2.2.2 AS MsgRcvd 600 0 MsgSent OutQ PrefRcv Up/Down 0 0 State 0 00:00:22 Idle Table 57 Command output Field Description BGP peer-group Name of the BGP peer group.
display bgp peer vpnv6 Use display bgp peer vpnv6 to display information about BGP VPNv6 peers. Syntax display bgp peer vpnv6 [ group-name log-info | ip-address { log-info | verbose } | verbose ] Views Any view Predefined user roles network-admin network-operator Parameters group-name: Displays peers in the peer group specified by its name, a case-sensitive string of 1 to 47 characters. ip-address: Specifies a BGP VPNv6 peer. If no peer is specified, the command displays all BGP VPNv6 peers.
Field Description AS AS number of the peer. MsgRcvd Number of messages received. MsgSent Number of messages sent. OutQ Number of messages waiting to be sent to the peer. PrefRcv Number of received prefixes. Up/Down Duration of the BGP session in the current state. State State of the peer. # Display detailed information about BGP VPNv6 peer 10.1.1.2. display bgp peer vpnv6 10.1.1.2 verbose Peer: 10.1.1.2 Local: 192.168.1.135 Type: EBGP link BGP version 4, remote router ID 192.
Table 59 Command output Field Description Peer IP address of the peer. Local IP address of the local router. Type BGP link type: IBGP link or EBGP link. BGP version BGP version of the peer. remote router ID Router ID of the peer. BGP current state Current state of the BGP session. Up for Duration since the peer was established. BGP current event Current event of the BGP session. BGP last state State that the BGP session was in before transitioning to the current state.
Field Description Whether the local device supports sending and receiving Route-refresh packets with ORF information: • both—Supports sending and receiving Route-refresh messages with ORF information. Local • send—Supports sending Route-refresh messages with ORF information. • receive—Supports receiving Route-refresh messages with ORF information.
Syntax display bgp routing-table vpnv6 [ route-distinguisher route-distinguisher ] [ network-address prefix-length ] Views Any view Predefined user roles network-admin network-operator Parameters route-distinguisher route-distinguisher: Specifies an RD, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.
* > Network : 2001:1::2 PrefixLen : 128 NextHop : ::1 LocPrf : PrefVal : 32768 OutLabel : NULL MED : 0 Path/Ogn: ? * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 MED : 0 Path/Ogn: ? Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.
Field Description PrefVal Preferred value. MED MED value. Path/Ogn AS_PATH and Origin attributes. display bgp routing-table vpnv6 advertise-info Use display bgp routing-table vpnv6 advertise-info to display advertisement information for BGP VPNv6 routes.
display bgp routing-table vpnv6 as-path-acl Use display bgp routing-table vpnv6 as-path-acl to display BGP VPNv6 routes permitted by an AS path ACL.
MED : 0 Path/Ogn: 65410? * > Network : 2001:1::2 PrefixLen : 128 NextHop : ::1 LocPrf : PrefVal : 32768 OutLabel : NULL MED : 0 Path/Ogn: ? * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 MED : 0 Path/Ogn: ? Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 MED : 0 Path/Ogn: ? For command output, see Table 60.
32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1. • basic-community-list-number: Specifies a basic community list by its number in the range of 1 to 99. comm-list-name: Specifies a community list by its name, a case-sensitive string of 1 to 63 characters. whole-match: Displays routes exactly matching the specified community list.
Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 MED : 0 Path/Ogn: ? For command output, see Table 60. display bgp routing-table vpnv6 inlabel Use display bgp routing-table vpnv6 inlabel to display incoming labels for BGP VPNv6 routes.
display bgp routing-table vpnv6 outlabel Use display bgp routing-table vpnv6 outlabel to display outgoing labels for BGP VPNv6 unicast routes. Syntax display bgp routing-table vpnv6 outlabel Views Any view Predefined user roles network-admin network-operator Examples # Display outgoing labels for all BGP VPNv6 routes. display bgp routing-table vpnv6 outlabel BGP local router ID is 1.1.1.
display bgp routing-table vpnv6 peer Use display bgp routing-table vpnv6 peer to display BGP VPNv6 routing information advertised to or received from a specific BGP peer. Syntax display bgp routing-table vpnv6 peer ip-address { advertised-routes | received-routes } [ network-address prefix-length | statistics ] Views Any view Predefined user roles network-admin network-operator Parameters ip-address: Specifies a peer by its IP address.
BGP local router ID is 1.1.1.9 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 MED : 0 Path/Ogn: ? For command output, see Table 60. # Display statistics for BGP VPNv6 routes advertised to BGP peer 3.3.3.9 on the public network.
