HP MSR Router Series MPLS Command Reference(V7) Part number: 5998-5695 Software version: CMW710-R0106 Document version: 6PW100-20140607
Legal and notice information © Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Contents Basic MPLS commands ················································································································································ 1 display mpls forwarding ilm ···································································································································· 1 display mpls forwarding nhlfe ································································································································ 2 display mpls
lsr-id ········································································································································································ 54 maxhops ································································································································································· 55 md5-authentication ·············································································································································
mpls te enable (IS-IS view) ·································································································································· 116 mpls te enable (OSPF area view) ······················································································································ 117 mpls te fast-reroute ·············································································································································· 118 mpls te fast-reroute bypas
graceful-restart enable ········································································································································ 180 hello interval························································································································································· 181 hello lost ······························································································································································· 182
tnl-policy (VPN instance view/IPv4 VPN view/IPv6 VPN view)····································································· 237 vpn popgo ···························································································································································· 239 vpn-id ···································································································································································· 239 vpn-instance-capability simple···
MPLS OAM commands··········································································································································· 299 bfd discriminator ················································································································································· 299 display l2vpn pw bfd ·········································································································································· 300 display mpls bfd ··
Basic MPLS commands In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. display mpls forwarding ilm Use display mpls forwarding ilm to display Incoming Label Map (ILM) entries.
30 SWAP 0 T 1300 1024 # Display all ILM entries. display mpls forwarding ilm Total ILM entries: 3 Flags: T - Forwarded through a tunnel N - Forwarded through the outgoing interface to the nexthop IP address B - Backup forwarding information A - Active forwarding information InLabel Oper VRF Flag SwapLabel Forwarding Info -------------------------------------------------------------------------------30 SWAP 0 T 1300 1024 1279 POP 0 - - - 1407 SWAP 0 NA 1271 GE2/1/3 50.2.
display mpls forwarding nhlfe [ nid ] [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters nid: Displays the NHLFE entry with the specified NID in the range of 0 to 4294967294. If you do not specify an NID, the command displays information about all NHLFE entries. slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays NHLFE entries on the active MPU. (MSR4000.
2050 LSP TB 3026 20 NA 3025 GE2/1/1 10.11.113.26 Table 2 Command output Field Description Total NHLFE entries Total number of NHLFE entries. NID NHLFE entry index. Tunnel type: Tnl-Type • • • • • • LOCAL—Direct LSP tunnel. LSP—Static LSP tunnel, or LSP tunnel signaled using LDP or BGP. TE—TE tunnel. GRE—GRE tunnel. CRLSP—Static CRLSP tunnel or CRLSP tunnel signaled using RSVP. - (a hyphen)—The tunnel type is invalid. Forwarding flag: Flag OutLabel • • • • T—Forwarded through a tunnel.
Interface Status MPLS MTU GE2/1/1 Up 1514 GE2/1/2 Up 1514 The MPLS MTU of an interface is in bytes. Related commands • mpls enable • mpls mtu display mpls label Use display mpls label to display MPLS label usage information. Syntax display mpls label { label-value1 [ to label-value2 ] | all } Views Any view Predefined user roles network-admin network-operator Parameters label-value1: Specifies a label value in the range of 16 to 1048575.
Field Description Usage state of the label: State • Idle—The label is idle. • Alloc—The label has been allocated. • Pending—The label has been released but is still used by an LSP entry. • Inuse—The label has been allocated and used by an LSP entry. display mpls lsp Use display mpls lsp to display LSP information.
ipv4-dest mask-length: Displays the IPv4 LSP for an FEC specified by an IPv4 address and a mask length. The value range for the mask length is 0 to 32. ipv6: Displays IPv6 LSP information. If you do not specify this keyword, the command displays IPv4 LSP information. ipv6-dest prefix-length: Displays the IPv6 LSP for an FEC specified by an IPv6 address and a prefix length. The value range for the prefix length is 0 to 128. verbose: Displays detailed LSP information.
Table 4 Command output Field Description Forwarding equivalence class: • IP address/mask—Classifies FECs by destination address. • IP address—Classifies FECs by next hop. • IP address/Out Label—Classifies FECs by next hop and outgoing label. FEC • Ingress LSR ID/Tunnel ID/LSP ID—RSVP TE FEC. • - (a hyphen)—The LSP is a static transit LSP, static egress LSP, static transit CRLSP, or static egress CRLSP. • Backup—If the LSP is a backup LSP of the previous LSP, this field displays Backup.
Field Description Label distribution protocol: • • • • • • Protocol LDP. BGP. RSVP. Static. StaticCR—Static CRLSP. Local—Direct LSP. BkLabel Outgoing label of the backup LSP. BkInterface Outgoing interface of the backup LSP. # Display detailed information about all LSPs. display mpls lsp verbose Destination : 56.10.10.2 FEC : 56.10.10.
Packets : 100 Errors : 0 Discards : 0 Destination : 56.10.10.4 FEC : 56.10.10.2/32 Protocol : LDP LSR Type : Ingress Service : - NHLFE ID : 2000 State : Active Out-Label : 1800 Nexthop : 10.1.1.2 Out-Interface: Vlan10 Table 6 Command output Field Description Destination LSP destination address. FEC • • • • • Forwarding equivalence class: IP address/mask—Classifies FECs by destination address. IP address—Classifies FECs by next hop.
Field Description MPLS forwarding statistics in inbound direction: Inbound Statistics • • • • Octets—Number of received octets. Packets—Number of received packets. Errors—Number of received error packets. Discards—Number of discarded packets. BkLabel Outgoing label of the backup LSP. BkNexthop Next hop address of the backup LSP. BkInterface Outgoing interface of the backup LSP. MPLS forwarding statistics in outbound direction: Outbound Statistics • • • • Octets—Number of sent octets.
Table 7 Command output Field Description LSP types: LSP Type • • • • • • Static LSP. Static CRLSP. LDP LSP. Local LSP—Direct LSP. RSVP CRLSP. BGP LSP. Total Total number of LSPs. Ingress Number of LSPs that take the local device as the ingress node. Transit Number of LSPs that take the local device as a transit node. Egress Number of LSPs that take the local device as the egress node. Active Number of active LSPs of a specific type.
Field Description Users Number of ILM entries that use this next hop. Next hop status: Status • Active—The next hop is active. • Dummy—The next hop is inactive. ECMP number Number of equal-cost NHLFE entries. Outgoing NHLFE ID ID of the NHLFE entry to which the next hop corresponds. Backup outgoing NHLFE ID ID of the backup NHLFE entry. display mpls nid Use display mpls nid to display usage information for dynamic NIDs.
1412 :........ ........ ........ ........ 1476 :........ ........ ........ . ........ ........ ........ ........ display mpls summary Use display mpls summary to display MPLS summary information. Syntax display mpls summary Views Any view Predefined user roles network-admin network-operator Examples # Display MPLS summary information. display mpls summary MPLS LSR ID : 2.2.2.
ftn enable Use ftn enable to enable the device to maintain FEC-to-NHLFE map (FTN) entries in the RIB. Use undo ftn enable to restore the default. Syntax ftn enable undo ftn enable Default The device does not maintain FTN entries in the RIB. Views RIB IPv4 address family view Predefined user roles network-admin Usage guidelines FTN entries are FIB entries that contain outgoing labels. When an LSR receives an unlabeled packet, it searches the corresponding FTN entry based on the destination IP address.
Views RIB IPv4 address family view Predefined user roles network-admin Parameter prefix-list-name: Specifies an IPv4 address prefix list, a case-sensitive string of 1 to 63 characters. This command applies to only the destination networks that permitted by the prefix list. Usage guidelines FTN forwarding adds a label to an unlabeled packet, and forwards the labeled packet. FTN forwarding statistics collection is enabled by this command.
Usage guidelines Execute this command on all interfaces that need to perform MPLS forwarding. Examples # Enable MPLS on interface GigabitEthernet 2/0/1. System-view [Sysname] interface gigabitethernet 2/0/1 [Sysname-GigabitEthernet2/0/1] mpls enable Related commands display mpls interface mpls label advertise Use mpls label advertise to specify the type of label the egress will advertise to the penultimate hop. Use undo mpls label advertise to restore the default.
Examples # Configure the egress device to advertise an explicit null label to the penultimate hop. system-view [Sysname] mpls label advertise explicit-null Related commands reset mpls ldp mpls lsr-id Use mpls lsr-id to configure an LSR ID for the local LSR. Use undo mpls lsr-id to delete the LSR ID of the local LSR. Syntax mpls lsr-id lsr-id undo mpls lsr-id Default An LSR has no LSR ID.
Default The MPLS MTU of an interface is not configured. Fragmentation for MPLS packets is based on the MTU of the interface, and the length of a fragment does not include that of the MPLS label. Thus, after an MPLS label is added into a fragment, the length of the MPLS fragment might exceed the interface MTU. Views Interface view Predefined user roles network-admin Parameters value: Specifies the MPLS MTU of the interface, in the range of 46 to 65535 bytes.
vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a string of 1 to 31 case-sensitive characters. If you do not specify a VPN instance, the command enables MPLS forwarding statistics for the public-network LSPs. ipv4 ipv4-destination mask-length: Specifies the IPv4 LSP for an FEC specified by an IPv4 address and a mask length. The mask length is in the range of 0 to 32.
Syntax mpls statistics interval interval undo mpls statistics interval Default MPLS forwarding statistics reading is disabled. Views System view Predefined user roles network-admin Parameters interval: Specifies the MPLS label forwarding statistics reading interval in the range of 30 to 65535 seconds. Usage guidelines To display MPLS label forwarding statistics by using the display mpls lsp verbose command, you must perform the following tasks: 1.
Usage guidelines The mpls ttl expiration enable command enables an LSR to generate an ICMP TTL-expired message upon receiving an MPLS packet with TTL being 1. • If the MPLS packet has only one label, the LSR sends the ICMP TTL-expired message back to the source through IP routing. • If the MPLS packet has multiple labels, the LSR forwards the ICMP TTL-expired message along the LSP of the MPLS packet to the egress, which then sends the message back to the source.
Within an MPLS network, TTL is always copied between the labels of an MPLS packet. The mpls ttl propagate command affects only the propagation between IP TTL and label TTL. HP recommends setting the same TTL processing mode on all LSRs of an LSP. To enable TTL propagation for a VPN, you must enable it on all PE devices in the VPN. This allows you to obtain the same traceroute result (hop count) from those PEs. Examples # Enable TTL propagation for VPN packets.
Predefined user roles network-admin Parameters all: Specifies all LSPs. vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a string of 1 to 31 case-sensitive characters. If you do not specify a VPN instance, the command clears MPLS forwarding statistics for the public-network LSPs. ipv4 ipv4-destination mask-length: Specifies the IPv4 LSP for an FEC specified by an IPv4 address and a mask length. The mask length is in the range of 0 to 32.
Static LSP commands display mpls static-lsp Use display mpls static-lsp to display static LSP information. Syntax display mpls static-lsp [ lsp-name lsp-name ] Views Any view Predefined user roles network-admin network-operator Parameters lsp-name lsp-name: Specifies a static LSP by its name, a case-sensitive string of 1 to 15 characters. If you do not specify a static LSP, the command displays information about all static LSPs. Examples # Display information about all static LSPs.
static-lsp egress Use static-lsp egress to configure the egress node of a static LSP. Use undo static-lsp egress to delete the egress node configuration for a static LSP. Syntax static-lsp egress lsp-name in-label in-label undo static-lsp egress lsp-name Default No static LSP exists on the device. Views System view Predefined user roles network-admin Parameters lsp-name: Specifies a name for the static LSP, a case-sensitive string of 1 to 15 characters.
Predefined user roles network-admin Parameters lsp-name: Specifies a name for the static LSP, a case-sensitive string of 1 to 15 characters. destination dest-addr: Specifies a destination IP address for the LSP. mask: Specifies the mask of the destination IP address. mask-length: Specifies the mask length of the destination address, in the range of 0 to 32. nexthop next-hop-addr: Specifies a next hop address.
Parameters lsp-name: Specifies a name for the static LSP, a case-sensitive string of 1 to 15 characters. in-label in-label: Specifies an incoming label in the range of 16 to 1023. nexthop next-hop-addr: Specifies a next hop address. outgoing-interface interface-type interface-number: Specifies an outgoing interface by its type and number. The specified interface must be a point-to-point interface. out-label out-label: Specifies an outgoing label in the range of 16 to 1023.
LDP commands In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. accept-label Use accept-label to configure a label acceptance policy. Use undo accept-label to remove a label acceptance policy. Syntax accept-label peer peer-lsr-id prefix-list prefix-list-name undo accept-label peer peer-lsr-id Default No label acceptance policy is configured. LDP accepts all label mappings from all peers.
[Sysname-ldp] accept-label peer 1.1.1.9 prefix-list prefix-from-RTA Related commands • display mpls ldp peer verbose • ip prefix-list (Layer 3—IP Routing Command Reference) advertise-label Use advertise-label to configure a label advertisement policy. Use undo advertise-label to delete a label advertisement policy. Syntax advertise-label prefix-list prefix-list-name [ peer peer-prefix-list-name ] undo advertise-label prefix-list prefix-list-name Default No label advertisement policy is configured.
Examples # Configure two label advertisement policies. One policy advertises only the label mapping for subnet 10.1.1.0/24 to the peer 3.3.3.9. The other policy advertises only the label mapping for subnet 10.2.1.0/24 to the peer 4.4.4.9. system-view [Sysname] ip prefix-list prefix-to-C permit 10.1.1.0 24 [Sysname] ip prefix-list prefix-to-D permit 10.2.1.0 24 [Sysname] ip prefix-list peer-C permit 3.3.3.9 32 [Sysname] ip prefix-list peer-D permit 4.4.4.
before the next attempt. This process continues until the maximum delay time is reached. After that, the maximum delay time always takes effect. The maximum delay time must be larger than the initial delay time. Examples # Configure LDP backoff for the public network, and set the initial delay time to 100 seconds and the maximum delay time to 300 seconds.
Usage guidelines If you do not specify any parameters, the command displays all LDP basic and extended discovery information. Examples # Display brief LDP discovery information for the public network. display mpls ldp discovery Type: L - Link Hello, T - Targeted Hello Discovery Source Peer LDP ID Hello Sent/Rcvd (L) GigabitEthernet2/0/2 100.100.100.18:0 83/80 200.100.100.18:0 83/60 100.100.100.18:0 23/20 (T) 100.100.100.
Transport Address: 100.100.100.17 Peer LDP ID : 100.100.100.20:0 Source Address : 100.100.100.20 Transport Address: 100.100.100.20 Hello Hold Time: 45 sec (Local: 45 sec, Peer: 45 sec) Table 12 Command output Field Link Hellos Description Information about basic discovery that sends Link Hellos on interfaces. In a non-point-to-point network, an interface might discover multiple peers. Interface Interface using basic discovery. Hello Interval Hello interval in milliseconds.
display mpls ldp fec [ vpn-instance vpn-instance-name ] [ destination-address mask-length | summary ] [ standby slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The command displays FEC-label mappings for the specified VPN. If you do not specify a VPN instance, the command displays FEC-label mappings for the public network.
Out Label: 3 State: Idle Table 13 Command output Field Description FEC Forwarding equivalence class identified by an IP prefix. FEC flags: • • • • • • Flags 0x01—Egress LSP. 0x02—Ingress LSP. 0x04—Waits to add an outgoing label to RIB. 0x08—Waits to add an LSP to LSM. 0x10—Non-egress LSP waits the recovery during a GR process. 0x20—Meets the requirements of advertising labels. In Label Incoming label assigned by the local LSR to the FEC. Label Advertisement Policy Label advertisement policy.
Received : 3 Table 14 Command output Field Description FECs Number of FECs that LDP has discovered from the routing protocol or FEC-label mappings advertised by peers. Implicit Null Number of FECs that are bound to the implicit null label. Explicit Null Number of FECs that are bound to the explicit null label. Non-Null Number of FECs that are bound to non-null labels. No Label Number of FECs without a label. No Route Number of FECs without matching routes.
GigabitEthernet2/0/8: LDP-IGP synchronization is disabled on the interface Table 15 Command output Field Description IGP protocols IGP protocols that require LDP-IGP synchronization: OSPF and IS-IS. LDP-IGP synchronization state: • Ready—LDP is converged and is available for IGP. • Delayed—LDP is waiting to notify IGP of the convergence. Sync status remaining indicates the remaining time for the delay, in seconds. • Not ready—LDP is not converged and is not available for IGP.
