HPE FlexNetwork 7500 Series Command Reference Manual

Mpls
Table of Contents

Advertisement

HPE FlexNetwork 7500 Switch Series
MPLS Command Reference
Part number: 5998-7476R
Software version: 7500-CMW710-R7178
Document version: 6W100-20160129

Advertisement

Table of Contents
loading

Summary of Contents for HPE FlexNetwork 7500 Series

  • Page 1 HPE FlexNetwork 7500 Switch Series MPLS Command Reference Part number: 5998-7476R Software version: 7500-CMW710-R7178 Document version: 6W100-20160129...
  • Page 2 © Copyright 2016 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
  • Page 3: Table Of Contents

    Contents Basic MPLS commands ·················································································· 1 display mpls forwarding ilm ························································································································ 1 display mpls forwarding nhlfe ····················································································································· 2 display mpls interface ································································································································· 4 display mpls label ······································································································································· 5 display mpls lsp ·········································································································································· 6 display mpls lsp statistics ························································································································· 11 display mpls nib ········································································································································ 12 display mpls nid ········································································································································...
  • Page 4 lsp-trigger ················································································································································· 60 mpls ldp enable ········································································································································ 61 mpls ldp igp sync disable ························································································································· 62 mpls ldp sync (IS-IS view) ························································································································ 62 mpls ldp sync (OSPF view/OSPF area view) ··························································································· 63 mpls ldp transport-address ······················································································································· 64 session protection ···································································································································· 65 targeted-peer ············································································································································...
  • Page 5 mpls te resv-style ··································································································································· 128 mpls te retry ··········································································································································· 128 mpls te route-pinning ······························································································································ 129 mpls te signaling ···································································································································· 130 mpls te static-cr-lsp ································································································································ 131 mpls te timer retry ·································································································································· 131 nexthop ·················································································································································· 132 nhop-only ··············································································································································· 133 path-metric-type ····································································································································· 134 reset mpls te auto-bandwidth-adjustment timers ···················································································...
  • Page 6 address-family vpnv4 ····························································································································· 194 description (VPN instance view) ············································································································ 195 display bgp routing-table ipv4 unicast inlabel ························································································· 196 display bgp routing-table ipv4 unicast outlabel ······················································································ 197 display bgp routing-table vpnv4 ············································································································· 198 display bgp routing-table vpnv4 inlabel ·································································································· 207 display bgp routing-table vpnv4 outlabel ································································································ 208 display ospf sham-link ····························································································································...
  • Page 7 display l2vpn ldp ····································································································································· 269 display l2vpn pw ····································································································································· 270 display l2vpn pw-class ··························································································································· 273 display l2vpn service-instance ··············································································································· 275 display l2vpn xconnect-group ················································································································· 277 encapsulation ········································································································································· 278 l2vpn enable ··········································································································································· 279 l2vpn switchover ····································································································································· 280 mtu ························································································································································· 280 peer ························································································································································ 281 peer signaling ·········································································································································...
  • Page 8 signaling-protocol ··································································································································· 340 site ·························································································································································· 341 tunnel-policy (auto-discovery VSI view) ································································································· 342 vpls-id ····················································································································································· 343 vpn-target ··············································································································································· 344 vsi ··························································································································································· 344 xconnect vsi ··········································································································································· 345 MCE commands ························································································· 347 address-family ipv4 (VPN instance view) ······························································································· 347 description (VPN instance view) ············································································································ 347 display ip vpn-instance ···························································································································...
  • Page 9: Basic Mpls Commands

    Basic MPLS commands display mpls forwarding ilm Use display mpls forwarding ilm to display Incoming Label Map (ILM) entries. Syntax In standalone mode: display mpls forwarding ilm [ label ] [ slot slot-number ] In IRF mode: display mpls forwarding ilm [ label ] [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles...
  • Page 10: Display Mpls Forwarding Nhlfe

    SWAP 1300 1024 # Display all ILM entries. <Sysname> display mpls forwarding ilm Total ILM entries: 3 Flags: T - Forwarded through a tunnel N - Forwarded through the outgoing interface to the nexthop IP address B - Backup forwarding information A - Active forwarding information InLabel Oper Flag SwapLabel Forwarding Info...
  • Page 11 display mpls forwarding nhlfe [ nid ] [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters nid: Displays the NHLFE entry with the specified NID. The value range for the NID is 0 to 4294967294.
  • Page 12: Display Mpls Interface

    -------------------------------------------------------------------------------- 2049 2050 2048 2025 GE1/0/2 10.11.112.26 2049 3024 GE1/0/2 10.11.112.26 3026 2050 3025 GE1/0/1 10.11.113.26 Table 2 Command output Field Description Total NHLFE entries Total number of NHLFE entries. NHLFE entry index. Tunnel type: • LOCAL—Direct LSP tunnel. • LSP—Static LSP tunnel, or LSP tunnel signaled using LDP or BGP.
  • Page 13: Display Mpls Label

    Parameters interface-type interface-number: Specifies an interface by the interface type and number. If you do not specify an interface, this command displays MPLS information for all MPLS-enabled interfaces. Examples # Display all MPLS interfaces. <Sysname> display mpls interface Interface Status MPLS MTU GE1/0/1 1514...
  • Page 14: Display Mpls Lsp

    Table 3 Command output Field Description Label Label value. Protocol that is using the label: • Static—Static LSP. • LDP. • BGP. Owner • StaticCR—Static CRLSP. • RSVP. • L2VPN. This field displays a hyphen (-) when the label state is Idle. Usage state of the label: •...
  • Page 15 local: Displays the direct LSP. rsvp-te: Displays CRLSPs established by RSVP-TE. static: Displays static LSPs. static-cr: Displays static CRLSPs. transit: Displays the LSPs taking the current LSR as a transit LSR. vpn-instance vpn-instance-name: Displays LSPs for the specified VPN. The vpn-instance-name is a case-sensitive string of 1 to 31 characters.
  • Page 16 Table 4 Command output Field Description Forwarding equivalence class: • IP address/mask—Classifies FECs by destination address. • IP address—Classifies FECs by next hop. • IP address/Out Label—Classifies FECs by next hop and outgoing label. • Ingress LSR ID/Tunnel ID/LSP ID—RSVP TE FEC. •...
  • Page 17 Field Description BkLabel Outgoing label of the backup LSP. BkInterface Outgoing interface of the backup LSP. # Display detailed information about all LSPs. <Sysname> display mpls lsp verbose Destination : 56.10.10.2 : 56.10.10.2/32 Protocol : LDP LSR Type : Egress Service : Statistics In-Label...
  • Page 18 Service NHLFE ID : 2000 State : Active Out-Label : 1800 Nexthop : 10.1.1.2 Out-Interface: Vlan10 Table 6 Command output Field Description Destination LSP destination address. Forwarding equivalence class: • IP address/mask—Classifies FECs by destination address. • IP address—Classifies FECs by next hop. •...
  • Page 19: Display Mpls Lsp Statistics