Route distinguisher: 100:1(vpn1) Total number of routes: 4 Route distinguisher: 200:1 Total number of routes: 1 display bgp update-group vpnv6 Use display bgp update-group vpnv6 to display information about BGP update groups for the BGP VPNv4 address family. Syntax display bgp update-group vpnv6 [ ip-address ] Views Any view Predefined user roles network-admin network-operator Parameters ip-address: Displays BGP VPNv6 update group information for the specified BGP peer.
Table 64 Command output Field Description Update-group ID ID of the update group. BGP link type: Type • • • • IBGP link. EBGP link. Confed IBGP link—Confederation IBGP link. Confed EBGP link—Confederation EBGP link. Label capability: Supported The peers in the update group support labeled routes. 4-byte AS number: Supported The peers in the update group support 4-byte AS numbers. 4-byte AS number: Suppressed The peers in the update group suppress 4-byte AS numbers.
undo policy vpn-target Default The route target filtering function is enabled for received VPNv6 routes. Views BGP VPNv6 address family view Predefined user roles network-admin Usage guidelines In an inter-AS option B scenario, an ASBR-PE must save all incoming VPNv4 routes and advertises those routes to the peer ASBR-PE. For this purpose, you must execute the undo policy vpn-target command on the ASBR-PE to disable route target filtering.
You can apply a new route selection policy by executing this command. If you execute this command with the export keyword, BGP filters advertised routing information based on the new policy and sends the matching routes to the BGP peer. If you execute this command with the import keyword, BGP advertises a route-refresh message to the peer so the peer re-advertises its routing information. After receiving the routing information from the peer, BGP filters the routing information by using the new policy.
rr-filter Use rr-filter to create an RR reflection policy so that only IBGP routes whose extended community attribute matches the specified extended community list are reflected. Use undo rr-filter to restore the default. Syntax rr-filter extended-community-number undo rr-filter Default An RR does not filter reflected routes. Views BGP VPNv6 address family view Predefined user roles network-admin Parameters extended-community-number: Specifies an extended community number in the range of 1 to 199.
MPLS OAM commands display mpls bfd Use display mpls bfd to display BFD information for LSP tunnels or MPLS TE tunnels. Syntax display mpls bfd [ ipv4 dest-addr mask-length | te tunnel tunnel-number ] Views Any view Predefined user roles network-admin network-operator Parameters ipv4 dest-addr mask-length: Specifies an FEC by an IPv4 destination address and the destination address mask length in the range of 0 to 32.
LSP ID : 100 NHLFE ID: 1025 Local Discr: 513 Remote Discr: 513 Source IP: 11.11.1.1 Destination IP: 127.0.0.1 Session State: Up Session Role: Passive Template Name: - Table 65 Command output Field Description Local Discr Local discriminator of the BFD session. Remote Discr Remote discriminator of the BFD session. Source IP Source IP of the BFD session, which is the MPLS LSR ID of the local PE. Destination IP Destination IP address of the BFD session.
Usage guidelines To use BFD to verify LSP connectivity, you must use this command to enable MPLS BFD. Otherwise, the BFD session cannot be established after you execute the mpls bfd (for LSP) command. Examples # Enable MPLS BFD. system-view [Sysname] mpls bfd enable mpls bfd (for LSP) Use mpls bfd to enable BFD for LSPs associated with a specific FEC. Use undo mpls bfd to disable BFD for LSPs associated with a specific FEC.
MPLS BFD and configure the mpls bfd command on both the local and remote devices. Make sure the discriminators configured on the local device match those configured on the remote device. A static BFD session is used to verify connectivity of a pair of LSPs in opposite directions (one from local to remote, and the other from remote to local) between two devices.
Predefined user roles network-admin Parameters discriminator: Specifies discriminator values for the BFD session. local local-id: Specifies the local discriminator value for the BFD session. The following matrix shows the value ranges for the local-id argument: MSR2000 MSR3000 MSR4000 0 to 32 0 to 64 0 to 64 remote remote-id: Specifies the remote discriminator value for the BFD session, in the range of 1 to 4294967295.
[Sysname] interface Tunnel 1 [Sysname-Tunnel1] mpls bfd discriminator local 1 remote 1 Related commands • display mpls bfd • mpls bfd enable mpls periodic-tracert (for LSP) Use mpls periodic-tracert to enable periodic traceroute of LSPs for an FEC. Use undo mpls periodic-tracert to disable periodic traceroute of LSPs for an FEC.