Field Description LDP automatic configuration information: • If LDP autoconfiguration is enabled, this field displays IGP process Auto-config information, such as OSPF process ID and OSPF area ID. • If LDP autoconfiguration is disabled, this field displays a hyphen (-). Related commands • mpls ldp • mpls ldp enable display mpls ldp lsp Use display mpls ldp lsp to display information about LSPs generated by LDP.
Table 17 Command output Field Description LSP status: • *—Stale, indicating the LSP is under a GR process. • L—Liberal, indicating the LSP is not available. • B—Backup, indicating a backup LSP. Status Flags FECs Total number of FECs. Ingress Number of LSPs that take the local device as the ingress node. Transit Number of LSPs that take the local device as a transit node. Egress Number of LSPs that take the local device as the egress node.
Instance Parameters: Instance ID : 0 LSR ID : 0.0.0.0 Loop Detection : Off Hop Count Limit : 32 Label Retention Mode: Liberal IGP Sync Delay Instance State : Active Path Vector Limit : 32 Label Distribution Control Mode: Ordered : 0 sec Table 18 Command output Field Description Global Parameters Global parameters for all LDP-enabled networks. Protocol Version LDP protocol version.
MSR4000: display mpls ldp peer [ vpn-instance vpn-instance-name ] [ peer-lsr-id ] [ verbose ] [ standby slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. The command displays LDP peer and session information for the specified VPN.
Field Description Whether GR is enabled on the peer. • On—Enabled. • Off—Disabled. GR Whether MD5 authentication is enabled for the LDP session on the local device. MD5 • On—Enabled. • Off—Disabled. KA Sent/Rcvd Number of keepalive messages sent/received. # Display detailed information about all LDP peers and LDP sessions for the public network. display mpls ldp peer verbose Peer LDP ID : 100.100.100.20:0 Local LDP ID : 100.100.100.17:0 TCP Connection : 100.100.100.20:47515 -> 100.
Field Description State of the LDP session: Session State • • • • • Non Existent—No TCP connection is established. Initialized—A TCP connection has been established. OpenRecv—LDP has received an acceptable initialization message. OpenSent—LDP has sent an initialization message. Operational—An LDP session has been established. Session Role Role the local LSR in the session, Active or Passive. Session Up time Duration of the session in Operational state. Maximum PDU length negotiated, in bytes.
Field Description Hello Hold Time Hello hold time negotiated, in seconds. Hello Interval Current Hello interval, in milliseconds. Label Acceptance Policy Label acceptance policy used to filter label mappings received from the peer. Whether session protection is enabled. Session Protection • On—Enabled. • Off—Disabled. Session protection state: State Duration • Incomplete—Session protection is not ready. • Ready—Session protection is ready. • Protecting—The session is under protection.
slot slot-number: Specifies a card. The slot-number argument represents the number of the slot that holds the card. (MSR4000.) Usage guidelines If executed without any parameters, this command displays LDP summary information for the public network. Examples # Display LDP summary information for the public network.
Syntax dscp dscp-value undo dscp Default The DSCP value for outgoing LDP packets is 48. Views LDP view Predefined user roles network-admin Parameters dscp-value: Specifies the DSCP value for outgoing LDP packets, in the range of 0 to 63. Usage guidelines To control the transmission preference of outgoing LDP packets, specify a DSCP value for outgoing LDP packets. Examples # Set the DSCP value for outgoing LDP packets to 56.
The graceful-restart command does not take effect on LDP sessions established before the command is executed. To apply the new setting, execute the reset mpls ldp command to reestablish LDP sessions. Examples # Enable GR for LDP. system-view [Sysname] mpls ldp [Sysname-ldp] graceful-restart Related commands • display mpls ldp parameter • reset mpls ldp graceful-restart timer Use graceful-restart timer to configure the MPLS Forwarding State Holding timer and the Reconnect timer for GR.
{ { If the LDP session is not set up before the Reconnect timer expires, the GR helper deletes stale FEC-label mappings and corresponding MPLS forwarding entries. If the LDP session is successfully set up before the Reconnect timer expires, the GR restarter sends the remaining time of the MPLS Forwarding State Holding timer to the GR helper. The remaining time is sent as the LDP Recovery time. 3. After the LDP session is reestablished, the GR helper starts the LDP Recovery timer. 4.
Usage guidelines LDP convergence on a link is completed when the following events occur: • The local device establishes an LDP session to at least one peer, and the LDP session is already in Operational state. • The local device has distributed the label mappings to at least one peer. If LDP notifies IGP immediately after convergence, MPLS traffic forwarding might be interrupted in one of the following scenarios: • LDP peers use the Ordered label distribution control mode.
Usage guidelines When an LDP restart or an active/standby switchover occurs, LDP takes time to converge, and LDP notifies IGP of the LDP-IGP synchronization status as follows. • If a notification delay is not configured, LDP immediately notifies IGP of the current synchronization states during convergence, and then updates the states after LDP convergence. This could impact IGP processing.
to operate correctly, you can enable LDP to redistribute BGP IPv4 unicast routes on the PE and the CE. The configuration enables LDP to assign labels to the BGP routes to establish LSPs. For more information about carrier's carrier, see MPLS Configuration Guide. Examples # Enable LDP to redistribute BGP IPv4 unicast routes on the public network.
Related commands display mpls ldp parameter loop-detect Use loop-detect to enable loop detection. Use undo loop-detect to disable loop detection. Syntax loop-detect undo loop-detect Default Loop detection is disabled. Views LDP view, LDP-VPN instance view Predefined user roles network-admin Usage guidelines This command enables LDP to detect and terminate LSP loops. LDP loop detection uses one of the following methods: • Hop count. For more information, see "maxhops." • Path vector.
Default LDP only uses redistributed host routes with a 32-bit mask to generate LSPs. Views LDP view, LDP-VPN instance view Predefined user roles network-admin Parameters all: Enables LDP to use all redistributed routes to generate LSPs. prefix-list prefix-name: Specifies an IP prefix list by its name, a case-sensitive string of 1 to 63 characters. LDP uses only the redistributed routes permitted by the IP prefix list to generate LSPs.
Default No LDP LSR ID is configured. LDP uses the MPLS LSR ID configured by the mpls lsr-id command for both the public network and VPN instances. Views LDP view, LDP-VPN instance view Predefined user roles network-admin Parameters lsr-id: Specifies an LDP LSR ID, in dotted decimal notation. Usage guidelines If you configure an LDP LSR ID by using the lsr-id command in LDP view or LDP-VPN instance view, LDP uses the LDP LSR ID. Otherwise, LDP uses the LSR-ID configured by the mpls lsr-id command.
Parameters hop-number: Specifies the maximum hop count for loop detection, in the range of 1 to 32. Usage guidelines LDP adds a hop count in a label request or label mapping message. The hop count increments by 1 on each LSR. When the hop count reaches the maximum hop count configured by this command, LDP considers that a loop occurs and terminates LSP establishment. Set a proper maximum hop count according to the number of LSRs in your network.
Usage guidelines To improve security for LDP sessions, you can configure MD5 authentication for the underlying TCP connections to check the integrity of LDP messages. The local LSR and the peer LSR must have the same key. Otherwise, they cannot establish a TCP connection. After you change the MD5 authentication key, the local LSR uses the new key to reestablish an LDP session to the specified peer. For security purposes, all keys, including keys configured in plain text, are saved in cipher text.
[Sysname-ldp] Related commands • mpls ldp enable • vpn-instance mpls ldp enable Use mpls ldp enable to enable LDP on an interface. Use undo mpls ldp enable to disable LDP on an interface. Syntax mpls ldp enable undo mpls ldp enable Default LDP is disabled on an interface. Views Interface view Predefined user roles network-admin Usage guidelines Before you enable LDP on an interface, use the mpls ldp command in system view to enable LDP globally.
mpls ldp igp sync disable Use mpls ldp igp sync disable to disable LDP-IGP synchronization on an interface. Use undo mpls ldp igp sync disable to restore the default. Syntax mpls ldp igp sync disable undo mpls ldp igp sync disable Default LDP-IGP synchronization is enabled on an interface.
Parameters level-1: Specifies Level-1 of the IS-IS process. level-2: Specifies Level-2 of the IS-IS process. Usage guidelines LDP establishes LSPs based on the IGP optimal route. If LDP is not synchronized with IGP, MPLS traffic forwarding might be interrupted. The LDP-IGP synchronization function is used to solve the synchronization problem. After LDP-IGP synchronization is enabled, IGP advertises the actual cost of a link only when LDP convergence on the link is completed.
Predefined user roles network-admin Usage guidelines LDP establishes LSPs based on the IGP optimal route. If LDP is not synchronized with IGP, MPLS traffic forwarding might be interrupted. The LDP-IGP synchronization function is used to solve the synchronization problem. After LDP-IGP synchronization is enabled, IGP advertises the actual cost of a link only when LDP convergence on the link is completed. Before LDP is converged, IGP advertises the maximum cost of the link.
The Keepalive interval is 15 seconds. Views Interface view, LDP peer view Predefined user roles network-admin Parameters hello-hold timeout: Specifies the Hello hold time in the range of 1 to 65535 seconds. LDP keeps the hello adjacency during the Hello hold time. The negotiated Hello hold time takes the smaller value of the local Hello hold time and the peer Hello hold time. If LDP receives no Hello message from the peer before the Hello hold timer expires, LDP deletes the Hello adjacency with the peer.
[Sysname-ldp-peer-3.3.3.3] mpls ldp timer hello-hold 1000 [Sysname-ldp-peer-3.3.3.3] mpls ldp timer hello-interval 50 [Sysname-ldp-peer-3.3.3.3] mpls ldp timer keepalive-hold 1000 [Sysname-ldp-peer-3.3.3.3] mpls ldp timer keepalive-interval 50 # On interface GigabitEthernet 2/0/1, set the Link Hello hold time to 100 seconds, Link Hello interval to 20 seconds, Keepalive hold time to 50 seconds, and Keepalive interval to 10 seconds.
Using mpls ldp transport-address in interface view, you specify the transport address carried in the Link Hellos sent out of the interface. Using mpls ldp transport-address in LDP peer view, you specify the transport address carried in the Targeted Hellos sent to the LDP peer. HP recommends using the default transport address. If two LSRs have multiple links in between and you want to establish an LDP session on each link, make sure that all the links use the same transport address.
Usage guidelines LDP nonstop routing (NSR) backs up protocol states and data (including LDP session and LSP information) from the active process to the standby process. After the LDP primary process fails, the backup process seamlessly takes over the job of the primary process. The LDP peers are not aware of the LDP interruption and keep the LDP session in Operational state, so the forwarding is not interrupted.
Views LDP view, LDP-VPN instance view Predefined user roles network-admin Parameters pv-number: Specifies the path vector limit in the range of 1 to 32. Usage guidelines LDP adds LSR ID information in a label request or label mapping message. Each LSR checks whether its LSR ID is contained in the message. • If it is not, the LSR adds its own LSR ID into the message. • If it is, the LSR considers that a loop occurs and terminates LSP establishment.
To apply new parameters to an LDP session, you must use this command to reset the LDP session. Examples # Reset all LDP sessions in the public network. reset mpls ldp # Reset all LDP sessions in the VPN instance vpn1. reset mpls ldp vpn-instance vpn1 session protection Use session protection to enable session protection. Use undo session protection to disable session protection.
system-view [Sysname] ip prefix-list protected-peer-list index 1 permit 3.3.3.3 32 [Sysname] mpls ldp [Sysname-ldp] session protection duration 120 peer protected-peer-list Related commands display mpls ldp peer snmp-agent trap enable ldp Use snmp-agent trap enable ldp to enable SNMP notifications for LDP. Use undo snmp-agent trap enable ldp to disable SNMP notifications for LDP. Syntax snmp-agent trap enable ldp undo snmp-agent trap enable ldp Default SNMP notifications for LDP are enabled.
Views LDP view Predefined user roles network-admin Parameters peer-lsr-id: Specifies the LSR ID of a peer. Usage guidelines This command implements LDP over MPLS TE unidirectional tunnels. To implement LDP over MPLS TE, you must configure this command on the egress node of the MPLS TE tunnel, and specify the peer-lsr-id as the LSR ID of the ingress node.
The VPN instance specified by this command must have been created by the ip vpn-instance command in system view. The NSR and GR commands, the session protection command, and the targeted-peer command are available only in LDP view. All other commands available in LDP view are available in LDP-VPN instance view. Commands executed in LDP view take effect only on the public network. Commands executed in LDP-VPN instance view take effect only on the specified VPN instance.
MPLS TE commands auto-bandwidth enable Use auto-bandwidth enable to enable the automatic bandwidth adjustment function globally, and configure the output rate sampling interval. Use undo auto-bandwidth enable to disable automatic bandwidth adjustment. Syntax auto-bandwidth enable [ sample-interval seconds ] undo auto-bandwidth enable Default The global auto bandwidth adjustment is disabled.
auto-tunnel backup Use auto-tunnel backup to enable the automatic bypass tunnel setup function (also called auto FRR) globally, and enter MPLS TE auto-FRR view. Use undo auto-tunnel backup to disable the auto FRR function globally. Syntax auto-tunnel backup undo auto-tunnel backup Default The auto FRR function is disabled globally.
undo destination Default No destination address is specified for a tunnel bundle interface. Views Tunnel bundle interface view Predefined user roles network-admin Parameters ip-address: Specifies the destination IPv4 address. Usage guidelines When the remote PE's address is the same as the destination address of a tunnel bundle interface, the tunnel bundle can be used as the public tunnel for MPLS L3VPN and MPLS L2VPN to carry VPN services.
Examples # Disable the explicit path named path1. system-view [Sysname] explicit-path path1 [Sysname-explicit-path-path1] disable display explicit-path Use display explicit-path to display information about explicit paths. Syntax display explicit-path [ path-name ] Views Any view Predefined user roles network-admin network-operator Parameters path-name: Displays information about the explicit path specified by its name, a case-sensitive string of 1 to 31 characters.
Field Description Node attribute: • Include—The node must be included in the explicit path. • Exclude—The node must not be included in the explicit path. Hop Attribute display isis mpls te advertisement Use display isis mpls te advertisement to display link and node information in an IS-IS TEDB.
System ID : 0000.0000.0004 MPLS LSR ID : 4.4.4.4 Node flags : -/-/R/- Link total count : 1 Link information : Neighbour Frag ID Link Type Local Address 0000.0000.0004.04 0x00 Broadcast 1.1.1.3 Node index Remote Address : 1 System ID : 0000.0000.0001 MPLS LSR ID : 1.1.1.1 Node flags : -/-/R/- Link total count : 1 Link information : Neighbour Frag ID Link Type Local Address Remote Address 0000.0000.0004.04 0x00 Broadcast 1.1.1.
BC[00]: 0 bytes/sec BC[01]: 0 bytes/sec Local address: 1.1.1.3 Node index : 1 System ID : 0000.0000.0001 MPLS LSR ID : 1.1.1.1 Node flags : -/-/-/- Link total count : 1 Link information : Link index Neighbor : 0 : 0000.0000.0004.
Field Description Admin group Administrator group attribute of the link. Link information flags: • A—Already synchronizes link information with CSPF. • U—Ready to update link information with CSPF again after the Link flags previous update failed. • D—Ready to delete link information from CSPF again after the previous deletion failed. Bandwidth constraint model: Bandwidth constraint model • Prestandard DS-TE RDM. • IETF DS-TE RDM. • IETF DS-TE MAM. Local address Local IP address of the link.
display isis mpls te network Use display isis mpls te network to display network information in an IS-IS TEDB. Syntax display isis mpls te network [ [ level-1 | level-2 ] | local | lsp-id lsp-id ] * [ process-id ] Views Any view Predefined user roles network-admin network-operator Parameters level-1: Displays network information for Level-1 routers. level-2: Displays network information for Level-2 routers. local: Displays network information advertised by the local device.
LAN ID : 0000.0000.0004.04 Frag ID : 0x00 Flags : -/-/- Attached routers : 0000.0000.0001 0000.0000.0004 Table 25 Command output Field Description TE information for IS-IS(1) TE information for IS-IS process 1. LAN ID Broadcast network ID, in the format of System-ID.Pseudonode-ID. Frag ID LSP fragment number. State flag for network information: • A—Already synchronizes network information with CSPF.
Level-1 Tunnel Statistics ------------------------- Tunnel Name Auto Route Destination Metric ----------------------------------------------------------------------Tun0 Advertise 2.2.2.2 Relative 0 Level-2 Tunnel Statistics ------------------------- Tunnel Name Auto Route Destination Metric ----------------------------------------------------------------------Tun0 Advertise 2.2.2.