    Field Description MPLS forwarding statistics in outbound direction: • Octets—Number of sent octets. • Outbound Statistics Packets—Number of sent packets. • Errors—Number of error packets. • Discards—Number of discarded packets. Related commands display mpls lsp statistics display mpls lsp statistics Use display mpls lsp statistics to display LSP statistics.
  • Page 20: Display Mpls Nib

    Field Description Total Total number of LSPs. Ingress Number of LSPs that take the local device as the ingress node. Transit Number of LSPs that take the local device as a transit node. Egress Number of LSPs that take the local device as the egress node. Active Number of active LSPs of a type.
  • Page 21: Display Mpls Nid

    Field Description Backup outgoing NHLFE ID ID of the backup NHLFE entry. display mpls nid Use display mpls nid to display usage information for dynamic NIDs. Syntax display mpls nid [ nid-value1 [ to nid-value2 ] ] Views Any view Predefined user roles network-admin network-operator...
  • Page 22: Mpls Enable

    Syntax display mpls summary Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display MPLS summary information. <Sysname> display mpls summary MPLS LSR ID : 2.2.2.2 Egress Label Type: Implicit-null Labels: Range Idle 16-1023 1008 1024-9215 8064 65536-73727 8192 131072-139263...
  • Page 23: Mpls Label Advertise

    Syntax mpls enable undo mpls enable Default MPLS is disabled on an interface. Views Interface view Predefined user roles network-admin mdc-admin Usage guidelines Do not enable MPLS on the outgoing interface of an IP tunnel source. The device does not support forwarding IP tunnel-encapsulated packets through an LSP.
  • Page 24: Mpls Lsr-Id

    Usage guidelines As a best practice, configure the egress to advertise an implicit null label to the penultimate hop if the penultimate hop supports PHP. If you want to simplify packet forwarding on the egress but keep labels to determine QoS policies, configure the egress node to advertise an explicit null label to the penultimate hop.
  • Page 25: Mpls Mtu

    Examples # Configure the LSR ID as 3.3.3.3 for the local node. <Sysname> system-view [Sysname] mpls lsr-id 3.3.3.3 Related commands lsr-id mpls mtu Use mpls mtu to configure the MPLS MTU for an interface. Use undo mpls mtu to restore the default. Syntax mpls mtu value undo mpls mtu...
  • Page 26 Use undo mpls statistics to disable MPLS label forwarding statistics for the specified LSPs. Syntax mpls statistics { all | [ vpn-instance vpn-instance-name ] { ipv4 ipv4-destination mask-length | ipv6 ipv6-destination prefix-length } | static | te ingress-lsr-id tunnel-id } undo mpls statistics { all | [ vpn-instance vpn-instance-name ] { ipv4 ipv4-destination mask-length | ipv6 ipv6-destination prefix-length } | static | te ingress-lsr-id tunnel-id } Default...
  • Page 27: Mpls Statistics Interval

    reset mpls statistics mpls statistics interval Use mpls statistics interval to enable MPLS label forwarding statistics reading and set the reading interval. Use undo mpls statistics interval to disable MPLS label forwarding statistics reading. Syntax mpls statistics interval interval undo mpls statistics interval Default MPLS forwarding statistics reading is disabled.
  • Page 28: Mpls Ttl Propagate

    Default The MPLS TTL-expired messages sending feature is enabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines This command enables an LSR to generate an ICMP TTL-expired message upon receiving an MPLS packet with TTL being 1. • If the MPLS packet has only one label, the LSR sends the ICMP TTL-expired message back to the source through IP routing.
  • Page 29: Reset Mpls Statistics

    If you enable TTL propagation on both the ingress and egress, the IP tracert facility can show the real path in the MPLS network. When TTL propagation is disabled, MPLS performs the following operations: • Sets the label TTL to 255 for packets entering the MPLS network. •...
  • Page 30: Snmp-Agent Trap Enable Mpls

    Related commands display mpls lsp verbose mpls statistics mpls statistics interval snmp-agent trap enable mpls Use snmp-agent trap enable mpls to enable SNMP notifications for MPLS. Use undo snmp-agent trap enable mpls to disable SNMP notifications for MPLS. Syntax snmp-agent trap enable mpls undo snmp-agent trap enable mpls Default SNMP notifications for MPLS are enabled.
  • Page 31: Static Lsp Commands

    Static LSP commands display mpls static-lsp Use display mpls static-lsp to display static LSP information. Syntax display mpls static-lsp [ lsp-name lsp-name ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters lsp-name lsp-name: Specifies a static LSP by its name, a case-sensitive string of 1 to 15 characters. If you do not specify a static LSP, this command displays information about all static LSPs.
  • Page 32: Static-Lsp Egress

    static-lsp egress Use static-lsp egress to configure the egress node of a static LSP. Use undo static-lsp egress to delete the egress node configuration of a static LSP. Syntax static-lsp egress lsp-name in-label in-label undo static-lsp egress lsp-name Default No static LSP exists on the device. Views System view Predefined user roles...
  • Page 33: Static-Lsp Transit

    Predefined user roles network-admin mdc-admin Parameters lsp-name: Specifies a name for the static LSP, a case-sensitive string of 1 to 15 characters. destination dest-addr: Specifies a destination IP address for the LSP. mask: Specifies the mask of the destination IP address. mask-length: Specifies the mask length of the destination address, in the range of 0 to 32.
  • Page 34 Parameters lsp-name: Specifies a name for the static LSP, a case-sensitive string of 1 to 15 characters. in-label in-label: Specifies an incoming label in the range of 16 to 1023. nexthop next-hop-addr: Specifies a next hop address. outgoing-interface interface-type interface-number: Specifies an outgoing interface by its type and number.
  • Page 35: Ldp Commands