Usage guidelines The periodic MPLS traceroute function automatically traces an LSP tunnel at a specific interval. It locates errors on the LSP tunnel, verifies the consistency of the data plane and control plane, and records the detected errors into system logs. You can check the logs to monitor LSP connectivity.
-rtos tos-value: Specifies the ToS value in the IP header of an MPLS echo reply packet. The value range is 0 to 7, and the default value is 6. -s packet-size: Specifies the length (excluding the IP header and UDP header) of an MPLS echo request packet. The value for the packet-size argument is 65 to 8100 bytes, and the default is 100 bytes. -t time-out: Specifies the timeout interval for the reply to an MPLS echo request. The value range is 0 to 65535 milliseconds, and the default is 2000 milliseconds.
Destination address 127.0.0.1 100 bytes from 100.1.2.1: Sequence=1 time=49 ms Return Code=3(1) Destination address 127.0.0.3 100 bytes from 100.1.2.1: Sequence=2 time=44 ms Return Code=3(1) Destination address 127.0.0.1 100 bytes from 100.1.2.1: Sequence=3 time=60 ms Return Code=3(1) Destination address 127.0.0.3 100 bytes from 100.1.2.1: Sequence=4 time=60 ms Return Code=3(1) Destination address 127.0.0.1 100 bytes from 100.1.2.1: Sequence=5 time=76 ms Return Code=3(1) Destination address 127.0.0.
Syntax tracert mpls [ -a source-ip | -exp exp-value | -h ttl-value | -r reply-mode | -rtos tos-value | -t time-out | -v | fec-check ] * ipv4 dest-addr mask-length [ destination start-address [ end-address [ address-increment ] ] ] Views Any view Predefined user roles network-admin Parameters -a source-ip: Specifies the source address for MPLS echo request packets.
Examples # Trace the path that the LSP (for FEC 5.5.5.9/32) traverses from the ingress node to the egress node. Specify the IP header destination address range as 127.1.1.1 to 127.1.1.2 and set the address increment value to 1. With the configurations, the device performs a traceroute for both 127.1.1.1 and 127.1.1.2. tracert mpls ipv4 5.5.5.9 32 destination 127.1.1.1 127.1.1.2 1 MPLS trace route FEC 5.5.5.9/32 Destination address 127.1.1.1 TTL Replier Time 0 Type Downstream Ingress 100.1.
Field Description Type LSR type: Ingress, Transit, or Egress. Downstream Address of the downstream LSR and the label assigned by the downstream LSR. ReturnCode Return code. The number in parentheses represents a return subcode.
Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. [] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x | y | ... } Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-WLAN module, or the switching engine on a unified wired-WLAN switch. Represents an access point.
Index ABDEFGHIKLMNPRSTVW display bgp routing-table vpnv6 statistics,211 A display bgp update-group vpnv4,168 accept-label,23 display bgp update-group vpnv6,212 address-family ipv4 (VPN instance view),147 display explicit-path,53 address-family ipv6 (VPN instance view),195 display ip vpn-instance,171 address-family vpnv4,147 display mpls bfd,217 address-family vpnv6,195 display mpls forwarding ilm,1 advertise-label,24 display mpls forwarding nhlfe,2 authentication challenge,98 display mpls in
domain-id,173 mpls ldp transport-address,49 ds-te bc-model,59 mpls lsr-id,15 ds-te mode,62 mpls mtu,15 ds-te te-class,60 mpls periodic-tracert (for LSP),222 E mpls te,65 mpls te affinity-attribute,65 explicit-path,62 mpls te backup,67 export route-policy,174 mpls te backup bandwidth,67 ext-community-type,175 mpls te backup-path,68 F mpls te bandwidth,69 fast-reroute timer,63 mpls te bandwidth change thresholds,70 G mpls te bidirectional,71 mpls te enable,73 graceful-restart,39 mpls te
policy vpn-target,213 S policy vpn-target,181 select-seq load-balance-number,145 preferred-path,144 sham-link,186 pv-limit,49 snmp-agent trap enable l3vpn,189 R snmp-agent trap enable ldp,51 refresh bgp vpnv4,181 snmp-agent trap enable mpls,17 static-cr-lsp egress,94 refresh bgp vpnv6,214 static-cr-lsp ingress,95 refresh interval,129 static-cr-lsp transit,96 reset bgp vpnv4,182 static-lsp egress,19 reset bgp vpnv6,215 static-lsp ingress,20 reset mpls ldp,50 static-lsp transit,21 reset