MPLS DS-TE BC model : RDM TE Class Class Type Priority 0 0 0 1 0 1 2 0 2 3 0 3 4 0 4 5 0 5 6 0 6 7 0 7 8 1 0 9 1 1 10 1 2 11 1 3 12 1 4 13 1 5 14 1 6 15 1 7 Table 27 Command output Field Description MPLS LSR ID MPLS LSR ID of the device. MPLS DS-TE mode DS-TE mode: Prestandard or IETF. DS-TE BC model: MPLS DS-TE BC model • RDM—Russian Dolls Model. • MAM—Maximum Allocation Model. TE Class Serial number of a TE class.
Examples # Display bandwidth information on all interfaces enabled with MPLS TE.
• mpls te max-reservable-bandwidth rdm display mpls te tedb Use display mpls te tedb to display MPLS TE database (TEDB) information. Syntax display mpls te tedb { { isis { level-1 | level-2 } | ospf area area-id } | link ip-address | network | node [ local | mpls-lsr-id ] | summary } Views Any view Predefined user roles network-admin network-operator Parameters isis: Displays TEDB information for IS-IS. level-1: Displays TEDB information for Level-1 routers.
4.1.1.2 5.1.1.2 3.0.0.6 OSPF 100 0 5.1.1.1 6.1.1.1 5.1.1.2 6.1.1.2 3.0.0.9 OSPF 100 0 6.1.1.1 7.1.1.1 6.1.1.2 7.1.1.1 12.0.0.7 OSPF 100 0 3.1.1.1 7.1.1.1 7.1.1.2 Table 29 Command output Field Description DR MPLS LSR-ID MPLS LSR ID of a designated router (DR), in dotted decimal notation. DR-address Interface address of the DR. IGP Internal gateway protocol: OSPF or IS-IS. Process-ID IGP process ID. Area/Level OSPF area or IS-IS level of the router.
Node information for OSPF area 1: MPLS LSR-ID IGP Process-ID Area Links-Count 2.2.2.2 OSPF 100 1 1 3.3.3.3 OSPF 100 1 1 Network information for OSPF area 1: DR MPLS LSR-ID DR-address IGP 3.3.3.3 20.1.1.2 OSPF 100 Process-ID Area 1 Neighbors 2.2.2.2 3.3.3.3 Table 31 Command output Field Description MPLS LSR-ID MPLS LSR ID of a router, in dotted decimal notation. IGP Internal gateway protocol: OSPF or IS-IS. Process-ID IGP process ID. Area OSPF area of the router.
TE class 6: 10 kbps TE class 7: 10 kbps TE class 8: 10 kbps TE class 9: 10 kbps TE class 10: 10 kbps TE class 11: 10 kbps TE class 12: 10 kbps TE class 13: 10 kbps TE class 14: 10 kbps TE class 15: 10 kbps MPLS LSR-ID: 1.1.1.1 IGP Type: ISIS Process ID: 100 Level: Level-1 Link[1]: Local IP Address: 2.0.1.33 Neighbor IP Address: 2.0.1.2 Neighbor MPLS LSR-ID: 1.1.1.
Field Description Area OSPF area of the router. Level IS-IS level of the router: Level-1 or Level-2. Link[n] Information about a link. n is the number of the link. Local IP Address Local interface address. Remote interface address for a P2P or P2MP link. Neighbor IP Address For an NBMA or a broadcast link, this field is blank. Link type: • • • • Link Type Link Status P2P. P2MP. NBMA. Broadcast. Link status: Active or Inactive. Bandwidth constraint model: • Prestandard DS-TE RDM.
Table 33 Command output Field Description MPLS LSR-ID MPLS LSR ID of a router, in dotted decimal notation. IGP Type Internal gateway protocol: OSPF or IS-IS. Process ID IGP process ID. Area OSPF area of the router. Level IS-IS level of the router: Level-1 or Level-2. Local IP Address Local interface address. Remote interface address for a P2P or P2MP link. Neighbor IP Address For an NBMA or a broadcast link, this field is blank. Link type: • • • • Link Type Link Status P2P. P2MP. NBMA.
LSP ID : 1 Admin State : Normal Tunnel ID : 0 Ingress LSR ID Signaling : 1.1.1.1 Egress LSR ID : 3.3.3.
Field Description Administrative state of the tunnel interface: Admin State • Normal—The interface is not shut down by the shutdown command. • Shutdown—The tunnel interface is shut down by the shutdown command. Signaling Signaling protocol used to set up the tunnel: RSVP-TE or Static. Static CRLSP Name Static CRLSP referenced by the tunnel. Resv Style Resource reservation style: FF or SE.
Field Description Backup Bandwidth Type Class type of the traffic on the primary tunnel that the bypass tunnel can protect. Backup Bandwidth Bandwidth that the bypass tunnel can protect, in kbps. Bypass Tunnel Whether it is a bypass tunnel: Yes or No. Auto Created Whether the bypass tunnel is automatically created: Yes or No. Retry Limit Maximum number of tunnel setup retries. Retry Interval Tunnel setup retry interval, in seconds.
originate-router advertising-router-id: Displays information originated from a router specified by its router ID. self-originate: Displays information generated by the local router. Examples # Display link and node information for all processes in all areas. display ospf mpls te advertisement OSPF Process 1 with Router ID 2.2.2.2 Traffic Engineering Database Area: 0.0.0.1 Adv Router ID : 1.1.1.1 MPLS LSR ID : 1.1.1.
Bandwidth Constraint Model: Prestandard DS-TE RDM Bandwidth Constraints: BC [ 0] = 0 bytes/sec BC [ 1] = 0 bytes/sec Local Interface Address : 197.168.1.1 Remote Interface Address : 197.168.1.11 Table 35 Command output Field Description Adv Router ID ID of the router that advertises the information. MPLS LSR ID MPLS LSR ID of the router that advertises the information. TE information flags: Flags • A—Already synchronizes the information with CSPF.
display ospf mpls te network Use display ospf mpls te network to display network information in an OSPF TEDB. Syntax display ospf [ process-id ] [ area area-id ] mpls te network [ originate-router advertising-router-id | self-originate ] Views Any view Predefined user roles network-admin network-operator Parameters process-id: Specifies an OSPF process ID in the range of 1 to 65535. If you do not specify this argument, this command displays information about all OSPF processes.
Field Description Network information flags: • A—Already synchronizes the information with CSPF. • U—Updates the information with CSPF again after the previous Flag update fails. • D—Deletes the information from CSPF again after the previous deletion fails. Attached Router ID of the attached router. display ospf mpls te tunnel Use display ospf mpls te tunnel to display OSPF tunnel interface information.
Field Description Tunnel interface states: • Inactive—The tunnel interface is not used to forward packets, because the tunnel route is not the optimal route. State • Active—The tunnel interface is used to forward packets, because the tunnel route is the optimal route. Neighbor ID Router ID for the tunnel destination. Cost Route cost of the tunnel interface. Destination LSR ID for the tunnel destination. Automatic route advertisement method, IGP Shortcut or IGP Advertise.
Tunnel3 Down 3 Tunnel6 Down 3 Table 38 Command output Field Description Tunnel bundle interface operating modes: Working mode • Load Balancing. • 1+1—1+1 protection switching mode. • 1:1—1:1 protection switching mode. For more information about 1+1 and 1:1 protection switching modes, see MPLS Configuration Guide. Tunnel type This field supports only CRLSP. Tunnel destination Destination address for the tunnel bundle interface. Load-share Weight of the interface for load sharing.
Examples # Specify the BC model of IETF DS-TE as MAM. system-view [Sysname] mpls te [Sysname-te] ds-te bc-model mam Related commands • display mpls te ds-te • ds-te mode ds-te te-class Use ds-te te-class to configure a TE class used in IETF DS-TE mode. Use undo ds-te te-class to restore the default.
Usage guidelines For a traffic trunk from a CT, the setup or/and holding priority of the LSP transporting the traffic trunk must be the priority specified for the CT in the TE class. When you configure a TE class, make sure to specify a CT-priority pair different from that in any existing TE class. When you restore the default settings for a TE class, make sure the default CT-priority pair is different from the CT-priority pair of an existing TE class.
• The prestandard mode supports only RDM. The IETF mode supports both RDM and MAM. • A device operating in prestandard mode cannot communicate with devices from some vendors. A device operating in IETF mode can communicate with devices from other vendors. Be aware of these differences and choose a proper DS-TE mode as needed. After the DS-TE mode is changed, all CRLSPs on the device are deleted and then reestablished. Examples # Configure the DS-TE mode as IETF.
• mpls te path • nexthop fast-reroute timer Use fast-reroute timer to configure the interval for selecting an optimal bypass tunnel. Use undo fast-reroute timer to restore the default. Syntax fast-reroute timer interval undo fast-reroute timer Default The optimal bypass tunnel selection interval is 300 seconds. Views MPLS TE view Predefined user roles network-admin Parameters interval: Specifies the interval for selecting an optimal bypass tunnel, in the range of 0 to 604800 seconds.
undo interface tunnel-bundle number Default No tunnel bundle interface exists on a device. Views System view Predefined user roles network-admin Parameters number: Specifies the tunnel bundle interface number. The following matrix shows the value ranges for the number argument: Hardware Value range MSR2000 0 to 1023 MSR3000 0 to 2047 MSR4000 0 to 4095 Usage guidelines You can specify multiple member interfaces (MPLS TE tunnel interfaces) for a tunnel bundle interface.
Views MPLS TE view Predefined user roles network-admin Parameters interval: Specifies the interval at which IGP floods TE information, in the range of 0 to 3600 seconds. Usage guidelines When the reservable bandwidth of a link changes, IGP floods the link TE information to notify network devices of the change. You can use the mpls te bandwidth change thresholds command to configure IGP to flood only significant bandwidth changes of a link to prevent excessive IGP flooding.
Usage guidelines You can specify multiple member interfaces for a tunnel bundle interface. Traffic is shared on the member interfaces in proportion of their weights. If the member interfaces have the same weight, they will share the same load. For example, a tunnel bundle interface has three member interfaces. The weights for the member interfaces are 1, 1, and 2, respectively. The proportions of traffic forwarded by the member interfaces are 1/4, 1/4, and 1/2, respectively.
mpls te affinity-attribute Use mpls te affinity-attribute to configure an affinity for a tunnel. Use undo mpls te affinity-attribute to restore the default. Syntax mpls te affinity-attribute attribute-value [ mask mask-value ] undo mpls te affinity-attribute Default The affinity is 0x00000000, and the mask is 0x00000000. That is, a tunnel can use any link.
Related commands • display mpls te tunnel-interface • mpls te link-attribute mpls te auto-bandwidth Use mpls te auto-bandwidth to enable automatic bandwidth adjustment or output rate collection for an MPLS TE tunnel. Use undo mpls te auto-bandwidth to disable automatic bandwidth adjustment and output rate collection for an MPLS TE tunnel.
set the bandwidth adjustment interval to a value at least 3 times the sampling interval to get the accurate output rate. 4. Establishes a new CRLSP based on the adjusted bandwidth. 5. Switches traffic to the new CRLSP, and then deletes the old CRLSP. The output rate collection function collects the tunnel output rate regularly at the specified collection interval. The collected output rate is the largest of all average output rates calculated in the sampling intervals during the collection interval.
Usage guidelines The auto FRR function allows an interface to automatically set up a node-protection bypass tunnel and a link-protection bypass tunnel for each of its primary CRLSPs. The egress interface of the primary CRLSPs is the interface itself. Bypass tunnels are set up before the primary CRLSP fails. Therefore, they use extra bandwidth. To save network bandwidth, configure auto FRR only for key interfaces.
In the same tunnel interface view, the mpls te backup command cannot be used together with the mpls te reoptimization, mpls te auto-bandwidth adjustment, and mpls te resv-style ff commands. Examples # Enable hot backup for tunnel 0. system-view [Sysname] interface tunnel 0 mode mpls-te [Sysname-Tunnel0] mpls te backup hot-standby Related commands mpls te backup-path mpls te backup bandwidth Use mpls te backup bandwidth to configure the bandwidth and the CT that the bypass tunnel can protect.
forwarding for the traffic of primary CRLSP, and the occupied bandwidth is not fixed. Therefore, this type of bypass tunnel cannot protect a primary CRLSP with the bandwidth 0 or a primary CRLSP whose bandwidth exceeds the protected bandwidth. If no CT is specified, CRLSPs of all CTs can use the bypass tunnel. The bandwidth value specified is used only for calculating and determining the bandwidth protection relationship between a primary CRLSP and a bypass tunnel.
Predefined user roles network-admin Parameters preference value: Sets a preference value for the specified path, in the range of 1 to 10. The smaller the value, the higher the preference. dynamic: Uses the dynamically calculated path to establish the backup CRLSP. explicit-path path-name: Uses the specified explicit path to establish the backup CRLSP. The path-name argument specifies the name of an explicit path, a case-sensitive string of 1 to 31 characters.
Predefined user roles network-admin Parameters ct0: Specifies CT 0 for the tunnel. ct1: Specifies CT 1 for the tunnel. ct2: Specifies CT 2 for the tunnel. ct3: Specifies CT 3 for the tunnel. bandwidth: Specifies the bandwidth required by the MPLS TE tunnel, in the range of 1 to 4294967295, in kbps. Usage guidelines If you do not specify a CT for the tunnel, the tunnel is available for CT 0.
Predefined user roles network-admin Parameters down: Configures the bandwidth decrease percentage threshold that triggers the IGP to flood TE information. When the percentage of the link reservable-bandwidth decrease to the maximum link reservable bandwidth reaches or exceeds the threshold, the IGP floods the TE information and updates the TE database (TEDB). up: Configures the bandwidth increase percentage threshold that triggers the IGP to flood TE information.
Parameters associated reverse-lsp lsp-name lsp-name: Configures an associated bidirectional MPLS TE tunnel, and specifies the associated reverse CRLSP. The lsp-name argument specifies the name of a static CRLSP (the reverse CRLSP), a case-sensitive string of 1 to 15 characters. associated reverse-lsp lsr-id ingress-lsr-id tunnel-id tunnel-id: Configures an associated bidirectional MPLS TE tunnel, and specifies the associated reverse CRLSP.
[Sysname-Tunnel0] mpls te bidirectional co-routed passive reverse-lsp lsr-id 10.0.0.1 tunnel-id 1 Related commands display mpls te tunnel-interface mpls te enable (interface view) Use mpls te enable to enable MPLS TE on an interface. Use undo mpls te enable to disable MPLS TE on an interface. Syntax mpls te enable undo mpls te enable Default MPLS TE is disabled on an interface.
Default MPLS TE is disabled for an IS-IS process. Views IS-IS view Predefined user roles network-admin Parameters level-1: Enables MPLS TE for IS-IS at Level-1. level-2: Enables MPLS TE for IS-IS at Level-2. Usage guidelines If you do not specify an IS-IS level, this command enables MPLS TE for IS-IS at both Level-1 and Level-2. IS-IS TE uses a sub-TLV of the extended IS reachability TLV (type 22) to carry TE attributes.
Views OSPF area view Predefined user roles network-admin Usage guidelines OSPF TE uses Type-10 opaque LSAs to carry the TE attributes for a link. Before you configure OSPF TE, you must enable opaque LSA advertisement and reception by using the opaque-capability enable command. For more information about opaque LSA advertisement and reception, see Layer 3—IP Routing Configuration Guide. Examples # Enable MPLS TE for OSPF process 1 in OSPF area 1.
• The ingress node attempts to set up a new CRLSP. After the new CRLSP is set up successfully, traffic is forwarded on the new CRLSP. When a primary CRLSP does not need bandwidth protection, it prefers to use a bypass tunnel that does not provide bandwidth protection. No bandwidth guarantee is required after FRR. When a primary CRLSP needs bandwidth protection, it prefers to use the bypass tunnel that can protect bandwidth as much as possible to provide bandwidth guarantee after FRR.
Hardware Value range MSR2000 0 to 1023 MSR3000 0 to 2047 MSR4000 0 to 4095 Usage guidelines The protected interface (where the command is executed) is the outgoing interface of a primary CRLSP. When the outgoing interface is down or a neighbor failure is detected through the BFD or hello mechanism, the traffic of the primary CRLSP is switched to the bypass tunnel. When you use this command, follow these restrictions and guidelines: • You can specify up to three bypass tunnels for an interface.
Predefined user roles network-admin Parameters hold-time value: Specifies the period of time that IGP waits to advertise a down event of the MPLS TE tunnel, in the range of 0 to 4294967295 milliseconds. The default value is 0, which means when the MPLS TE tunnel is down, IGP immediately advertises the tunnel down event. Usage guidelines Forwarding adjacency is a method to direct traffic to an MPLS TE tunnel or tunnel bundle.