    LDP commands LDP common commands backoff Use backoff to set the LDP backoff initial delay time and maximum delay time. Use undo backoff to restore the default. Syntax backoff initial initial-time maximum maximum-time undo backoff Default The LDP backoff initial delay time is 15 seconds, and the maximum delay time is 120 seconds. Views LDP view, LDP-VPN instance view Predefined user roles...
  • Page 36: Display Mpls Ldp Discovery

    display mpls ldp discovery Use display mpls ldp discovery to display LDP discovery information. Syntax In standalone mode: display mpls ldp discovery [ vpn-instance vpn-instance-name ] [ interface interface-type interface-number | peer peer-lsr-id | targeted-peer ip-address ] [ verbose ] [ standby slot slot-number ] In IRF mode: display mpls ldp discovery [ vpn-instance vpn-instance-name ] [ interface interface-type...
  • Page 37 Type: L - Link Hello, T - Targeted Hello Discovery Source Hello Sent/Rcvd Peer LDP ID (L) GE1/0/2 83/80 100.100.100.18:0 200.100.100.18:0 (T) 100.100.100.18 23/20 100.100.100.18:0 Table 11 Command output Field Description Type of LDP discovery. • Type L—Basic discovery, which sends Link Hellos to discover peers. •...
  • Page 38: Display Mpls Ldp Fec

    Table 12 Command output Field Description Information about basic discovery that sends Link Hellos on interfaces. Link Hellos In a non-point-to-point network, an interface might discover multiple peers. Interface Interface using basic discovery. Hello Interval Hello interval in milliseconds. Hello Sent/Rcvd Number of Hellos sent or received on the interface.
  • Page 39 Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. This command displays FEC-label mappings for the specified VPN instance. If you do not specify a VPN instance, this command displays FEC-label mappings for the public network.
  • Page 40 Table 13 Command output Field Description Forwarding equivalence class identified by an IP prefix. FEC flag. It represents different things by setting different bits to 1. If multiple bits are set to 1, the flag represents all the things that correspond to those bits.
  • Page 41: Display Mpls Ldp Interface

    No Route Sent Received Table 14 Command output Field Description Number of FECs that LDP has discovered from the routing protocol or FECs FEC-label mappings advertised by peers. Implicit Null Number of FECs that are bound to the implicit null label. Explicit Null Number of FECs that are bound to the explicit null label.
  • Page 42: Display Mpls Ldp Lsp

    Table 15 Command output Field Description Interface Interface enabled with LDP. MPLS Whether the interface is enabled with MPLS. Whether the interface is configured with the mpls ldp enable command. LDP automatic configuration information: • If LDP autoconfiguration is enabled, this field displays IGP process Auto-config information, such as OSPF process ID and OSPF area ID.
  • Page 43: Display Mpls Ldp Parameter

    1151/1025(B) 30.1.1.1 GE1/0/3 2.2.2.2/32 -/1151(L) 10.1.1.0/24 1149/- -/1149(L) 192.168.1.0/24 1150/- -/1150(L) Table 16 Command output Field Description LSP status: • *—Stale, indicating the LSP is under a GR process. Status Flags • L—Liberal, indicating the LSP is not available. • B—Backup, indicating a backup LSP.
  • Page 44 the specified VPN instance. If you do not specify a VPN instance, this command displays the LDP running parameters for the public network. Examples # Display LDP running parameters for the public network. <Sysname> display mpls ldp parameter Global Parameters: Protocol Version : V1 IGP Sync Delay on Restart : 90 sec...
  • Page 45: Display Mpls Ldp Peer

    display mpls ldp peer Use display mpls ldp peer to display LDP peer and session information. Syntax In standalone mode: display mpls ldp peer [ vpn-instance vpn-instance-name ] [ peer-lsr-id ] [ verbose ] [ standby slot slot-number ] In IRF mode: display mpls ldp peer [ vpn-instance vpn-instance-name ] [ peer-lsr-id ] [ verbose ] [ standby chassis chassis-number slot slot-number ] Views...
  • Page 46 Field Description State of the LDP session between the local LSR and the peer: • Non Existent—No TCP connection is established. • Initialized—A TCP connection has been established. State • OpenRecv—LDP has received an acceptable initialization message. • OpenSent—LDP has sent an initialization message. •...
  • Page 47 Table 19 Command output Field Description Peer LDP ID LDP identifier of the peer. Local LDP ID LDP identifier of the local LSR. TCP connection information for the session, including the IP addresses and port numbers used by both ends of the TCP connection, and TCP connection whether MD5 authentication is enabled for the TCP connection.
  • Page 48: Display Mpls Ldp Summary

    Field Description LDP peer discovered by the extended discovery mechanism. • The address before -> (100.100.100.17 in this example) is the local IP address. • The address after -> (100.100.100.20 in this example) is the peer IP address. Targeted Hello •...
  • Page 49 network-operator mdc-admin mdc-operator Parameters all: Displays LDP summary information for the public network and all VPN instances. vpn-instance vpn-instance-name: Displays LDP summary information for the specified VPN instance. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. standby: Displays backup LDP process information.
  • Page 50: Graceful-Restart

    Field Description Number of peers in Operational state. Operational GR: Number of GR-capable peers. OpenSent Number of peers in OpenSent state. OpenRecv Number of peers in OpenRecv state. Initialized Number of peers in Initialized state. Non-Existent Number of peers in Non-Existent state. graceful-restart Use graceful-restart to enable Graceful Restart (GR) for LDP.
  • Page 51 Syntax graceful-restart timer { forwarding-hold hold-time | reconnect reconnect-time } undo graceful-restart timer { forwarding-hold | reconnect } Default The MPLS Forwarding State Holding timer is 180 seconds and the Reconnect timer is 120 seconds. Views LDP view Predefined user roles network-admin mdc-admin Parameters...
  • Page 52: Label-Distribution

    Examples # Set the MPLS Forwarding State Holding time to 200 seconds, and the Reconnect time to 100 seconds. <Sysname> system-view [Sysname] mpls ldp [Sysname-ldp] graceful-restart timer forwarding-hold 200 [Sysname-ldp] graceful-restart timer reconnect 100 Related commands display mpls ldp parameter graceful-restart label-distribution Use label-distribution to configure the label distribution control mode.
  • Page 53: Loop-Detect

    Related commands display mpls ldp parameter loop-detect Use loop-detect to enable loop detection. Use undo loop-detect to disable loop detection. Syntax loop-detect undo loop-detect Default Loop detection is disabled. Views LDP view, LDP-VPN instance view Predefined user roles network-admin mdc-admin Usage guidelines This command enables LDP to detect and terminate LSP loops.
  • Page 54: Maxhops

    Default No LDP LSR ID is configured. LDP uses the MPLS LSR ID configured by the mpls lsr-id command for both the public network and VPN instances. Views LDP view, LDP-VPN instance view Predefined user roles network-admin mdc-admin Parameters lsr-id: Specifies an LDP LSR ID, in dotted decimal notation. Usage guidelines If you configure an LDP LSR ID by using the lsr-id command in LDP view or LDP-VPN instance view, LDP uses the LDP LSR ID.
  • Page 55: Md5-Authentication

    mdc-admin Parameters hop-number: Specifies the maximum hop count for loop detection, in the range of 1 to 32. Usage guidelines LDP adds a hop count in a label request or label mapping message. The hop count increments by 1 on each LSR. When the hop count reaches the maximum hop count configured by this command, LDP considers that a loop occurs and terminates LSP establishment.
  • Page 56: Mpls Ldp

    Usage guidelines To improve security for LDP sessions, you can configure MD5 authentication for the underlying TCP connections to check the integrity of LDP messages. The local LSR and the peer LSR must have the same key. Otherwise, they cannot establish a TCP connection.
  • Page 57: Mpls Ldp Timer

    [Sysname-ldp] Related commands mpls ldp enable vpn-instance mpls ldp timer Use mpls ldp timer to set the Hello hold time, Hello interval, Keepalive hold time, and Keepalive interval. Use undo mpls ldp timer to restore the default. Syntax mpls ldp timer { hello-hold timeout | hello-interval interval | keepalive-hold timeout | keepalive-interval interval } undo mpls ldp timer { hello-hold | hello-interval | keepalive-hold | keepalive-interval } Default...
  • Page 58 If the Hello hold time and the Keepalive hold time values are too large, LDP cannot quickly detect link failures. If the values are too small, LDP might mistakenly consider a normal link failed. As a best practice, use the default values. Make sure all links between two LSRs have the same Keepalive hold time as the one configured in LDP peer view when one of the following events occurs: •...
  • Page 59: Non-Stop-Routing

    non-stop-routing Use non-stop-routing to enable LDP NSR. Use undo non-stop-routing to disable LDP NSR. Syntax non-stop-routing undo non-stop-routing Default LDP NSR is disabled. Views LDP view Predefined user roles network-admin mdc-admin Usage guidelines LDP nonstop routing (NSR) backs up protocol states and data (including LDP session and LSP information) from the active process to the standby process.
  • Page 60: Reset Mpls Ldp

    Syntax pv-limit pv-number undo pv-limit Default The path vector limit is 32. Views LDP view, LDP-VPN instance view Predefined user roles network-admin mdc-admin Parameters pv-number: Specifies the path vector limit in the range of 1 to 32. Usage guidelines LDP adds LSR ID information in a label request or label mapping message. Each LSR checks whether its LSR ID is contained in the message.
  • Page 61: Snmp-Agent Trap Enable Ldp

    Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. This command resets the LDP sessions in the specified VPN instance. If you do not specify a VPN instance, this command resets the LDP sessions in the public network.
  • Page 62: Vpn-Instance

    vpn-instance Use vpn-instance to enable LDP for a VPN instance and enter LDP-VPN instance view. Use undo vpn-instance to delete the LDP-VPN instance. Syntax vpn-instance vpn-instance-name undo vpn-instance vpn-instance-name Default LDP is disabled for a VPN instance. Views LDP view Predefined user roles network-admin mdc-admin...
  • Page 63: Ipv4 Ldp Commands

    IPv4 LDP commands accept-label Use accept-label to configure a label acceptance policy. Use undo accept-label to remove a label acceptance policy. Syntax accept-label peer peer-lsr-id prefix-list prefix-list-name undo accept-label peer peer-lsr-id Default No label acceptance policy is configured. LDP accepts all IPv4 FEC-label mappings from all peers. Views LDP view, LDP-VPN instance view Predefined user roles...
  • Page 64: Advertise-Label

    advertise-label Use advertise-label to configure a label advertisement policy. Use undo advertise-label to delete a label advertisement policy. Syntax advertise-label prefix-list prefix-list-name [ peer peer-prefix-list-name ] undo advertise-label prefix-list prefix-list-name Default No label advertisement policy is configured. The device advertises IPv4 FEC-label mappings permitted by the LSP generation policy to all peers.
  • Page 65: Display Mpls Ldp Igp Sync

    [Sysname] mpls ldp [Sysname-ldp] advertise-label prefix-list prefix-to-C peer peer-C [Sysname-ldp] advertise-label prefix-list prefix-to-D peer peer-D Related commands display mpls ldp fec ip prefix-list (Layer 3—IP Routing Command Reference) lsp-trigger display mpls ldp igp sync Use display mpls ldp igp sync to display LDP-IGP synchronization information. Syntax display mpls ldp igp sync [ interface interface-type interface-number ] Views...
  • Page 66: Igp Sync Delay

    Table 21 Command output Field Description IGP protocols that require LDP-IGP synchronization: OSPF and IGP protocols IS-IS. LDP-IGP synchronization state: • Ready—LDP is converged and is available for IGP. • Delayed—LDP is waiting to notify IGP of the convergence. Sync status remaining indicates the remaining time for the delay, in seconds.
  • Page 67: Igp Sync Delay On-Restart

    Examples # Set a 30-second delay for LDP to notify IGP of the LDP convergence. <Sysname> system-view [Sysname] mpls ldp [Sysname-ldp] igp sync delay 30 Related commands igp sync delay on-restart mpls ldp igp sync disable mpls ldp sync (IS-IS view) mpls ldp sync (OSPF view/OSPF area view) igp sync delay on-restart Use igp sync delay on-restart to set the maximum delay for LDP to notify IGP of the LDP-IGP...
  • Page 68: Lsp-Trigger

    [Sysname-ldp] igp sync delay on-restart 300 Related commands igp sync delay mpls ldp igp sync disable mpls ldp sync (IS-IS view) mpls ldp sync (OSPF view/OSPF area view) lsp-trigger Use lsp-trigger to configure an LSP generation policy for IPv4 FECs. Use undo lsp-trigger to restore the default.
  • Page 69: Mpls Ldp Enable

    [Sysname] mpls ldp [Sysname-ldp] lsp-trigger prefix-list egress-fec-list Related commands ip prefix-list (Layer 3—IP Services Command Reference) mpls ldp enable Use mpls ldp enable to enable IPv4 LDP on an interface. Use undo mpls ldp enable to disable IPv4 LDP on an interface. Syntax mpls ldp enable undo mpls ldp enable...
  • Page 70: Mpls Ldp Igp Sync Disable

    mpls ldp igp sync disable Use mpls ldp igp sync disable to disable LDP-IGP synchronization on an interface. Use undo mpls ldp igp sync disable to restore the default. Syntax mpls ldp igp sync disable undo mpls ldp igp sync disable Default LDP-IGP synchronization is enabled on an interface.
  • Page 71: Mpls Ldp Sync (Ospf View/Ospf Area View)