Parameters absolute value: Assigns an absolute metric to the MPLS TE tunnel or tunnel bundle, an integer in the range of 1 to 65535. An absolute metric is directly used as the MPLS TE tunnel or tunnel bundle's metric. relative value: Assigns a relative metric to the MPLS TE tunnel or tunnel bundle, an integer in the range of –10 to +10. The MPLS TE tunnel or tunnel bundle's metric is the assigned metric value plus the IGP metric.
tunnel bundle in route calculation. Other devices do not consider the MPLS TE tunnel or tunnel bundle in route calculation. If you do not specify the IGP in this command, both OSPF and IS-IS will include the MPLS TE tunnel or tunnel bundle in route calculation. On the same tunnel interface or tunnel bundle interface, the mpls te igp advertise command and the mpls te igp shortcut command cannot both take effect. The newly configured command overwrites the previous command.
The link attribute bits corresponding to the 0 bits in the affinity mask are not checked. For example, if the affinity is 0xFFFFFFF0 and the mask is 0x0000FFFF, a link is available for the tunnel when its link attribute bits meet the following requirements: • The highest 16 bits each can be 0 or 1 (no requirements). • The 17th through 28th bits must have at least one bit whose value is 1. • The lowest four bits must be 0.
Use undo mpls te max-link-bandwidth to restore the default. Syntax mpls te max-link-bandwidth bandwidth-value undo mpls te max-link-bandwidth Default The maximum link bandwidth for MPLS TE traffic is 0 kbps. Views Interface view Predefined user roles network-admin Parameters bandwidth-value: Specifies the maximum link bandwidth in the range of 1 to 4294967295 kbps. Usage guidelines The device carries the maximum link bandwidth in advertised IGP routes.
Views Interface view Predefined user roles network-admin Parameters bandwidth-value: Specifies the maximum reservable bandwidth of the link (the value of BC 0), in the range of 1 to 4294967295 kbps. bc1 bc1-bandwidth: Specifies the value of BC 1, in the range of 1 to 4294967295 kbps. The default value is 0. Usage guidelines The device carries the bandwidth values configured by this command in IGP route advertisements.
Default The maximum reservable bandwidth of a link is 0 kbps and each BC is 0 kbps. Views Interface view Predefined user roles network-admin Parameters bandwidth-value: Specifies the maximum reservable bandwidth of the link, in the range of 1 to 4294967295 kbps. bc0 bc0-bandwidth: Specifies the value of BC 0, in the range of 1 to 4294967295 kbps. By default, BC 0 is 0 kbps. bc1 bc1-bandwidth: Specifies the value of BC 1, in the range of 1 to 4294967295 kbps. By default, BC 1 is 0 kbps.
mpls te max-reservable-bandwidth rdm Use mpls te max-reservable-bandwidth rdm to configure the BCs in IETF DS-TE RDM model. Use undo mpls te max-reservable-bandwidth rdm to restore the default. Syntax mpls te max-reservable-bandwidth rdm bandwidth-value [ bc1 bc1-bandwidth ] [ bc2 bc2-bandwidth ] [ bc3 bc3-bandwidth ] undo mpls te max-reservable-bandwidth rdm Default Each BC is 0 kbps.
• mpls te max-reservable-bandwidth • mpls te max-reservable-bandwidth mam mpls te metric Use mpls te metric to assign a TE metric to the link. Use undo mpls te metric to restore the default. Syntax mpls te metric value undo mpls te metric Default A link uses its IGP metric as its TE metric. Views Interface view Predefined user roles network-admin Parameters value: Specifies a TE metric for the link, in the range of 1 to 4294967295.
Default MPLS TE uses the dynamically calculated path to establish a CRLSP. Views Tunnel interface view Predefined user roles network-admin Parameters preference value: Set a preference value for the specified path, in the range of 1 to 10. The smaller the value, the higher the preference. dynamic: Uses the dynamically calculated path to establish the CRLSP. explicit-path path-name: Uses the specified explicit path to establish the CRLSP.
Predefined user roles network-admin Parameters igp: Uses the IGP metric. te: Uses the TE metric. Usage guidelines Each MPLS TE link has two metrics: IGP metric and TE metric. By using the two metrics, you can select different tunnels for different classes of traffic.
Parameters setup-priority: Specifies the setup priority in the range of 0 to 7. A smaller number represents a higher priority. hold-priority: Specifies the holding priority in the range of 0 to 7. A smaller number represents a higher priority. If you do not specify this argument, the holding priority is the same as the setup priority. Usage guidelines The setup priority and holding priority of an MPLS TE tunnel determines the importance of the tunnel.
Parameters label: Enables both route recording and label recording. If you do not specify this keyword, this command enables only route recording. Usage guidelines Route recording records the nodes that an MPLS TE tunnel traverses. Label recording records the label assigned by each node. The recorded information helps you know about the path used by the MPLS TE tunnel and the label distribution information, and when the tunnel fails, it helps you locate the fault.
On the same tunnel interface, the mpls te reoptimization command cannot be used together with these commands: mpls te auto-bandwidth adjustment, mpls te route-pinning, mpls te backup, and mpls te resv-style ff. Examples # Enable reoptimization for tunnel 0, and set the reoptimization frequency to 43200 seconds (12 hours).
Views Tunnel interface view Predefined user roles network-admin Parameters ff: Specifies the resource reservation style as fixed filter (FF). se: Specifies the resource reservation style as shared explicit (SE). Usage guidelines This command applies only to MPLS TE tunnels established by RSVP-TE. FF—Resources are reserved for individual senders and cannot be shared among senders on the same session. SE—Resources are reserved for senders on the same session and shared among them.
is established successfully or the number of tunnel setup attempts reaches the maximum. If the tunnel cannot be established when the number of attempts reaches the maximum, the ingress waits for a longer period and then repeats the previous process. Examples # Set the maximum number of tunnel setup attempts to 20.
mpls te signaling Use mpls te signaling to configure the signaling protocol for an MPLS TE tunnel interface. Use undo mpls te signaling to restore the default. Syntax mpls te signaling { rsvp-te | static } undo mpls te signaling Default MPLS TE uses RSVP-TE to establish tunnels. Views Tunnel interface view Predefined user roles network-admin Parameters rsvp-te: Uses the RSVP-TE signaling protocol to establish a tunnel. static: Uses a static CRLSP to establish a tunnel.
Views Tunnel interface view Predefined user roles network-admin Parameters lsp-name: Specifies a static CRLSP by its name, a case-sensitive string of 1 to 15 characters. Usage guidelines This command takes effect only when the mpls te signaling static command has been configured in tunnel interface view. Execute this command on the ingress node. The static CRLSP specified must have been created by using the static-cr-lsp ingress command.
Usage guidelines After failing to establish an MPLS TE tunnel, the tunnel ingress node waits for the tunnel setup retry interval. Then it tries to set up the tunnel until the tunnel is established successfully or the number of tunnel setup attempts reaches the maximum (configured by the mpls te retry command). If the tunnel cannot be established when the number of attempts reaches the maximum, the ingress waits for a longer period and then repeats the previous process.
• Link IP address—IP address of an interface on the device, identifying a link. • Device LSR ID—Identifies the device. The address of a strict node must be a link IP address. The address of a loose node can be a link IP address or the device LSR ID. CSPF excludes the links or devices specified by exclude from path calculation, and uses the links specified by include in ascending order of indexes to establish a CRLSP.
Related commands • auto-tunnel backup • tunnel-number path-metric-type Use path-metric-type to specify the link metric type to be used for path selection when a metric type is not explicitly specified for a tunnel. Use undo path-metric-type to restore the default. Syntax path-metric-type { igp | te } undo path-metric-type Default A tunnel uses TE metrics of links for path selection when no metric type is specified for the tunnel.
• mpls te path-metric-type reset mpls te auto-bandwidth-adjustment timers Use reset mpls te auto-bandwidth-adjustment timers to reset the automatic bandwidth adjustment function. Syntax reset mpls te auto-bandwidth-adjustment timers Views User view Predefined user roles network-admin Usage guidelines After this command is executed, the system clears the output rate sampling information and the remaining time to the next bandwidth adjustment.
For more information about SNMP notifications, see Network Management and Monitoring Configuration Guide. Examples # Enable SNMP notifications for MPLS TE. system-view [Sysname] snmp-agent trap enable te te-subtlv Use te-subtlv to specify the types of the sub-TLVs for carrying DS-TE parameters. Use undo te-subtlv to restore the default.
timers removal unused Use timers removal unused to configure a removal timer for unused bypass tunnels. Use undo timers removal unused to restore the default. Syntax timers removal unused seconds undo timers removal unused Default A bypass tunnel is removed after it is unused for 3600 seconds. Views MPLS TE auto-FRR view Predefined user roles network-admin Parameters seconds: Specifies the period of time after which an unused bypass tunnel is removed, in the range of 300 to 604800 seconds.
Syntax tunnel-number min min-number max max-number undo tunnel-number Default No interface number range is specified, and the PLR cannot set up a bypass tunnel automatically. Views MPLS TE auto-FRR view Predefined user roles network-admin Parameters min min-number: Specifies the minimum interface number for automatically created bypass tunnels.
• The interface number range specified by this command can include the interface numbers used by the tunnel interfaces created by the interface tunnel command. However, those interface numbers cannot be used for bypass tunnels, unless they are released by the undo interface tunnel command. Examples # Specify interface numbers 800 to 900 for automatically created bypass tunnels.
Static CRLSP commands display mpls static-cr-lsp Use display mpls static-cr-lsp to display information about static CRLSPs. Syntax display mpls static-cr-lsp [ lsp-name lsp-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator Parameters lsp-name lsp-name: Displays information about the static CRLSP specified by its name, a case-sensitive string of 1 to 15 characters. If you do not specify this option, the command displays information about all static CRLSPs.
In-Label : Null Out-Label : 60 Out-Interface : GE2/1/1 Nexthop : 20.1.1.2 Class Type : CT0 Bandwidth : 0 kbps LSP State : Up Table 41 Command output Field Description LSP Name Name of the static CRLSP. LSR Type LSR type of the local node on the static CRLSP: Ingress, Transit, or Egress. In-Label Incoming label. Out-Label Outgoing label. Out-Interface Output interface. Nexthop Next hop address. Class Type Class type of the static CRLSP: CT 0, CT 1, CT 2, or CT 3.
Predefined user roles network-admin Parameters lsp-name: Specifies a name for the static CRLSP, a case-sensitive string of 1 to 15 characters. in-label in-label-value: Specifies an incoming label in the range of 16 to 1023. Usage guidelines The static CRLSP must not have the same incoming label as an existing static LSP or static PW. If it is the same, the static CRLSP will not be available, even if you modify the incoming label of the static LSP or the static PW.
bandwidth: Specifies the CT and required bandwidth for the static CRLSP. If you do not specify this keyword, the bandwidth required by the static CRLSP is 0 kbps. If you specify this keyword but do not specify a CT, the static CRLSP belongs to CT 0. ct0: Specifies CT 0 for the static CRLSP. ct1: Specifies CT 1 for the static CRLSP. ct2: Specifies CT 2 for the static CRLSP. ct3: Specifies CT 3 for the static CRLSP.
Parameters lsp-name: Specifies a name for the static CRLSP, a case-sensitive string of 1 to 15 characters. in-label in-label-value: Specifies an incoming label in the range of 16 to 1023. nexthop next-hop-addr: Specifies the next hop IP address. outgoing-interface interface-type interface-number: Specifies an outgoing interface by its type and number. The specified interface must be a P2P interface. out-label out-label-value: Specifies an outgoing label, a value of 0, 3, or in the range of 16 to 1023.
RSVP commands authentication challenge Use authentication challenge to enable the RSVP challenge-response handshake function globally or for a specific RSVP neighbor. Use undo authentication challenge to disable the challenge-response handshake function globally or for a specific RSVP neighbor. Syntax authentication challenge undo authentication challenge Default The RSVP challenge-response handshake function is disabled.
system-view [Sysname] rsvp [Sysname-rsvp] peer 1.1.1.9 [Sysname-rsvp-peer-1.1.1.
message digest received. If they match, the receiver accepts the message. Otherwise, it drops the message. RSVP authentication can be configured in the following views: • RSVP view—Configuration applies to all RSVP security associations. • RSVP neighbor view—Configuration applies only to RSVP security associations with the specified RSVP neighbor. • Interface view—Configuration applies only to RSVP security associations established on the current interface.
authentication lifetime Use authentication lifetime in RSVP view to configure the global idle timeout for RSVP security associations. Use authentication lifetime in RSVP neighbor view to configure the idle timeout for RSVP security associations with a specific RSVP neighbor. Use authentication lifetime to restore the default. Syntax authentication lifetime life-time undo authentication lifetime Default The idle timeout for an RSVP security association is 1800 seconds.
# Configure the idle timeout as 100 seconds for the security associations with the RSVP neighbor 1.1.1.9. system-view [Sysname] rsvp [Sysname-rsvp] peer 1.1.1.9 [Sysname-rsvp-peer-1.1.1.
When the receiver receives an RSVP message, it compares the sequence number of the last accepted RSVP message with the sequence number of the newly received RSVP message. • If the new sequence number is greater than the last sequence number, RSVP accepts the message and updates the last sequence number with the new sequence number. • If the new sequence number equals the last sequence number, RSVP regards the message a replay message and discards the message.
rsvp authentication window-size • display rsvp Use display rsvp to display RSVP information. Syntax display rsvp [ interface [ interface-type interface-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters interface: Displays RSVP information on interfaces. interface-type interface-number: Displays RSVP information on the interface specified by its type and number.
Field Description Refresh interval Interval for refreshing Path and Resv messages, in seconds. Keep multiplier PSB and RSB timeout multiplier. Hello interval Interval for sending hello requests, in seconds. DSCP value DSCP value for outgoing RSVP packets. Hello lost Maximum number of consecutive lost or erroneous hellos allowed. Authentication RSVP authentication state. Lifetime Idle timeout for RSVP security associations, in seconds.
Bypass tunnels: Tunnel0, Tunnel1, Tunnel2 Table 43 Command output Field Description Logical interface handle Logical interface handle, used to distinguish logical outgoing interfaces on the RSVP interface. State Interface state recorded by RSVP: UP or Down. IP address IP address of the current interface used by RSVP. MPLS TE MPLS TE state on the interface. RSVP RSVP state on the interface. Hello State of the hello extension function on the interface. BFD BFD state on the interface.
to ip-address: Displays information about the security associations with the specified destination IP address. verbose: Displays detailed information about RSVP security associations. If you do not specify this keyword, the command displays brief information about RSVP security associations. Usage guidelines If you do not specify the from ip-address to ip-address options, this command displays information about the security associations established with all RSVP neighbors.
57.10.10.2 57.10.10.1 Send Interface 000103000000 280s Table 45 Command output Field Description From RSVP authentication source IP address. To RSVP authentication destination IP address. Direction of the security association: • Receive—Receive security association, used to authenticate messages received from an RSVP neighbor. Mode • Send—Send security association, used to authenticate messages sent to an RSVP neighbor.
Field Description Direction of the security association: Mode • Receive—Receive security association, used to authenticate messages received from an RSVP neighbor. • Send—Send security association, used to authenticate messages sent to an RSVP neighbor. Type of the security association: Type • Peer—Security association established in RSVP neighbor view. • Interface—Security association established in interface view. • Global—Security association established in RSVP view.
• rsvp authentication challenge • rsvp authentication key • rsvp authentication lifetime • rsvp authentication window-size display rsvp lsp Use display rsvp lsp to display information about CRLSPs established by RSVP.
Field Description Tunnel-name The value for a tunnel name is Sysname_ttunnel-ID, where Sysname represents the device name, and tunnel-ID represents the ID of the tunnel. You can configure the device name by executing the sysname command in system view. This field contains a maximum of 80 characters, and displays the first 77 characters and three dots (.) if the name contains more than 80 characters. # Display detailed information about all CRLSPs established by RSVP.
5.5.5.9/32 Flag: 0x20 (No FRR/Node-ID) 57.40.40.3/32 Flag: 0x00 (No FRR) 57.40.40.1/32 Flag: 0x40 (No FRR/In-Int) 3 Flag: 0x01 (Global label) 3.3.3.9/32 Flag: 0x20 ((No FRR/Node-ID) Fast Reroute protection: None Table 48 Command output Field Description Tunnel name The value for a tunnel name is Sysname_ttunnel-ID, where Sysname represents the device name, and tunnel-ID represents the ID of the tunnel. You can configure the device name by executing the sysname command in system view.