    Parameters level-1: Specifies Level-1 of the IS-IS process. level-2: Specifies Level-2 of the IS-IS process. Usage guidelines LDP establishes LSPs based on the IGP optimal route. If LDP is not synchronized with IGP, MPLS traffic forwarding might be interrupted. The LDP-IGP synchronization feature is used to solve the synchronization problem.
  • Page 72: Mpls Ldp Transport-Address

    Usage guidelines LDP establishes LSPs based on the IGP optimal route. If LDP is not synchronized with IGP, MPLS traffic forwarding might be interrupted. The LDP-IGP synchronization feature is used to solve the synchronization problem. After LDP-IGP synchronization is enabled, IGP advertises the actual cost of a link only when LDP convergence on the link is completed.
  • Page 73: Session Protection

    Predefined user roles network-admin mdc-admin Parameters ip-address: Specifies the LDP IPv4 transport address. interface: Uses the IPv4 address of the current interface as the LDP IPv4 transport address. Usage guidelines Before two LSRs establish an IPv4 LDP session, they must establish a TCP connection by using the LDP IPv4 transport address.
  • Page 74: Targeted-Peer

    Parameters duration time: Specifies the session protection duration time in the range of 30 to 2147483 seconds. If you do not specify the duration, session protection always takes effect. peer peer-prefix-list-name: Specifies an IP prefix list by its name, a case-sensitive string of 1 to 63 characters.
  • Page 75 Parameters ip-address: Specifies the peer IPv4 address. Usage guidelines If you do not specify the LDP transport address, LDP sends the local LSR ID to the peer specified by this command in IPv4 Targeted Hellos. To ensure a successful IPv4 Targeted Hello adjacency, make sure the following requirements are met: •...
  • Page 76: Mpls Te Commands

    MPLS TE commands auto-bandwidth enable Use auto-bandwidth enable to enable automatic bandwidth adjustment globally, and set the output rate sampling interval. Use undo auto-bandwidth enable to disable automatic bandwidth adjustment. Syntax auto-bandwidth enable [ sample-interval seconds ] undo auto-bandwidth enable Default The global auto bandwidth adjustment is disabled.
  • Page 77: Auto-Tunnel Backup

    auto-tunnel backup Use auto-tunnel backup to enable the automatic bypass tunnel setup feature (also called auto FRR) globally, and enter MPLS TE auto-tunnel backup view. Use undo auto-tunnel backup to disable the auto FRR feature globally. Syntax auto-tunnel backup undo auto-tunnel backup Default The auto FRR feature is disabled globally.
  • Page 78: Display Explicit-Path

    undo disable Default The explicit path is enabled. Views Explicit path view Predefined user roles network-admin mdc-admin Usage guidelines You can use the disable command to prevent an explicit path from being used by a tunnel during explicit path configuration. Examples # Disable the explicit path named path1.
  • Page 79: Display Isis Mpls Te Advertisement

    Table 22 Command output Field Description Path Name Name of the explicit path. Hop Count Number of nodes specified in the explicit path. Explicit path status: • Enabled—The explicit path is available. Path Status • Disabled—The explicit path is not available. Index Index of a node on the explicit path.
  • Page 80 Usage guidelines If you do not specify the level-1 or level-2 keyword, this command displays link and node information for both Level-1 and Level-2 routers. If you do not specify the originate-system system-id option or the local keyword, this command displays link and node information advertised by all systems.
  • Page 81 IGP metric : 10 TE metric : 10 Link flags : -/-/- Physical bandwidth: 12500000 bytes/sec Reservable bandwidth: 0 bytes/sec Unreserved bandwidth for each TE class: TE class 0: 0 bytes/sec TE class 1: 0 bytes/sec TE class 2: 0 bytes/sec TE class 3: 0 bytes/sec TE class...
  • Page 82: Display Isis Mpls Te Configured-Sub-Tlvs

    Field Description Node total count Total number of nodes that advertises TE information. Node information flags: • A—Already synchronizes the node information with CSPF. • S—Ready to synchronize the node information with CSPF again Node flags after the previous synchronization failed. •...
  • Page 83: Display Isis Mpls Te Network

    Examples # Display sub-TLV information for IS-IS TE. <Sysname> display isis mpls te configured-sub-tlvs TE sub-TLV information for IS-IS(1) ----------------------------------- Type value of the unreserved sub-pool bandwidth sub-TLV : 251 Type value of the bandwidth constraint sub-TLV : 252 Table 24 Command output Field Description TE Sub-TLV Information for IS-IS(1)
  • Page 84: Display Isis Mpls Te Tunnel

    TE information for IS-IS(1) -------------------------- Level-1 network information --------------------------- LAN ID : 0000.0000.0004.04 Frag ID : 0x00 Flags : -/-/- Attached routers : 0000.0000.0001 0000.0000.0004 Level-2 Network Information --------------------------- LAN ID : 0000.0000.0004.04 Frag ID : 0x00 Flags : -/-/- Attached routers : 0000.0000.0001 0000.0000.0004...
  • Page 85: Display Mpls Te Ds-Te

    level-2: Displays tunnel interface information for Level-2 routers. process-id: Specifies an IS-IS process by its ID in the range of 1 to 65535. If you do not specify an IS-IS process, this command displays tunnel information for all IS-IS processes. Usage guidelines If you do not specify the level-1 or level-2 keyword, this command displays IS-IS tunnel interface information for both IS-IS Level-1 and IS-IS Level-2 routers.
  • Page 86: Display Mpls Te Link-Management Bandwidth-Allocation

    Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display DS-TE information. <Sysname> display mpls te ds-te MPLS LSR ID : 0.0.0.0 MPLS DS-TE mode : Prestandard MPLS DS-TE BC model : RDM TE Class Class Type Priority Table 27 Command output Field...
  • Page 87 Syntax display mpls link-management bandwidth-allocation interface interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters interface interface-type interface-number: Displays bandwidth information on the interface specified by its type and number. If you do not specify this option, the command displays bandwidth information on all MPLS TE-enabled interfaces.
  • Page 88: Display Mpls Te Tedb