Field Description Incoming label of the FRR bypass tunnel. FRR inner label This field is displayed only when a bypass tunnel is bound. Name of the bypass tunnel. Bypass tunnel This field is displayed only when a bypass tunnel is bound. Related commands • display rsvp request • display rsvp reservation • display rsvp sender display rsvp peer Use display rsvp peer to display RSVP neighbor information.
Field Description Local hello state: State • Idle—Hello extension is disabled. • Init—Hello extension is enabled. The local device failed to exchange hellos with the neighbor or hello exchanges are in progress. • Up—Hello extension is enabled. The local device successfully exchanged hellos with the neighbor. Role of the local device in the neighbor relationship: Type • Active—The local device actively sends hello requests to the neighbor.
Field Description Src instance Local device instance carried in the hello sent to the neighbor. Dst instance Neighbor device instance carried in the last hello received from the neighbor. Refresh reduction State of the Srefresh function on the neighbor, Enabled or Disabled. GR state of the neighbor: Graceful Restart state • • • • Invalid—Neighbor is not GR capable, or GR is disabled locally. Ready—Neighbor is GR capable. Restarting—Neighbor is restarting. Recovering—Neighbor is recovering.
3.3.3.9 1.1.1.9 1 57.10.10.1 SE Table 51 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Resource reservation style: Style • SE—Shared-explicit style. • FF—Fixed-filter style. # Display detailed information about the RSVP resource reservation requests sent to all upstream devices. display rsvp request verbose Destination: 3.3.3.9 Source: 1.1.1.9 Tunnel ID: 1 Style: SE Previous hop: 57.10.10.
Related commands • display rsvp lsp • display rsvp reservation • display rsvp sender display rsvp reservation Use display rsvp reservation to display information about RSVP resource reservation states.
# Display detailed information about all RSVP resource reservation states. display rsvp reservation verbose Destination: 3.3.3.9 Source: 1.1.1.9 Tunnel ID: 1 Style: SE Nexthop: 57.20.20.1 Nexthop LIH: 0x35 Received message epoch: 0 Received message ID: 0 In-Interface: GE2/1/4 Unknown object number: 0 Flow descriptor 1: Flow specification: Mean rate (CIR): 50.00 kbps Mean burst size (CBS): 1000.
Field Description Flag value and its meaning in an RRO: • • • • • • • • Flag No FRR—FRR is not configured. FRR Avail—FRR is available. In use—FRR has occurred. BW—Bandwidth protection. Node-Prot—Node protection. Node-ID—The IP address in the RRO is the LSR ID of the node. In-Int—The IP address in the RRO is that of the incoming interface. Global label—Per-platform label space.
3.3.3.9 1.1.1.9 1 5 SE 0.00 3.3.3.9 2.2.2.9 253 17767 SE 125.00 Table 55 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Resource reservation style: Style • SE—Shared-explicit style. • FF—Fixed-filter style. Bitrate Tunnel bandwidth in kbps. # Display detailed information about all RSVP path states. display rsvp sender verbose Destination: 3.3.3.9 Source: 1.1.1.9 Tunnel ID: 1 Style: SE Sender address: 1.1.1.
Destination: 3.3.3.9 Source: 2.2.2.9 Tunnel ID: 253 Style: SE Sender address: 2.2.2.9 LSP ID: 17767 Setup priority: 7 Holding priority: 7 FRR desired: Yes BW protection desired: Yes Received upstream label: 1115 Sent upstream label: 1115 Previous hop: 57.10.10.1 Previous hop LIH: 0xf0008 Mean rate (CIR): 125.00 kbps Mean burst size (CBS): 0.
Field Description Previous hop LIH Logical interface handle of the previous hop. QoS service QoS service type: Controlled-Load or Guaranteed. Received message Epoch Value of the Epoch field in the Message ID object of the received message. Received message ID Message ID in the received message. Sent message epoch Value of the Epoch field in the Message ID object of the sent message. Sent message ID Message ID in the sent message. In-Interface Incoming interface of the message.
Field Description Point of Local Repair (PLR) information: Fast Reroute PLR • None—Not bound to an FRR bypass tunnel. • Ready—Bound to an FRR bypass tunnel. No FRR has occurred. • Active—Bound to an FRR bypass tunnel. An FRR has occurred. FRR inner label Incoming label of the FRR bypass tunnel. Only the PLR node displays this field. Bypass tunnel Name of the bypass tunnel. Only the PLR node displays this field. Sender address Address of the path message sender after an FRR.
If you specify the interface interface-type interface-number option, this command displays RSVP statistics on the specified interface. Examples # Display global RSVP statistics.
Resv 3 3 PathError 0 0 ResvError 0 0 PathTear 0 0 ResvTear 0 0 ResvConf 0 0 Bundle 0 0 Ack 0 0 Srefresh 0 0 Hello 0 0 Challenge 0 0 Response 0 0 Error 0 0 Table 57 Command output Field Description PSB Number of added/deleted PSBs. RSB Number of added/deleted RSBs. LSP Number of added/deleted LSPs. Path Number of received/sent Path messages. Resv Number of received/sent Resv messages. PathError Number of received/sent Path Error messages.
Syntax dscp dscp-value undo dscp Default The DSCP value for outgoing RSVP packets is 48. Views RSVP view Predefined user roles network-admin Parameters dscp-value: Specifies a DSCP value in the range of 0 to 63. Usage guidelines The DSCP value of an IP packet specifies the priority level of the packet and affects the transmission priority of the packet. Examples # Set the DSCP value for outgoing RSVP packets to 56.
The local device can act as a GR helper for the RSVP neighbor connected to an interface only after the RSVP GR function and the RSVP hello extension function are enabled on that interface by using the graceful-restart enable command and the rsvp hello enable command, respectively. Examples # Enable RSVP GR globally.
hello lost Use hello lost to configure the maximum number of consecutive lost or erroneous hellos. Use undo hello lost to restore the default. Syntax hello lost times undo hello lost Default The maximum number of consecutive lost or erroneous hellos is 4. Views RSVP view Predefined user roles network-admin Parameters times: Specifies the maximum number of consecutive lost or erroneous hellos, in the range of 3 to 10.
undo keep-multiplier Default The PSB and RSB timeout multiplier is 3. Views RSVP view Predefined user roles network-admin Parameters number: Specifies the PSB and RSB timeout multiplier in the range of 3 to 255. Usage guidelines The PSB and RSB timeout is computed in this formula: Timeout = (keep-multiplier+0.5) × 1.5 × refresh-time. Refresh-time is the interval at which the peer device advertises the Path and Resv messages to the local device.
Usage guidelines After you enter RSVP neighbor view by using this command, you can configure RSVP authentication information for the specified RSVP neighbor, such as the authentication key and idle timeout of the security association.
Views RSVP view Predefined user roles network-admin Parameters interval: Specifies the interval at which RSVP refreshes Path and Resv messages, in the range of 10 to 65535 seconds. Usage guidelines This command does the following: • Determines the interval for sending Path and Resv messages. • Adds the locally configured refresh interval in the sent Path and Resv messages, so the peer device can use this value to calculate the PSB and RSB timeout.
# Clear the RSVP security association sourced from 1.1.1.1 to 2.2.2.2. reset rsvp authentication from 1.1.1.1 to 2.2.2.2 Related commands display rsvp authentication reset rsvp statistics Use reset rsvp statistics to clear RSVP statistics. Syntax reset rsvp statistics [ interface [ interface-type interface-number ] ] Views User view Predefined user roles network-admin Parameters interface: Clears RSVP statistics on interfaces.
Views System view Predefined user roles network-admin Usage guidelines To enable global RSVP, you must enable both global RSVP (by using the rsvp command) and global MPLS TE (by using the mpls te command). Examples # Enable RSVP globally and enter RSVP view. system-view [Sysname] rsvp [Sysname-rsvp] Related commands • mpls te • rsvp enable rsvp authentication challenge Use rsvp authentication challenge to enable RSVP challenge-response handshake on an interface.
• RSVP neighbor view—Configuration applies only to RSVP security associations with the specified RSVP neighbor. • Interface view—Configuration applies only to RSVP security associations established on the current interface. Examples # Enable RSVP challenge-response handshake on interface GigabitEthernet 2/1/1.
Usage guidelines RSVP authentication ensures integrity of RSVP messages, preventing fake resource reservation requests from occupying network resources. RSVP uses MD5 to calculate a digest for the authentication key and the message body, adds the digest to the message, and sends the message. When the peer receives the message, it performs the same calculation and compares the calculated digest with the digest in the message.
rsvp authentication lifetime Use rsvp authentication lifetime to configure the idle timeout for RSVP security associations on an interface. Use undo rsvp authentication lifetime to restore the default. Syntax rsvp authentication lifetime life-time undo rsvp authentication lifetime Default The idle timeout for RSVP security associations is 1800 seconds on an interface.
Related commands • authentication challenge • authentication key • authentication lifetime • authentication window-size • display rsvp authentication • reset rsvp authentication • rsvp authentication challenge • rsvp authentication key • rsvp authentication window-size rsvp authentication window-size Use rsvp authentication window-size to configure the RSVP authentication window size, which is the maximum number of authenticated RSVP messages that can be received out of sequence on an inte
• If the new sequence number is smaller than the last sequence number but greater than the new sequence number minus the window size, and has never been received before, RSVP accepts the message. If the new sequence number has been received before, RSVP regards the message a replay message and discards the message. • If the new sequence number is smaller than the new sequence number minus the window size, RSVP regards the message invalid and discards the message.
Views Interface view Predefined user roles network-admin Usage guidelines By sending hellos, RSVP cannot promptly detect neighbor status. By executing this command on an interface, a BFD session is established to detect the link status to the RSVP neighbor on the interface.
rsvp hello enable Use rsvp hello enable to enable RSVP hello extension. Use undo rsvp hello enable to disable RSVP hello extension. Syntax rsvp hello enable undo rsvp hello enable Default RSVP hello extension is disabled. Views Interface view Predefined user roles network-admin Usage guidelines With RSVP hello extension enabled, an interface sends and receives hello messages to detect the neighbor status. Examples # Enable RSVP hello extension on interface GigabitEthernet 2/1/1.
Parameters increment-value: Specifies the RSVP message retransmission increment in the range of 1 to 10. Usage guidelines After the reliable RSVP message delivery function is enabled by using the rsvp reduction srefresh reliability command, the retransmission increment and retransmission interval together determine the time for the next transmission of the RSVP message. For more information, see the usage guidelines in the rsvp reduction srefresh command.
[Sysname] interface gigabitethernet 2/1/1 [Sysname-GigabitEthernet2/1/1] rsvp reduction retransmit interval 1000 Related commands • rsvp reduction retransmit increment • rsvp reduction srefresh rsvp reduction srefresh Use rsvp reduction srefresh to enable summary refresh and reliable RSVP message delivery. Use undo rsvp reduction srefresh to disable summary refresh and reliable RSVP message delivery.
sending back a message that includes the Message_ID_ACK object. If the sender does not receive a Message_ID_ACK within the retransmission interval (Rf), it retransmits the message when Rf expires and sets the next transmission interval to (1 + delta) × Rf. The sender repeats this process until it receives the Message_ID_ACK before the retransmission time expires or it has transmitted the message three times. The initial value of Rf is configured by the rsvp reduction retransmit interval command.
Tunnel policy commands display mpls tunnel Use display mpls tunnel to display tunnel information. Syntax display mpls tunnel { all | statistics | [ vpn-instance vpn-instance-name ] destination { tunnel-ipv4-dest | tunnel-ipv6-dest } } Views Any view Predefined user roles network-admin network-operator Parameters all: Displays all tunnels. statistics: Displays tunnel statistics. vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Field Description VPN Instance VPN instance name. If the tunnel belongs to the public network, this field displays a hyphen (-). # Display tunnel statistics. display mpls tunnel statistics LSP : 1 GRE : 0 CRLSP: 0 Table 59 Command output Field Description LSP Number of LSP tunnels. GRE Number of GRE tunnels. CRLSP Number of CRLSPs (MPLS TE tunnels). preferred-path Use preferred-path to specify a preferred tunnel in a tunnel policy.
Hardware Value range MSR2000 0 to 1023 MSR3000 0 to 2047 MSR4000 0 to 4095 Usage guidelines For an MPLS VPN, HP recommends that you specify a preferred tunnel and make sure the destination address of the tunnel/tunnel bundle interface identifies the peer PE. In this method, the local PE forwards traffic destined for the peer PE over the tunnel/tunnel bundle.
load-balance-number number: Specifies the number of tunnels for load balancing, in the range of 1 to 32. Usage guidelines A tunnel type closer to the select-seq keyword has a higher priority, and only the tunnel types specified in this command can be used. For example, the select-seq lsp gre load-balance-number 3 command gives LSP higher priority over GRE. If no LSP is available or the number of LSPs is less than 3, VPN uses GRE tunnels.
MPLS L3VPN commands In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. address-family ipv4 (VPN instance view) Use address-family ipv4 in VPN instance view to enter IPv4 VPN view. Use undo address-family ipv4 to remove all configurations from IPv4 VPN view.
Views BGP view, BGP-VPN instance view Predefined user roles network-admin Usage guidelines A VPNv4 address comprises an RD and an IPv4 prefix. VPNv4 routes comprise VPNv4 addresses. For a PE to exchange BGP VPNv4 routes with a BGP peer, you must enable that peer by executing the peer enable command in BGP VPNv4 address family view or BGP-VPN VPNv4 address family view. In BGP VPNv4 address family view, you can configure the following settings: • BGP VPNv4 route attributes, such as the preferred value.
Parameters text: Specifies a description for the VPN instance, a case-sensitive string of 1 to 79 characters. Examples # Configure a description of This is vpn1 for VPN instance vpn1. system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] description This is vpn1 display bgp routing-table ipv4 unicast inlabel Use display bgp routing-table ipv4 unicast inlabel to display incoming labels for BGP IPv4 unicast routes.
Field Description Status Route status codes. See Table 62. Origin Route origin codes. See Table 62. In/Out Label Incoming/outgoing label. display bgp routing-table ipv4 unicast outlabel Use display bgp routing-table ipv4 unicast outlabel to display outgoing labels for BGP IPv4 unicast routes.
s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete * > Network NextHop OutLabel 2.2.2.9/32 1.1.1.2 1151 # Display outgoing labels for all public BGP IPv4 unicast routes for the standby process. display bgp routing-table ipv4 outlabel standby slot 1 Total number of routes: 1 BGP local router ID is 2.2.2.
Views Any view Predefined user roles network-admin network-operator Parameters route-distinguisher route-distinguisher: Specifies an RD, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1.
Usage guidelines If you do not specify any parameters, this command displays information about all BGP VPNv4 routes. If you specify network-address mask or network-address mask-length, this command displays information about the BGP VPNv4 route that exactly matches the specified address and mask. If you specify only network-address, the system ANDs the network address with the mask of a route.
Origin: i - IGP, e - EGP, ? - incomplete Route distinguisher: 100:1(vpn1) Total number of routes: 6 Network NextHop MED 10.1.1.0/24 10.1.1.2 0 32768 ? 10.1.1.1 0 0 65410? 127.0.0.1 0 32768 ? * >i 10.3.1.0/24 3.3.3.9 0 0 ? * >e 192.168.1.0 10.1.1.1 0 0 65410? * 3.3.3.9 0 0 65420? * > * e * > 10.1.1.2/32 i LocPrf 100 100 PrefVal Path/Ogn # Display information about BGP VPNv4 routes matching AS_PATH list 1 for the active process.
Origin: i - IGP, e - EGP, ? - incomplete Total number of routes from all PEs: 2 Route distinguisher: 100:1(vpn1) Total number of routes: 6 Network NextHop MED 10.1.1.0/24 10.1.1.2 0 32768 ? 10.1.1.1 0 0 65410? 127.0.0.1 0 32768 ? * >i 10.3.1.0/24 3.3.3.9 0 0 ? * >e 192.168.1.0 10.1.1.1 0 0 65410? * 3.3.3.9 0 100 0 65420? * > * e * > 10.1.1.
Origin: i - IGP, e - EGP, ? - incomplete Route distinguisher: 200:1 Total number of routes: 2 Network NextHop MED LocPrf PrefVal Path/Ogn * >i 10.3.1.0/24 3.3.3.9 0 100 0 ? * >i 192.168.1.0 3.3.3.9 0 100 0 65420? # Display brief information about all public BGP VPNv4 routes for the standby process. display bgp routing-table vpnv4 standby slot 1 BGP local router ID is 192.168.19.
Field Description NextHop Address of the next hop. MED MULTI_EXIT_DISC attribute. LocPrf Local preference value. PrefVal Preferred value. Path/Ogn AS_PATH and Origin attributes. # Display detailed information about BGP VPNv4 routes to 10.3.1.0/24 for the active process. display bgp routing-table vpnv4 10.3.1.0 24 BGP local router ID: 1.1.1.
QoS local ID : N/A # Display detailed information about BGP VPNv4 routes to 10.3.1.0/24 for the standby process. display bgp routing-table vpnv4 10.3.1.0 24 BGP local router ID: 1.1.1.9 Local AS number: 100 Route distinguisher: 100:1(vpn1) Total number of routes: 1 Paths: 1 available, 0 best BGP routing table information of 10.3.1.0/24: From : 3.3.3.9 (3.3.3.9) Rely nexthop : 172.1.1.2 Original nexthop: 3.3.3.
Route distinguisher: 100:1(vpn1) Total number of routes: 1 Paths: 1 available, 1 best BGP routing table information of 10.3.1.0/24: From : 3.3.3.9 (3.3.3.9) Rely nexthop : 172.1.1.2 Original nexthop: 3.3.3.9 OutLabel : 1279 Ext-Community : AS-path : (null) Origin : incomplete Attribute value : MED 0, localpref 100, pref-val 0 State : valid, internal, best, IP precedence : N/A QoS local ID : N/A # Display detailed information about BGP VPNv4 routes to 10.3.1.
Field Description Original nexthop Original next hop. If the route is learned from a BGP update, it is the next hop in the update message. Ext-Community Extended community attribute. BGP route attribute information: • • • • Attribute value MED—MED attribute. Localpref—Local preference. pref-val—Preferred value. pre—Protocol preference. Route status: • • • • • • State valid—Valid route. internal—Internal route. external—External route. local—Locally generated route.
# Display statistics about public BGP VPNv4 routes advertised to peer 3.3.3.9 for the active process. display bgp routing-table vpnv4 peer 3.3.3.9 advertised-routes statistics Advertised routes total: 2 # Display statistics about public BGP VPNv4 routes received from peer 3.3.3.9 for the active process. display bgp routing-table vpnv4 peer 3.3.3.
Examples # Display incoming labels for all BGP VPNv4 routes. display bgp routing-table vpnv4 inlabel Total number of routes: 2 BGP local router ID is 1.1.1.9 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Route distinguisher: 100:1 Total number of routes: 2 Network NextHop OutLabel InLabel 10.1.1.0/24 10.1.1.2 NULL 1279 * >e 192.168.1.0 10.1.1.
Usage guidelines The active BGP process backs up BGP peers and routing information to the standby BGP process only when BGP NSR is enabled. If BGP NSR is disabled, this command does not display anything when you execute it with the standby keyword. Examples # Display outgoing labels for all BGP VPNv4 routes for the active process. display bgp routing-table vpnv4 outlabel BGP local router ID is 1.1.1.
Table 68 Command output Field Description BGP Local router ID Router ID of the local BGP router. Status Route status codes. See Table 62. Origin Route origin codes. See Table 62. OutLabel Outgoing label. display ospf sham-link Use display ospf sham-link to display OSPF sham link information.
OSPF Process 1 with Router ID 125.1.1.1 Sham link Area Neighbor ID Source IP Destination IP State Cost 0.0.0.0 95.1.1.1 125.2.1.1 95.2.1.1 P-2-P 1 # Display OSPF sham link information for OSPF area 1. display ospf sham-link area 1 OSPF Process 1 with Router ID 125.1.1.1 Sham link: 125.2.1.1 --> 95.2.1.1 Neighbor ID: 95.1.1.1 State: Full Area: 0.0.0.
Field Description RD RD of the VPN instance. Create Time Time when the VPN instance was created. # Display detailed information about VPN instance vpn1.
Parameters domain-id: Specifies an OSPF domain ID, in one of these formats: • Integer, in the range of 0 to 4294967295. For example, 1. • Dotted decimal notation. For example, 0.0.0.1. • Dotted decimal notation:16-bit user-defined number in the range of 0 to 65535. For example, 0.0.0.1:512. secondary: Specifies a secondary domain ID. If you do not specify this keyword, the command specifies a primary domain ID.
Usage guidelines You can specify an export routing policy to filter advertised routes or modify their route attributes for the VPN instance. An export routing policy specified in VPN instance view applies to both IPv4 VPN and IPv6 VPN. An export routing policy specified in IPv4 VPN view or IPv6 VPN view applies to only IPv4 VPN or IPv6 VPN. IPv4/IPv6 VPN prefers the export routing policy specified in IPv4/IPv6 VPN view over the one specified in VPN instance view.
Parameters domain-id type-code1: Specifies the type code for domain ID. Valid values are hex numbers 0005, 0105, 0205, and 8005. router-id type-code2: Specifies the type code for router ID. Valid values are hex numbers 0107 and 8001. router-type type-code3: Specifies the type code for route type. Valid values are hex numbers 0306 and 8000. Examples # Configure the type codes of domain ID, router ID, and route type as hex numbers 8005, 8001, and 8000, respectively, for OSPF process 100.
system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] import route-policy poly-1 # Apply import routing policy poly-2 for IPv4 VPN vpn2. system-view [Sysname] ip vpn-instance vpn2 [Sysname-vpn-instance-vpn2] address-family ipv4 [Sysname-vpn-ipv4-vpn2] import route-policy poly-2 # Apply import routing policy poly-3 for IPv6 VPN vpn3.
To associate a new VPN instance with an interface, you must remove the previous association by using the undo ip binding vpn-instance command and then use the ip binding vpn-instance command to associate the new VPN instance with the interface. Examples # Associate interface GigabitEthernet 2/1/1 with VPN instance vpn1.
nesting-vpn Use nesting-vpn to enable the nested VPN function. Use undo nesting-vpn to disable the nested VPN function. Syntax nesting-vpn undo nesting-vpn Default The nested VPN function is disabled. Views BGP VPNv4 address family view Predefined user roles network-admin Usage guidelines To exchange VPNv4 routes with a peer in nested VPN, you must enable nested VPN and then execute the peer enable command to enable that peer in BGP VPNv4 view. Examples # Enable nested VPN.
ip-address: Specifies a peer by its IP address. Usage guidelines On an RR in an inter-AS option C scenario, you must configure next-hop-invariable to not change the next hop of VPNv4 routes advertised to EBGP peers and RR clients. This command is exclusive with the peer next-hop-local command. Examples # In BGP VPNv4 address family view, configure the device to not change the next hop of routes advertised to EBGP peer 1.1.1.1.
[Sysname-bgp-vpnv4] peer 1.1.1.1 upe peer upe route-policy Use peer upe route-policy to advertise routes permitted by a routing policy to a UPE. Use undo peer upe route-policy to restore the default. Syntax peer { group-name | ip-address } upe route-policy route-policy-name export undo peer { group-name | ip-address } upe route-policy export Default No routes are advertised to any peer.
Use undo policy vpn-target to disable route target filtering, permitting all incoming VPNv4 routes. Syntax policy vpn-target undo policy vpn-target Default The route target filtering function is enabled for received VPNv4 routes. Views BGP VPNv4 address family view Predefined user roles network-admin Usage guidelines In an inter-AS option B scenario, an ASBR must save all incoming VPNv4 routes and advertises those routes to the peer ASBR.
• 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1. Usage guidelines RDs enable VPNs to use the same address space. An RD and an IPv4 prefix comprise a unique VPN IPv4 prefix. To change the RD of a VPN instance, you must delete the RD with the undo route-distinguisher command, and then use the route-distinguisher command to configure a new RD. Examples # Configure RD 22:1 for VPN instance vpn1.
• import-route • route-tag • default tag HP recommends configuring the same external route tag for PEs in the same area. An external route tag is not transferred in any BGP extended community attribute. It takes effect only on the PEs that receive BGP routes and generate OSPF Type 5 or 7 LSAs. You can configure the same external route tag for different OSPF processes. Examples # In OSPF process 100, set the external route tag for redistributed VPN routes to 100.
specified threshold, the system gives an alarm message but still allows new active routes. If active routes in the VPN instance reach the maximum, no more active routes are added. simply-alert: Specifies that when active routes exceed the maximum number, the system still accepts active routes but generates a system log message. Usage guidelines A limit configured in VPN instance view applies to both the IPv4 VPN and the IPv6 VPN.
Views OSPF area view Predefined user roles network-admin Parameters source-ip-address: Specifies the source IP address of the sham link. destination-ip-address: Specifies the destination IP address of the sham link. cost cost: Specifies the cost of the sham link, in the range of 1 to 65535. The default cost is 1. dead dead-interval: Specifies the dead interval in the range of 1 to 32768 seconds. The default is 40 seconds.
2. Configure the same key for the sham link on the neighbor. After the local device receives a packet carrying the new key from the neighbor, it quits the key rollover process. 3. Execute the undo sham-link command on the local device and the neighbor to remove the old key. This operation can avoid attacks to the sham link that uses the old key and reduce bandwidth consumption by key rollover.
[Sysname] bgp 100 [Sysname-bgp] address-family vpnv4 [Sysname-bgp-vpnv4] rr-filter 10 snmp context-name Use snmp context-name to configure an SNMP context for a VPN instance. Use undo snmp context-name to restore the default. Syntax snmp context-name context-name undo snmp context-name Default No SNMP context is configured for a VPN instance. Views VPN instance view Predefined user roles network-admin Parameters context-name: Specifies an SNMP context, a case-sensitive string of 1 to 32 characters.
Examples # Configure SNMP context vpna for VPN instance vpna.
Default No tunnel policy is associated with a VPN instance. Views VPN instance view, IPv4 VPN view Predefined user roles network-admin Parameters tunnel-policy-name: Specifies a tunnel policy by its name, a case-insensitive string of 1 to 19 characters. Usage guidelines The VPN instance uses the specified tunnel policy to select tunnels for traffic.
vpn popgo Use vpn popgo to specify the VPN label processing mode as POPGO forwarding on an egress PE, which will pop the label for each packet and forward the packet out of the interface corresponding to the label. Use undo vpn popgo to restore the default. Syntax vpn popgo undo vpn popgo Default The VPN label processing mode is POP forwarding on an egress PE, which will pop the label for each packet and forward the packet through the FIB table.
Views VPN instance view Predefined user roles network-admin Parameters vpn-id: Specifies a VPN ID for the VPN instance, in the form of OUI:Index. Both OUI and Index are hex numbers. The OUI is in the range of 0 to FFFFFF, and the index is in the range of 0 to FFFFFFFF. Usage guidelines The VPN ID uniquely identifies the VPN instance. Different VPN instances must have different VPN IDs. The VPN ID cannot be 0:0. Examples # Configure VPN ID 20:1 for the VPN instance vpn1.
vpn-target (VPN instance view/IPv4 VPN view/IPv6 VPN view) Use vpn-target to configure route targets for a VPN instance. Use undo vpn-target to remove the specified or all route targets of a VPN instance. Syntax vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] undo vpn-target { all | vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] } Default No route targets are configured for a VPN instance.
system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] vpn-target 3:3 export-extcommunity [Sysname-vpn-instance-vpn1] vpn-target 4:4 import-extcommunity [Sysname-vpn-instance-vpn1] vpn-target 5:5 both # Configure route targets for the IPv4 VPN vpn2.
IPv6 MPLS L3VPN commands In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. This chapter describes only IPv6 MPLS L3VPN-specific commands. For information about the commands available for both IPv4 MPLS L3VPN and IPv6 MPLS L3VPN, see "MPLS L3VPN commands." address-family ipv6 (VPN instance view) Use address-family ipv6 to enter IPv6 VPN view.
Default The BGP VPNv6 address family is not created. Views BGP view Predefined user roles network-admin Usage guidelines A VPNv6 address comprises an RD and an IPv6 prefix. In IPv6 MPLS L3VPNs, PEs exchange BGP VPNv6 routes. For a PE to exchange BGP VPNv6 routes with a BGP peer, you must enable that peer by executing the peer enable command in BGP VPNv6 address family view.
network-operator Parameters route-distinguisher route-distinguisher: Specifies an RD, a string of 3 to 21 characters in one of these formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1.
Origin: i - IGP, e - EGP, ? - incomplete Total number of routes from all PEs: 1 Route distinguisher: 100:1(vpn1) Total number of routes: 4 * > Network : 2001:1:: PrefixLen : 96 NextHop : :: LocPrf : PrefVal : 32768 OutLabel : NULL MED : 0 Path/Ogn: ? * e Network : 2001:1:: PrefixLen : 96 NextHop : 2001:1::1 LocPrf : PrefVal : 0 OutLabel : NULL MED : 0 Path/Ogn: 65410? * > Network : 2001:1::2 PrefixLen : 128 NextHop : ::1 LocPrf : PrefVal : 32768 OutLabel : NULL MED : 0
Route distinguisher: 100:1(vpn1) Total number of routes: 4 * > Network : 2001:1:: PrefixLen : 96 NextHop : :: LocPrf : PrefVal : 32768 OutLabel : NULL MED : 0 Path/Ogn: ? * e Network : 2001:1:: PrefixLen : 96 NextHop : 2001:1::1 LocPrf : PrefVal : 0 OutLabel : NULL MED : 0 Path/Ogn: 65410? * > Network : 2001:1::2 PrefixLen : 128 NextHop : ::1 LocPrf : PrefVal : 32768 OutLabel : NULL MED : 0 Path/Ogn: ? * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.
* > Network : 2001:1:: PrefixLen : 96 NextHop : :: LocPrf : PrefVal : 32768 OutLabel : NULL MED : 0 Path/Ogn: ? * e Network : 2001:1:: PrefixLen : 96 NextHop : 2001:1::1 LocPrf : PrefVal : 0 OutLabel : NULL MED : 0 Path/Ogn: 65410? * > Network : 2001:1::2 PrefixLen : 128 NextHop : ::1 LocPrf : PrefVal : 32768 OutLabel : NULL MED : 0 Path/Ogn: ? * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.
MED : 0 OutLabel : NULL Path/Ogn: ? # Display information about public BGP VPNv6 routes received from 3.3.3.9. display bgp routing-table vpnv6 peer 3.3.3.9 received-routes Total number of routes: 1 BGP local router ID is 1.1.1.
Field Description Route status codes: • • • • • • • • Status codes * - valid—Valid route. > - best—Common best route. d – damped—Route damped for route flap. h - history—History route. i - internal—Internal route. e - external—External route. s - suppressed—Suppressed route. S - Stale—Stale route. Route origin: • i - IGP—Originated in the AS. The origin of summary routes and routes advertised by the network command is IGP. Origin • e - EGP—Learned through EGP.
Field Description BGP routing table information of 2001:1::/96 Advertisement information for the BGP route to 2001:1::/96. Advertised to VPN peers (1 in total) VPNv6 peers to which the route is advertised, and the number of peers. Inlabel Incoming label of the route. # Display statistics about public BGP VPNv6 routes advertised to peer 3.3.3.9. display bgp routing-table vpnv6 peer 3.3.3.
Views Any view Predefined user roles network-admin network-operator Examples # Display incoming labels for all BGP VPNv6 routes. display bgp routing-table vpnv6 inlabel Total number of routes: 1 BGP local router ID is 1.1.1.
network-operator Parameters standby: Displays all BGP VPNv6 route outgoing labels for a standby BGP process. If you do not specify a standby BGP process, the command displays information for the active BGP process. slot slot-number: Specifies the slot number of the card where the standby process resides. (MSR4000.) Usage guidelines The active BGP process backs up BGP peers and routing information to the standby BGP process only when BGP NSR is enabled.
Table 75 Command output Field Description BGP Local router ID Router ID of the local BGP router. Status Route status codes. See Table 62. Origin Route origin codes. See Table 62. OutLabel Outgoing label. policy vpn-target Use policy vpn-target to enable route target filtering of received VPNv6 routes. Use undo policy vpn-target to permit all VPNv6 routes. Syntax policy vpn-target undo policy vpn-target Default The route target filtering function is enabled for received VPNv6 routes.
Default An RR does not filter reflected routes. Views BGP VPNv6 address family view Predefined user roles network-admin Parameters extended-community-number: Specifies an extended community number in the range of 1 to 199. Usage guidelines By configuring different RR reflection policies on RRs in a cluster, you can implement load balancing among the RRs. Examples # In BGP VPNv6 address family view, configure the RR to only reflect VPNv6 routes with an extended community number of 10.
MPLS L2VPN commands In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. ac interface Use ac interface to bind an AC to a cross-connect. Use undo ac interface to remove the binding. Syntax ac interface interface-type interface-number undo ac interface interface-type interface-number Default No AC is bound to a cross-connect.