    1000000 1000000 Table 28 Command output Field Description Interface Interface enabled with MPLS TE. Max Link Bandwidth Maximum link bandwidth for MPLS TE traffic. Number of CRLSPs that have successfully obtained Allocated Bandwidth-Item Count bandwidth. Related commands mpls te max-link-bandwidth mpls te max-reservable-bandwidth mpls te max-reservable-bandwidth mam mpls te max-reservable-bandwidth rdm...
  • Page 89 summary: Displays summary TEDB information. Examples # Display TEDB information for all broadcast and NBMA networks. <Sysname> display mpls te tedb network DR MPLS LSR-ID DR-address Process-ID Area/Level Neighbors 8.1.1.2 3.0.0.2 OSPF 1.1.1.1 2.1.1.1 8.1.1.2 2.1.1.1 3.0.0.3 OSPF 2.1.1.1 3.1.1.1 2.1.1.2 3.1.1.2 3.0.0.4...
  • Page 90 Level-1 3.1.1.1 OSPF Table 30 Command output Field Description MPLS LSR-ID MPLS LSR ID of a router, in dotted decimal notation. Internal gateway protocol: OSPF or IS-IS. Process-ID IGP process ID. Area/Level OSPF area or IS-IS level of the router. Links-Count Number of links in an OSPF area or IS-IS level.
  • Page 91 IGP Metric: 100 TE Metric: 100 Link Attribute: 0xff Maximum Link Bandwidth: 100 kbps Maximum Reservable Bandwidth: 20 kbps Bandwidth Constraint Model: Prestandard DS-TE RDM Bandwidth Constraints: BC[0]: kbps BC[1]: kbps Unreserved Bandwidth for each TE class: TE class kbps TE class kbps TE class...
  • Page 92 TE class kbps TE class 10: kbps TE class 11: kbps TE class 12: kbps TE class 13: kbps TE class 14: kbps TE class 15: kbps Table 32 Command output Field Description MPLS LSR-ID MPLS LSR ID of a router, in dotted decimal notation. IGP Type Internal gateway protocol: OSPF or IS-IS.
  • Page 93: Display Mpls Te Tunnel-Interface

    Unreserved Bandwidth for each TE class: TE class kbps TE class kbps TE class kbps TE class kbps TE class kbps TE class kbps TE class kbps TE class kbps Table 33 Command output Field Description MPLS LSR-ID MPLS LSR ID of a router, in dotted decimal notation. IGP Type Internal gateway protocol: OSPF or IS-IS.
  • Page 94 Parameters tunnel number: Displays information about the tunnel interface specified by its number. The tunnel interface must have been created. If you do not specify this option, the command displays information about all MPLS TE tunnel interfaces. Examples # Display information about all MPLS TE tunnel interfaces. <Sysname>...
  • Page 95 Field Description Running state of the tunnel: Down or Up. Description information includes: • Main CRLSP down. • Main CRLSP up. • Main CRLSP being set up. • Shared-resource CRLSP down. • Shared-resource CRLSP up. • Shared-resource CRLSP being set up. Tunnel State •...
  • Page 96: Display Ospf Mpls Te Advertisement

    Field Description Affinity Attr/Mask Tunnel affinity attribute and mask. Name of the explicit path referenced by the tunnel. Explicit Path Name If the path used by the tunnel is not an explicit path, this field displays a hyphen (-). Name of the explicit path referenced by the backup tunnel. Backup Explicit Path If the path used by the backup tunnel is not an explicit path, this field displays a hyphen (-).
  • Page 97 Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters process-id: Specifies an OSPF process ID in the range of 1 to 65535. If you do not specify this argument, the command displays information about all OSPF processes. area area-id: Specifies an area by its ID, an IP address or a decimal integer, in the range of 0 to 4294967295.
  • Page 98 TE class 2 = 0 bytes/sec TE class 3 = 0 bytes/sec TE class 4 = 0 bytes/sec TE class 5 = 0 bytes/sec TE class 6 = 0 bytes/sec TE class 7 = 0 bytes/sec TE class 8 = 0 bytes/sec TE class 9 = 0 bytes/sec TE class 10 = 0 bytes/sec...
  • Page 99: Display Ospf Mpls Te Network

    Field Description Administrative Group Link attributes. Bandwidth constraint model, Prestandard DS-TE RDM, IETF Bandwidth Constraint Model DS-TE RDM, or IETF DS-TE MAM. Bandwidth Constraints This field takes effect only on DS-TEs. Bandwidth constraint value. The Prestandard mode supports two BCs, and the IETF mode supports four BCs.
  • Page 100: Display Ospf Mpls Te Tunnel

    Attached Router 1.1.1.1 Table 36 Command output Field Description Adv Router ID ID of the router that advertises the information. Designated Router IP address of the designated router. Network information flags: • A—Already synchronizes the information with CSPF. • U—Updates the information with CSPF again after the Flag previous update fails.
  • Page 101: Ds-Te Bc-Model

    Auto Route: IGP Shortcut Metric: Relative Table 37 Command output Field Description Interface Name and IP address of a tunnel interface. Tunnel interface states: • Inactive—The tunnel interface is not used to forward packets, State because the tunnel route is not the optimal route. •...
  • Page 102: Ds-Te Te-Class

    This command applies only to IETF DS-TE. The prestandard DS-TE only uses RDM. After you change the BC model in IETF DS-TE mode, all nonzero-bandwidth CRLSPs on the device are deleted and then re-established. Examples # Specify the BC model of IETF DS-TE as MAM. <Sysname>...
  • Page 103: Ds-Te Mode

    Usage guidelines The setup or/and holding priority of the LSP transporting a traffic trunk from a CT must be the priority specified for the CT in the TE class. When you configure a TE class, make sure to specify a CT-priority pair different from that in any existing TE class.
  • Page 104: Explicit-Path

    • A device operating in prestandard mode cannot communicate with devices from some vendors. A device operating in IETF mode can communicate with devices from other vendors. Be aware of these differences and choose a proper DS-TE mode as needed. After the DS-TE mode is changed, all CRLSPs on the device are deleted and then re-established.
  • Page 105: Fast-Reroute Timer

    nexthop fast-reroute timer Use fast-reroute timer to set the interval for selecting an optimal bypass tunnel. Use undo fast-reroute timer to restore the default. Syntax fast-reroute timer interval undo fast-reroute timer Default The optimal bypass tunnel selection interval is 300 seconds. Views MPLS TE view Predefined user roles...
  • Page 106: Mpls Te

    Default The IGP floods TE information every 180 seconds. Views MPLS TE view Predefined user roles network-admin mdc-admin Parameters interval: Specifies the interval at which IGP floods TE information, in the range of 0 to 3600 seconds. Usage guidelines When the reservable bandwidth of a link changes, IGP floods the link TE information to notify network devices of the change.
  • Page 107: Mpls Te Affinity-Attribute

    Usage guidelines Disabling MPLS TE also deletes all CRLSPs on the device and MPLS TE configurations on all interfaces. Examples # Enable MPLS TE for the local node and enter MPLS TE view. <Sysname> system-view [Sysname] mpls lsr-id 1.1.1.9 [Sysname] mpls te [Sysname-te] Related commands mpls te enable...
  • Page 108: Mpls Te Auto-Bandwidth

    For example, if the affinity is 0xFFFFFFF0 and the mask is 0x0000FFFF, a link is available for the tunnel when its attribute bits meet the following requirements: • The highest 16 bits each can be 0 or 1 (no requirements). •...
  • Page 109: Mpls Te Auto-Tunnel Backup Disable

    min-bw min-bandwidth: Specifies the minimum automatic bandwidth for the tunnel, in the range of 1 to 4294967295, in kbps. If you do not specify this option, TE does not limit the minimum bandwidth value. Usage guidelines Automatic bandwidth adjustment functions as follows: Samples the tunnel interface output rate at regular intervals.
  • Page 110: Mpls Te Backup

    Syntax mpls te auto-tunnel backup disable undo mpls te auto-tunnel backup disable Default The auto FRR feature is enabled on all RSVP-enabled interfaces after it is enabled globally. Views Interface view Predefined user roles network-admin mdc-admin Usage guidelines The auto FRR feature allows an interface to automatically set up a node-protection bypass tunnel and a link-protection bypass tunnel for each of its primary CRLSPs.
  • Page 111: Mpls Te Backup Bandwidth

    Parameters hot-standby: Enables hot backup for the tunnel. In this mode, a backup CRLSP is established immediately after the primary CRLSP is established. When the primary CRLSP fails, MPLS TE immediately switches traffic to the backup CRLSP. ordinary: Enables ordinary backup for the tunnel. In this mode, a backup CRLSP is established after the primary CRLSP fails.
  • Page 112: Mpls Te Backup-Path

    un-limited: Puts no limit on total protected bandwidth. This keyword means the bypass tunnel does not provide bandwidth protection. Usage guidelines After you execute this command for a tunnel, the record route flag is automatically set for the tunnel, regardless of whether the mpls te record-route command is configured. If you specify the un-limited keyword, the bypass tunnel does not provide bandwidth protection.
  • Page 113: Mpls Te Bandwidth

    Syntax mpls te backup-path preference value { dynamic | explicit-path path-name } [ no-cspf ] undo mpls te backup-path preference value Default MPLS TE uses the dynamically calculated path to establish the backup CRLSP. Views Tunnel interface view Predefined user roles network-admin mdc-admin Parameters...
  • Page 114: Mpls Te Bandwidth Change Thresholds

    Syntax mpls te bandwidth [ ct0 | ct1 | ct2 | ct3 ] bandwidth undo mpls te bandwidth Default No bandwidth (0 bps) is assigned to an MPLS TE tunnel and the tunnel is available for CT 0. Views Tunnel interface view Predefined user roles network-admin mdc-admin...
  • Page 115: Mpls Te Bidirectional

    Syntax mpls te bandwidth change thresholds { down | up } percent undo mpls te bandwidth change thresholds { down | up } Default The IGP floods the TE information when the bandwidth increases or decreases by 10% of the link reservable bandwidth.
  • Page 116 Default The bidirectional tunnel feature is disabled on an MPLS TE tunnel interface. A tunnel established on an MPLS TE tunnel interface is a unidirectional MPLS TE tunnel. Views Tunnel interface view Predefined user roles network-admin mdc-admin Parameters associated reverse-lsp lsp-name lsp-name: Configures an associated bidirectional MPLS TE tunnel, and specifies the associated reverse CRLSP.
  • Page 117 Examples • Configure an MPLS TE bidirectional tunnel between Sysname1 and Sysname2 in co-routed mode: # Configure Sysname1 as follows: Enable the MPLS TE bidirectional tunnel feature on tunnel interface Tunnel 10. Configure Sysname1 as the active end of the co-routed bidirectional tunnel. <Sysname1>...
  • Page 118: Mpls Te Enable (Interface View)

    mpls te enable (interface view) Use mpls te enable to enable MPLS TE on an interface. Use undo mpls te enable to disable MPLS TE on an interface. Syntax mpls te enable undo mpls te enable Default MPLS TE is disabled on an interface. Views Interface view Predefined user roles...
  • Page 119: Mpls Te Enable (Ospf Area View)

    mdc-admin Parameters level-1: Enables MPLS TE for IS-IS at Level-1. level-2: Enables MPLS TE for IS-IS at Level-2. Usage guidelines If you do not specify an IS-IS level, this command enables MPLS TE for IS-IS at both Level-1 and Level-2. IS-IS TE uses a sub-TLV of the extended IS reachability TLV (type 22) to carry TE attributes.
  • Page 120: Mpls Te Fast-Reroute

    Usage guidelines OSPF TE uses Type-10 opaque LSAs to carry the TE attributes for a link. Before you configure OSPF TE, you must enable opaque LSA advertisement and reception by using the opaque-capability enable command. For more information about opaque LSA advertisement and reception, see Layer 3—IP Routing Configuration Guide.
  • Page 121: Mpls Te Fast-Reroute Bypass-Tunnel

    Regardless of whether a primary CRLSP requires bandwidth protection, the following will occur when the primary CRLSP is bound to a bypass tunnel that provides bandwidth protection: • The bypass tunnel will reserve the protected bandwidth for the primary CRLSP. •...
  • Page 122: Mpls Te Igp Advertise

    Examples # Configure tunnel interface Tunnel 1 as the bypass tunnel for VLAN-interface 10. <Sysname> system-view [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] mpls te fast-reroute bypass-tunnel tunnel 1 Related commands fast-reroute timer mpls te igp advertise Use mpls te igp advertise to enable forwarding adjacency for an MPLS TE tunnel, so IGP advertises the tunnel as a link in the IGP network.
  • Page 123: Mpls Te Igp Metric

    [Sysname-Tunnel1] mpls te igp advertise hold-time 10000 Related commands mpls te igp metric mpls te igp shortcut mpls te igp metric Use mpls te igp metric to assign a metric to an MPLS TE tunnel. Use undo mpls te igp metric to restore the default. Syntax mpls te igp metric { absolute value | relative value } undo mpls te igp metric...
  • Page 124: Mpls Te Link-Attribute

    Syntax mpls te igp shortcut [ isis | ospf ] undo mpls te igp shortcut Default IGP shortcut is disabled for an MPLS TE tunnel. The ingress node does not include the MPLS TE tunnel in the IGP route calculation as a link. Views Tunnel interface view Predefined user roles...
  • Page 125: Mpls Te Loop-Detection