Default No BGP L2VPN address family is created. Views BGP view Predefined user roles network-admin Usage guidelines To establish a BGP PW to a remote PE, you must execute the peer enable command in BGP L2VPN address family view to enable the remote PE. Examples # Create a BGP L2VPN address family, and enter BGP L2VPN address family view.
[Sysname-xcg-bbb] auto-discovery bgp [Sysname-xcg-bbb-auto] Related commands • display l2vpn pw • display l2vpn xconnect-group backup-peer Use backup-peer to configure a backup PW for a cross-connect, and enter cross-connect backup PW view. If the backup PW has been configured, the command places you into cross-connect backup PW view. Use undo backup-peer to remove the backup PW from a cross-connect.
PW redundancy is mutually exclusive from the multi-segment PW function. If you have configured two PWs by using the peer command in cross-connect view, you cannot configure a backup PW by using the backup-peer command in cross-connect PW view, and vice versa. The incoming label that you specify for a static PW must not be the same as an existing static LSP or static CRLSP. If it is the same, the static PW will not be available, even if you modify the incoming label of the static LSP or the static CRLSP.
pw-class class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters. You can configure the PW type and control word by specifying a PW class. If you do not specify any PW class, the PW type is determined by the interface type. The control word function is not supported for PW types that do not require using control word. Usage guidelines This command must be configured on both the local and remote PEs to create a remote CCC connection.
undo connection connection-name Default No cross-connect is created. Views Cross-connect group view Predefined user roles network-admin Parameters connection-name: Specifies the name of the cross-connect, a case-sensitive string of 1 to 20 characters, excluding hyphens. Usage guidelines A cross-connect is a point-to-point connection.
Parameters remote-site-id: Specifies the remote site by its ID in the range of 0 to 65533. Usage guidelines This command creates an auto-discovery cross-connect that uses BGP to establish a PW from the local site to the specified remote site. In auto-discovery cross-connect view, you can execute ac interface to bind an AC to the auto-discovery cross-connect. The PE can forward packets between the AC and the PW.
Ethernet or VLAN, the control word field is optional. You can configure whether to carry the control word field in packets sent on the PW. If you enable the control word function on both PEs, packets transmitted on the PW carry the control word field. Otherwise, the packets do not carry the control word field. Examples # Enable the control word function for the PW class pw100.
Examples # Specify the default next hop IP address as 1.1.1.1 on GigabitEthernet 2/1/1 (PE's interface connected to the CE). system-view [Sysname] interface gigabitethernet 2/1/1 [Sysname-GigabitEthernet2/1/1] default-nexthop ip 1.1.1.1 description Use description to configure a description for a cross-connect group. Use undo description to remove the description of a cross-connect group. Syntax description text undo description Default No description is configured for a cross-connect group.
Parameters peer ip-address: Specifies a BGP peer by its IP address. advertised: Displays MPLS L2VPN label block information advertised to the BGP peer. received: Displays MPLS L2VPN label block information received from the BGP peer. statistics: Displays BGP MPLS L2VPN label block statistics. route-distinguisher route-distinguisher: Displays BGP MPLS L2VPN label block information for the route distinguisher (RD), which is a string of 3 to 21 characters.
Table 76 Command output Field Description Status codes: • • • • • • • • Status codes * – valid—Valid route. > – best—Best route. d – damped—Dampened route. h – history—History route. s – suppressed—Suppressed route. S – Stale—Stale route. i – internal—Internal route. e – external—External route. Origin of the label block: • i – IGP—Originated in the AS. • e – EGP—Learned through EGP. • ? – incomplete—Unknown origin. Origin LB offset Offset of the label block. LB range Size of the label block.
Table 77 Command output Field Description Number of label block messages: Paths • available—Number of available label block messages. • best—Number of best label block messages. From IP address of the peer from which the label block was received. Original nexthop Original next hop. If the label block was obtained from a BGP route update, this field displays the next hop address in that BGP route update. Extended community attribute: Ext-Community • RT—Route target.
Site ID : 1 LB offset : 0 LB base : 1034 LB range : 10 CSV : 0x01000ADFFF Advertised to peers (1 in total): 192.3.3.3 Table 78 Command output Field Description Paths • available—Number of available label block messages. • best—Number of best label block messages. LB offset Offset of the label block. LB base Initial value of the label block. LB range Size of the label block. CSV Circuit status vector. Advertised to peers (1 in total) Peers to which the label block has been advertised.
If you do not specify a peer or local, the command displays label blocks received from all peers and local label blocks that match the received ones. If no local label block matches the received ones, the command only displays the label blocks received from all peers. A local label block matches the received label block if the local label block LO ≤ remote site ID ≤ local label block LO + local label block LR – 1. Examples # Display brief information about label blocks received from all peers.
# Display brief information about all local label blocks. display l2vpn bgp local Xconnect-group Name: vpnb Site Offset Range Label Base RD 1 0 10 1034 2:2 # Display detailed information about all local label blocks. display l2vpn bgp local verbose Xconnect-group Name: vpnb Site ID : 1 Offset : 0 RD : 2:2 Range : 10 Label Base : 1034 Link ID : 1 Table 81 Command output Field Description Offset Offset of the label block. RD RD of the label block.
pw-id pw-id: Displays LDP PW label information for the PW specified by its PW ID in the range of 1 to 4294967295. If you specify peer ip-address without this option, the command displays all LDP PW label information advertised by the peer PE. xconnect-group group-name: Displays LDP PW label information for the cross-connect group specified by its name, a case-sensitive string of 1 to 31 characters.
Table 83 Command output Field Description Xconnect-group Cross-connect group of the PW. Connection Cross-connect of the PW. PW state communicate: PW Status Communication • Notification method—Uses notifications to communicate PW states. • Label withdraw method—Assigns a PW label to the PW when the AC is up and withdraws the PW label when the AC goes down. VCCV CC type: VCCV CC Type • Control-Word—PWE3 Control Word with 0001b as first nibble. • Router-Alert—MPLS Router Alert Label.
slot slot-number: Displays cross-connect forwarding information on the specified card. If you do not specify any card, the command displays cross-connect forwarding information on the active MPU. (MSR4000.) verbose: Displays detailed information. If you do not specify this keyword, the command displays brief information. Examples # Display brief AC forwarding information for all cross-connect groups.
Table 85 Command output Field Description Xconnect-group Cross-connect group name. Connection Cross-connect name. Service Instance The field is available only when the AC is a service instance on a Layer 2 Ethernet interface. This field is not supported in the current software version and is reserved for future support. AC access mode: Access Mode Encapsulation • VLAN. • Ethernet. Match criterion of the service instance.
Tunnel Group ID : 0x60000000 Tunnel NHLFE IDs: 1025 Link ID: 1 PW Type : VLAN PW State : Up In Label : 1278 Out Label: 1151 MTU : 1500 PW Attributes : Main VCCV CC : Router-Alert VCCV BFD : Fault Detection with BFD Tunnel Group ID : 0x160000001 Tunnel NHLFE IDs: 1027 Table 87 Command output Field Description PW state: Up, Down, Blocked, or BFD Defect. PW State Blocked indicates that the PW is a backup PW. BFD Defect indicates BFD has detected a defect on the PW.
network-operator Parameters xconnect-group group-name: Displays L2VPN information for Layer 3 interfaces bound to cross-connects in the cross-connect group specified by its name, a case-sensitive string of 1 to 31 characters. interface-type interface-number: Displays L2VPN information for the specified interface. Usage guidelines If you do not specify any parameters, this command displays L2VPN information for all Layer 3 interfaces bound to cross-connects.
ldp: Displays LDP PW information. static: Displays static PW information, including remote CCC connections. verbose: Displays detailed information. If you do not specify this keyword, the command displays brief information. Examples # Display brief information about all L2VPN PWs.
MTU : 1500 PW Attributes : Main VCCV CC : - VCCV BFD : - Tunnel Group ID : 0x800000160000000 Tunnel NHLFE IDs : 1026 Xconnect-group Name: vpnb Connection of auto-discovery: Site 1 Peer: 192.3.3.
Field Description VCCV BFD type: VCCV BFD • Fault Detection with BFD. BFD packets use IP/UDP encapsulation (with IP/UDP Headers). • Fault Detection with Raw-BFD. BFD packets use PW-ACH encapsulation (without IP/UDP Headers). Tunnel Group ID ID of the tunnel group for the PW. NHLFE IDs of the public tunnels that carry the PW. Tunnel NHLFE IDs If equal-cost tunnels are available, this field displays multiple tunnel NHLFE IDs. If no tunnel is available, this field displays None.
Table 91 Command output Field Description VCCV CC type: VCCV CC • Control word. • Route alert. • TTL. VCCV BFD type: VCCV BFD • Fault Detection with BFD. BFD packets use IP/UDP encapsulation (with IP/UDP Headers). • Fault Detection with Raw-BFD. BFD packets use PW-ACH encapsulation (without IP/UDP Headers). Related commands pw-class display l2vpn xconnect-group Use display l2vpn xconnect-group to display cross-connect group information.
Table 92 Command output Field Description Connection ID Cross-connect ID. State Cross-connect group state: Up, Down, or Admin down. Admin down indicates the cross-connect group has been shut down by the shutdown command. # Display detailed information about all cross-connect groups.
Field Description Connection ID Cross-connect ID. State Cross-connect group state: Up, Down, or Admin down. Admin down indicates the cross-connect group has been shut down by the shutdown command. Interworking IPv4 IPv4 interworking state: Enabled or Disabled. State PW state: Up, Down, Blocked, or Defect. AC type: AC • Layer 3 interface such as GE2/1/4. • Service instance on a Layer 2 interface, such as GE2/1/3 srv1. The current software version does not support service instance.
[Sysname-xcg-vpn1] connection ac2pw [Sysname-xcg-vpn1-ac2pw] interworking ipv4 l2vpn enable Use l2vpn enable to enable L2VPN. Use undo l2vpn enable to disable L2VPN. Syntax l2vpn enable undo l2vpn enable Default L2VPN is disabled. Views System view Predefined user roles network-admin Usage guidelines You must enable L2VPN before configuring other L2VPN settings. Examples # Enable L2VPN.
Examples # Switch traffic from PW 100 destined for 3.3.3.3 to its backup PW. l2vpn switchover peer 3.3.3.3 pw-id 100 mtu Use mtu to configure an MTU for PWs established on a cross-connect or auto-discovery cross-connect. Use undo mtu to restore the default. Syntax mtu mtu undo mtu Default A PW has an MTU of 1500 bytes. Views Cross-connect view, auto-discovery cross-connect group view Predefined user roles network-admin Parameters mtu: Specifies an MTU value in the range of 300 to 65535.
Use undo peer to delete a PW. Syntax peer ip-address pw-id pw-id [ in-label label-value out-label label-value ] [ pw-class class-name | tunnel-policy tunnel-policy-name ] * undo peer ip-address pw-id pw-id Default No PW is configured for a cross-connect. Views Cross-connect view Predefined user roles network-admin Parameters ip-address: Specifies the LSR ID of the peer PE. pw-id pw-id: Specifies a PW ID for the PW, in the range of 1 to 4294967295.
[Sysname] xconnect-group vpn1 [Sysname-xcg-vpn1] connection pw2pw [Sysname-xcg-vpn1-pw2pw] peer 4.4.4.4 pw-id 200 [Sysname-xcg-vpn1-pw2pw-4.4.4.4-200] # Configure a static PW destined to 5.5.5.5 for the cross-connect pw2pw in the cross-connect group vpn1 and enter cross-connect PW view. The static PW has an ID of 200, an incoming label of 100, and an outgoing label of 200. system-view [Sysname] xconnect-group vpn1 [Sysname-xcg-vpn1] connection pw2pw [Sysname-xcg-vpn1-pw2pw] peer 5.5.5.
Usage guidelines L2VPN uses MP-BGP to exchange label blocks when creating a BGP PW. After you execute the peer enable command in BGP L2VPN address family view, BGP can exchange label blocks with the specified peer or peer group through RFC 4761 MP_REACH_NLRI. To disable the capability, execute the undo peer signaling command. Examples # Enable BGP to exchange label block information draft-kompella-ppvpn-l2vpn-03 MP_REACH_NLRI. with the peer 3.3.3.
ppp ipcp ignore local-ip Use ppp ipcp ignore local-ip to configure PPP to support IPCP negotiation without IP address. Use undo ppp ipcp ignore local-ip to restore the default. Syntax ppp ipcp ignore local-ip undo ppp ipcp ignore local-ip Default PPP does not support IPCP negotiation without IP address, and the local interface must be configured with an IP address to perform IPCP negotiation with the peer.
undo ppp ipcp proxy Default No IPCP proxy IP address is specified. Views Interface view Predefined user roles network-admin Parameters ip-address: Specifies an IPCP proxy IP address. Usage guidelines In an MPLS L2VPN interworking scenario, link layer negotiation packets cannot be delivered on the network, and Layer 2 connections cannot be established directly between CEs. Therefore, PEs must establish Layer 2 connections with the connected CEs.
Predefined user roles network-admin Parameters class-name: Specifies the name of the PW class, a case-sensitive string of 1 to 19 characters. Usage guidelines In PW class view, you can configure PW attributes such as the PW type and control word. PWs with the same attributes can use the same PW class to simplify configuration. Examples # Create a PW class named pw100 and enter PW view.
[Sysname-xcg-bbb] auto-discovery bgp [Sysname-xcg-bbb-auto] pw-class pw100 Related commands • control-word enable • display l2vpn pw-class • pw-class • pw-type pw-type Use pw-type to specify a PW type for a PW class. Use undo pw-type to restore the default. Syntax pw-type { ethernet | vlan } undo pw-type Default The PW type is VLAN. Views PW class view Predefined user roles network-admin Parameters ethernet: Specifies the PW type as Ethernet. vlan: Specifies the PW type as VLAN.
{ { • If traffic from the AC has the P-tag, the PE keeps the P-tag when the peer PE does not require the ingress to modify the P-tag or changes the P-tag to the expected value (which can be zero) when the peer PE requires the ingress to modify the P-tag. Then the PE adds the PW label and public tunnel encapsulation, and forwards the traffic through the PW.
Examples # Specify the switchover wait time as 120 seconds for the cross-connect ac2pw in the cross-connect group vpn1. system-view [Sysname] xconnect-group vpn1 [Sysname-xcg-vpn1] connection ac2pw [Sysname-xcg-vpn1-ac2pw] revertive wtr 120 Related commands display l2vpn pw route-distinguisher Use route-distinguisher to configure a route distinguisher (RD) for a BGP cross-connect group. Use undo route-distinguisher to remove the RD.
rr-filter Use rr-filter to configure the filtering of reflected L2VPN information. The route reflector only reflects the L2VPN information that contains the specified extended community number. Use undo rr-filter to restore the default. Syntax rr-filter extended-community-number undo rr-filter Default The route reflector does not filter reflected L2VPN information.
Usage guidelines After you disable a cross-connect group, all cross-connects in the group cannot provide L2VPN services. Use the shutdown command when you want to temporarily disable L2VPN (for example, to modify a cross-connect group). After the modification, use the undo shutdown command to enable the cross-connect group. This will provide L2VPN services using the new settings. Examples # Disable cross-connect group vpn2.
site 1 range 36 You can create multiple local sites for a cross-connect group. You can use the site command to increase the range value for an existing site without changing the site-id and default-offset. You cannot decrease the range value for an existing site with the site command. To decrease the range value, you must delete the site and re-create the site with the new range value. Select a large range value to reduce future modifications for VPN expansion.
Examples # Reference the tunnel policy policy1 for the auto-discovery cross-connect in the cross-connect group bbb.
Usage guidelines A local PE sets the route targets as export targets in BGP update messages when it advertises L2VPN information through the update messages to a remote peer. The peer uses its import targets to match the received export targets. If a match is found, the peer accepts the L2VPN information. Examples # Configure import route targets as 10:1 100:1 1000:1 and export route targets as 20:1 200:1 2000:1 for the BGP cross-connect group bbb.
MPLS OAM commands bfd discriminator Use bfd discriminator to configure local and remote discriminators for the BFD session used to verify PW connectivity. Use undo bfd discriminator to restore the default. Syntax bfd discriminator local local-id remote remote-id undo bfd discriminator Default No local or remote discriminators are configured for the BFD session used to verify PW connectivity. The system automatically assigns local and remote discriminators to the BFD session.
Examples # In cross-connect PW view, set both the local and remote discriminator values to 1 for the BFD session used to verify PW connectivity. system-view [Sysname] xconnect-group 1 [Sysname-xcg-1] connection 1 [Sysname-xcg-1-1] peer 22.22.2.2 pw-id 1 pw-class ttt [Sysname-xcg-1-1-22.22.2.2-1] bfd discriminator local 1 remote 1 Related commands • display l2vpn pw bfd • mpls bfd enable • vccv bfd • vccv cc display l2vpn pw bfd Use display l2vpn pw bfd to display BFD information for PWs.
Table 94 Command output Field Description Peer IP LSR ID of the peer PE of the PW. VSI Index Index of the VSI to which the PW belongs. This field is displayed when the PW is a VPLS PW. VPLS is not supported in the current software version. Connection ID ID of the cross-connect to which the PW belongs. This field is displayed when the PW is a VPWS PW. Link ID Link ID of the PW. Local Discr Local discriminator of the BFD session. Remote Discr Remote discriminator of the BFD session.
Parameters ipv4 dest-addr mask-length: Specifies an FEC by an IPv4 destination address and the destination address mask length in the range of 0 to 32. te tunnel tunnel-number: Specifies an MPLS TE tunnel by the tunnel interface number. Usage guidelines If you do not specify any parameter, this command displays BFD information for all LSP tunnels and all MPLS TE tunnels. Examples # Display BFD information for the LSPs to destination 22.22.2.2/32. display mpls bfd ipv4 22.22.2.
Field Description Destination IP Destination IP address of the BFD session. At the ingress node, it is an address on subnet 127.0.0.0/8. At the egress node, it is the MPLS LSR ID of the ingress node. BFD session state: Session State • Init—BFD session is in initialization state. • Up—BFD session is up. • Down—BFD session is down. Role of the local PE in the BFD session: Session Role • Active—Initiator of the BFD session. • Passive—Responder of the BFD session.
Use undo mpls bfd to disable BFD for LSPs associated with an FEC. Syntax mpls bfd dest-addr mask-length [ nexthop nexthop-address [ discriminator local local-id remote remote-id ] ] [ template template-name ] undo mpls bfd dest-addr mask-length [ nexthop nexthop-address ] Default BFD is not used to verify LSP connectivity for an FEC. Views System view Predefined user roles network-admin Parameters dest-addr mask-length: Specifies an FEC by a destination address and the destination address mask.
and remote devices, but the mpls bfd command is not needed on the remote PE. A dynamic BFD session verifies the connectivity of a unidirectional LSP tunnel from the local device to the remote device. The source address of the BFD session is the MPLS LSR ID of the local device. Before configuring BFD for the LSP tunnel, perform the following tasks: 1. Configure an MPLS LSR ID for the local device. 2. Make sure a route is available on the remote device to reach the MPLS LSR ID.
Hardware Value range MSR2000 1 to 32 MSR3000 1 to 512 MSR4000 1 to 1024 remote remote-id: Specifies the remote discriminator value for the BFD session, in the range of 1 to 4294967295. template template-name: Specifies a BFD session parameter template by its name, a case-sensitive string of 1 to 31 characters. If you do not specify any template, BFD uses the BFD session parameters configured in tunnel interface view.
Related commands • display mpls bfd • mpls bfd enable mpls periodic-tracert (for LSP) Use mpls periodic-tracert to enable periodic traceroute of LSPs for an FEC. Use undo mpls periodic-tracert to disable periodic traceroute of LSPs for an FEC.
If both BFD and periodic MPLS traceroute are configured for an LSP and the periodic traceroute function detects a data plane and control plane inconsistency, the device deletes the BFD session for the LSP and reestablishes the BFD session based on the control plane. Examples # Enable periodic traceroute for LSPs to destination 11.11.1.1/32. system-view [Sysname] mpls periodic-tracert 11.11.1.
-v: Displays detailed reply information. If you do not specify this keyword, the command displays brief reply information. dest-addr mask-length: Specifies an FEC by an IPv4 destination address and a mask length. The value range for the mask-length argument is 0 to 32. destination: Specifies the destination address in the IP header of MPLS echo requests. The default is 127.0.0.1. start-address: Specifies the destination address or the start destination address. This address must be an address on subnet 127.
100 bytes from 100.1.2.1: Sequence=3 time=60 ms Return Code=3(1) Destination address 127.0.0.3 100 bytes from 100.1.2.1: Sequence=4 time=60 ms Return Code=3(1) Destination address 127.0.0.1 100 bytes from 100.1.2.1: Sequence=5 time=76 ms Return Code=3(1) Destination address 127.0.0.3 100 bytes from 100.1.2.1: Sequence=6 time=57 ms Return Code=3(1) --- Ping statistics for FEC 3.3.3.9/32 --6 packets transmitted, 6 packets received, 0.
Parameters -a source-ip: Specifies the source address for MPLS echo request packets. If you do not specify this option, the device uses the primary IP address of the outgoing interface as the source address for MPLS echo requests. -c count: Specifies the number of MPLS echo request packets to be sent. The value range is 1 to 4294967295. The default is 5. -exp exp-value: Specifies the EXP value for MPLS echo request packets, in the range of 0 to 7. The default is 0.
Syntax ping mpls [ -a source-ip | -c count | -exp exp-value | -h ttl-value | -m wait-time | -r reply-mode | -rtos tos-value | -s packet-size | -t time-out | -v ] * te tunnel interface-number Views Any view Predefined user roles network-admin Parameter -a source-ip: Specifies the source address for MPLS echo request packets. If you do not specify this option, the device uses the primary IP address of the outgoing interface as the source address for MPLS echo requests.
--- Ping statistics for TE tunnel Tunnel1 --5 packets transmitted, 5 packets received, 0.0% packet loss Round-trip min/avg/max = 44/57/76 ms For the command output, see Table 96. tracert mpls ipv4 Use tracert mpls ipv4 to trace MPLS LSPs from the ingress node to the egress node for an IPv4 prefix. You can locate the error node according to the reply information.
specify both the start-address argument and the end-address argument, you specify a range of destination addresses and the destination addresses increase in turn by the address-increment, starting from the start-address to the end-address. The command performs a traceroute for each of the destination addresses. end-address: Specifies the end destination address. This address must be an address on subnet 127.0.0.0/8—a local loopback address.
Table 97 Command output Field Description MPLS trace route FEC Trace the LSPs for the specified FEC. Destination address Destination IP address in the IP header. TTL Number of hops. Replier Address of the LSR that replied the request. Time Time used to receive the reply, in milliseconds. Type LSR type: Ingress, Transit, or Egress. Downstream Address of the downstream LSR and the label assigned by the downstream LSR. ReturnCode Return code.
-v: Displays detailed reply information. If you do not specify this keyword, the command displays brief reply information. fec-check: Checks the FEC stack at transit nodes. tunnel interface-number: Specifies an MPLS TE tunnel interface by the interface number. Examples # Trace the path that MPLS TE tunnel 1 traverses from the ingress node to the egress node. tracert mpls te tunnel 1 MPLS trace route TE tunnel Tunnel1 TTL Replier Time Type Downstream 1 10.4.5.1 1 ms Ingress 10.4.5.
To use BFD for PW connectivity verification, you must execute the vccv bfd and mpls bfd enable command on both ends of the PW. Examples # Configure BFD to verify PW connectivity, specify the BFD packet encapsulation type as raw-bfd, and specify the BFD session parameter template as aaa.
Examples # Specify the VCCV CC type as control-word.
MPLS protection switching commands In this chapter, "MSR2000" refers to MSR2003. "MSR3000" collectively refers to MSR3012, MSR3024, MSR3044, MSR3064. "MSR4000" collectively refers to MSR4060 and MSR4080. bandwidth Use bandwidth to configure the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth is 64 kbps.
Views Tunnel bundle interface view Predefined user roles network-admin Usage guidelines The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it on a live network. This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions. Use the display this command in interface view to identify these commands.
[Sysname-tunnel-bundle2] description tunnel-bundle2 Related commands display interface tunnel-bundle destination Use destination to specify the destination address for a tunnel bundle interface. Use undo destination to restore the default. Syntax destination ip-address undo destination Default No tunnel destination address is configured. Views Tunnel bundle interface view Predefined user roles network-admin Parameters ip-address: Specifies the tunnel destination IPv4 address.
Views Any view Predefined user roles network-admin network-operator Parameters number: Specifies the number of an existing tunnel bundle interface. brief: Displays brief interface information. If you do not specify this keyword, this command displays detailed interface information. description: Displays complete interface descriptions. If you do not specify this keyword, this command displays only the first 27 characters of interface descriptions.
Field Description State of the tunnel bundle interface: • Administratively DOWN—The interface has been shut down by using the shutdown command. Current state • DOWN—The interface is administratively up, but its physical state is down. • UP—Both the administrative and physical states of the interface are up. Link layer protocol state of the tunnel bundle interface. The value is determined by the parameter negotiation on the link layer. • UP—The protocol state of the interface is up.
Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Main IP Description TunBDL100 UP aaaaaaaaaaaaaaaaaaaaaaaaaaaaa UP -- Aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa # Display information about interfaces in DOWN state and the causes.
display mpls forwarding protection Use display mpls forwarding protection to display the forwarding state information for MPLS protection groups. Syntax MSR2000/MSR3000: display mpls forwarding protection [ tunnel-bundle number ] MSR4000: display mpls forwarding protection [ tunnel-bundle number ] [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters tunnel-bundle number: Specifies an existing tunnel bundle interface by its number.
Field Description This field is comprised of the current protection group state, the cause, and the cause source. Current protection group state: • N—Normal state. The working and protection tunnels operate correctly, and traffic travels along the working tunnel. • UA—Unavailable state. The protection tunnel is unavailable. • PA—Protecting administrative state. The externally configured switching action enables traffic to travel along the protection tunnel. • PF—Protecting failure state.
verbose: Displays detailed information about MPLS protection groups. If you do not specify this keyword, this command displays brief information about MPLS protection groups. Examples # Displays the current state and related information for all MPLS protection groups.
Protection group type : Tunnel bundle Tunnel bundle name : Tunnel-Bundle200 Working tunnel : Tunnel100 Protection tunnel : Tunnel200 Protection mode : 1:1 Switching mode : Bidirectional Tunnel in use : Working-path Working tunnel state : No defect Protection tunnel state : Signal failure Holdoff time : 5s (Remaining: 3s) Wait to restore time : 30s (Remaining: 10s) Message interval : 5s Revertive mode : Revertive State : UA:P:L Table 102 Command output Field Description Protecti
Field Description This field is comprised of the current protection group state, the cause, and the cause source. Current protection group state: • N—Normal state. The working and protection tunnels operate correctly, and traffic travels along the working tunnel. • UA—Unavailable state. The protection tunnel is unavailable. • PA—Protecting administrative state. The externally configured switching action enables traffic to travel along the protection tunnel. • PF—Protecting failure state.
Examples # Display information about all tunnel bundle interfaces and their member interfaces. display tunnel-bundle Total number of tunnel bundles: 1, 1 up, 0 down Tunnel bundle name: Tunnel-Bundle 2 Bundle state : Up Bundle attributes : Working mode : 1:1 Tunnel type : CR-LSP Tunnel destination : 3.3.3.
Views System view Predefined user roles network-admin Parameters number: Specifies the tunnel bundle interface number. The following matrix shows the value ranges for the number argument: Hardware Value range MSR2000 0 to 1023 MSR3000 0 to 2047 MSR4000 0 to 4095 oneplusone: Specifies the 1+1 protection switching mode. onetoone: Specifies the 1:1 protection switching mode.
You cannot modify the protection switching mode for a tunnel bundle interface by executing this command multiple times. Examples # Create tunnel bundle interface Tunnel-Bundle 2 in 1:1 protection switching mode, and enter the tunnel bundle interface view.
Usage guidelines You can specify only one primary member interface and one backup member interface for a tunnel bundle interface in protection switching mode. The device selects a member interface for traffic forwarding according to the external switching command and the signal fail indication. Examples # Specify interface Tunnel 1 as the primary member interface, and Tunnel 2 as the backup member interface for Tunnel-Bundle 2.
protection holdoff Use protection holdoff to specify the holdoff time when a working tunnel failure is detected. Use undo protection holdoff to restore the default. Syntax protection holdoff holdoff-time undo protection holdoff Default The holdoff time is 0 seconds. When the working tunnel fails, traffic is immediately switched from the working tunnel to the protection tunnel.
Default When the working tunnel recovers, traffic is immediately switched from the protection tunnel to the working tunnel. Views Tunnel bundle interface view Predefined user roles network-admin Parameters never: Specifies the switchover mode as non-revertive. After the working tunnel recovers, the protection group continues to use the protection tunnel as long as the protection group is operating correctly. wtr: Specifies the switchover mode as revertive.
Views Tunnel bundle interface view Predefined user roles network-admin Parameters clear: Cancels the executed switching command. force: Forces traffic to travel on the protection tunnel. lock: Always uses the working tunnel to forward traffic. manual: Switches data from the working tunnel to the protection tunnel. If the protection tunnel fails, traffic switching is not performed.
Syntax protection switching-mode bidirectional undo protection switching-mode bidirectional Default A protection group uses unidirectional path switching.
Syntax psc message-interval interval undo psc message-interval Default The PSC message sending interval is 5 seconds. Views MPLS protection switching view Predefined user roles network-admin Parameters interval: Specifies the PSC message sending interval in the range of 1 to 65535 seconds. Usage guidelines The two ends of a tunnel periodically send PSC messages to coordinate the protection state for bidirectional path switching.
Hardware Value range MSR2000 0 to 1023 MSR3000 0 to 2047 MSR4000 0 to 4095 Usage guidelines Use this command to clear old statistics so you can observe new traffic statistics on a tunnel bundle interface. • If you do not specify the tunnel-bundle keyword, this command clears the statistics for all interfaces. • If you specify only the tunnel-bundle keyword, this command clears the statistics for all tunnel bundle interfaces.
Parameters slot slot-number: Specifies a card. The slot-number argument represents the number of the slot that holds the card. Usage guidelines If the specified service card is removed, traffic on the tunnel bundle interface cannot be forwarded even if the tunnel bundle interface is up. When the service card is reinstalled, traffic forwarding resumes on the card. Examples # Specify slot 2 for forwarding traffic on interface Tunnel-Bundle 2.
Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. [] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x | y | ... } Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-WLAN module, or the switching engine on a unified wired-WLAN switch. Represents an access point. Represents a mesh access point.
Index ABCDEFGHIKLMNPRSTVWX display bgp routing-table ipv4 unicast inlabel,204 A display bgp routing-table ipv4 unicast outlabel,205 ac interface,256 display bgp routing-table vpnv4,206 accept-label,29 display bgp routing-table vpnv4 inlabel,216 address-family ipv4 (VPN instance view),202 display bgp routing-table vpnv4 outlabel,217 address-family ipv6 (VPN instance view),243 display bgp routing-table vpnv6,244 address-family l2vpn,256 display bgp routing-table vpnv6 inlabel,251 address-family v
display mpls lsp statistics,11 graceful-restart enable,180 display mpls nib,12 graceful-restart timer,48 display mpls nid,13 H display mpls protection,326 hello interval,181 display mpls static-cr-lsp,147 hello lost,182 display mpls static-lsp,25 display mpls summary,14 I display mpls te ds-te,81 igp sync delay,49 display mpls te link-management bandwidth-allocation,82 igp sync delay on-restart,50 display mpls te tedb,84 import route-policy,224 import bgp,51 display mpls te tunnel-interfa
mpls lsr-id,18 mpls-forwarding statistics prefix-list,15 mpls mtu,18 mtu,284 mpls periodic-tracert (for LSP),307 N mpls protection,333 nesting-vpn,227 mpls statistics,19 nexthop,139 mpls statistics interval,20 nhop-only,140 mpls te,105 non-stop-routing,64 mpls te affinity-attribute,106 mpls te auto-bandwidth,107 P mpls te auto-tunnel backup disable,108 path-metric-type,141 mpls te backup,109 peer,284 mpls te backup bandwidth,110 peer,183 mpls te backup-path,111 peer next-hop-invariabl
route-distinguisher,293 static-cr-lsp transit,150 route-distinguisher (VPN instance view),230 static-lsp egress,26 route-tag,231 static-lsp ingress,26 routing-table limit,232 static-lsp transit,27 rr-filter,294 Subscription service,341 rr-filter,254 T rr-filter,235 targeted-peer,68 rsvp,186 te-subtlv,143 rsvp authentication challenge,187 timers removal unused,144 rsvp authentication key,188 tnl-policy (VPN instance view/IPv4 VPN view/IPv6 VPN view),237 rsvp authentication lifetime,190 rs