    Default The link attribute value is 0x00000000. Views Interface view Predefined user roles network-admin mdc-admin Parameters attribute-value: Specifies the link attribute value in the range of 0x00000000 to 0xFFFFFFFF. A link attribute value is a 32-bit binary number. Each bit represents an attribute with a value of 0 or 1. Usage guidelines The TE information for a link advertised by the IGP includes the link attribute configured by this command.
  • Page 126: Mpls Te Max-Link-Bandwidth

    undo mpls te loop-detection Default Loop detection is disabled for an MPLS TE tunnel. Views Tunnel interface view Predefined user roles network-admin mdc-admin Usage guidelines When loop detection is enabled on the ingress node of an MPLS TE tunnel, the route recording feature is automatically enabled for the tunnel, regardless of whether the mpls te record-route command is configured.
  • Page 127: Mpls Te Max-Reservable-Bandwidth

    <Sysname> system-view [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] mpls te max-link-bandwidth 1158 Related commands display mpls te link-management bandwidth-allocation mpls te bandwidth mpls te max-reservable-bandwidth mpls te max-reservable-bandwidth mam mpls te max-reservable-bandwidth rdm mpls te max-reservable-bandwidth Use mpls te max-reservable-bandwidth to set the maximum reservable bandwidth of the link (BC 0) and BC 1 in prestandard DS-TE RDM model.
  • Page 128: Mpls Te Max-Reservable-Bandwidth Mam

    [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] mpls te max-reservable-bandwidth 1158 bc1 200 Related commands display mpls te link-management bandwidth-allocation mpls te bandwidth mpls te max-link-bandwidth mpls te max-reservable-bandwidth mam mpls te max-reservable-bandwidth rdm mpls te max-reservable-bandwidth mam Use mpls te max-reservable-bandwidth mam to set the maximum reservable bandwidth of the link and the BCs in MAM model of the IETF DS-TE.
  • Page 129: Mpls Te Max-Reservable-Bandwidth Rdm

    The maximum reservable bandwidth and BCs configured by this command are only for MPLS TE traffic. Examples # Set the link maximum reservable bandwidth to 1158 kbps and BC 0 through BC 3 to 500 kbps, 300 kbps, 400 kbps, and 100 kbps for MPLS TE traffic in IETF DS-TE MAM model. <Sysname>...
  • Page 130: Mpls Te Metric

    Usage guidelines The device carries the bandwidth values configured by this command in IGP route advertisements. The tunnel ingress node can obtain the information and use the information in CSPF calculation to select a path that meets the tunnel bandwidth requirements. BC 0 (bandwidth-value) must be smaller than or equal to the maximum bandwidth of the link (configured with the mpls te max-link-bandwidth command).
  • Page 131: Mpls Te Path

    Examples # Assign a TE metric of 20 to the link on VLAN-interface 10. <Sysname> system-view [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] mpls te metric 20 Related commands mpls te path metric-type path metric-type mpls te path Use mpls te path to specify a path for the tunnel and set the preference of the path. Use undo mpls te path to delete the specified path for the tunnel.
  • Page 132: Mpls Te Path-Metric-Type

    Related commands display mpls te tunnel-interface mpls te backup-path mpls te path-metric-type Use mpls te path-metric-type to specify the link metric type for path selection of a tunnel. Use undo mpls te path-metric-type to restore the default. Syntax mpls te path-metric-type { igp | te } undo mpls te path-metric-type Default No link metric type is specified for path selection of a tunnel.
  • Page 133: Mpls Te Priority

    mpls te priority Use mpls te priority to set a setup priority and a holding priority for an MPLS TE tunnel. Use undo mpls te priority to restore the default. Syntax mpls te priority setup-priority [ hold-priority ] undo mpls te priority Default The setup priority and the holding priority of an MPLS TE tunnel are both 7.
  • Page 134: Mpls Te Record-Route

    mpls te record-route Use mpls te record-route to enable route recording and label recording for the tunnel. Use undo mpls te record-route to restore the default. Syntax mpls te record-route [ label ] undo mpls te record-route Default A tunnel does not support route recording or label recording. Views Tunnel interface view Predefined user roles...
  • Page 135: Mpls Te Reoptimization (User View)

    Predefined user roles network-admin mdc-admin Parameters frequency seconds: Specifies the tunnel reoptimization frequency in the range of 1 to 604800 seconds. The default is 3600 seconds. Usage guidelines MPLS TE uses the tunnel reoptimization feature to implement dynamic CRLSP optimization. For example, if a link on the optimal path does not have enough reservable bandwidth during tunnel setup, MPLS TE sets up the tunnel on another path.
  • Page 136: Mpls Te Resv-Style

    Related commands mpls te reoptimization (tunnel interface view) mpls te resv-style Use mpls te resv-style to configure the resource reservation style for the MPLS TE tunnel. Use undo mpls te resv-style to restore the default. Syntax mpls te resv-style { ff | se } undo mpls te resv-style Default The resource reservation style is SE.
  • Page 137: Mpls Te Route-Pinning

    Default The maximum number of tunnel setup attempts is 3. Views Tunnel interface view Predefined user roles network-admin mdc-admin Parameters times: Specifies the number of tunnel setup attempts, in the range of 1 to 4294967295. Usage guidelines After failing to establish an MPLS TE tunnel, the tunnel ingress node waits for the tunnel setup retry interval (configured by the mpls te timer retry command).
  • Page 138: Mpls Te Signaling

    In the same tunnel interface view, the mpls te route-pinning command cannot be used together with the mpls te reoptimization and mpls te auto-bandwidth adjustment commands. Examples # Enable route pinning for Tunnel 1. <Sysname> system-view [Sysname] interface tunnel 1 mode mpls-te [Sysname-Tunnel1] mpls te route-pinning Related commands display mpls te tunnel-interface...
  • Page 139: Mpls Te Static-Cr-Lsp

    mpls te static-cr-lsp Use mpls te static-cr-lsp to reference a static CRLSP for a tunnel. Use undo mpls te static-cr-lsp to remove the reference of a static CRLSP for a tunnel. Syntax mpls te static-cr-lsp lsp-name undo mpls te static-cr-lsp lsp-name Default A tunnel does not reference any static CRLSP.
  • Page 140: Nexthop

    Default The retry interval is 2 seconds. Views Tunnel interface view Predefined user roles network-admin mdc-admin Parameters seconds: Specifies the interval at which MPLS TE tries to re-establish the tunnel, in the range of 1 to 604800 seconds. Usage guidelines After failing to establish an MPLS TE tunnel, the tunnel ingress node waits for the tunnel setup retry interval.
  • Page 141: Nhop-Only

    ip-address: Specifies a node by its IP address in dotted decimal notation. exclude: Excludes the specified node from the explicit path. include: Includes the specified node on the explicit path. loose: Specifies the node as a loose node, which means the specified node and its previous hop can be connected indirectly.
  • Page 142: Path-Metric-Type

    Usage guidelines Execution of the nhop-only command deletes all existing node-protection bypass tunnels automatically created for MPLS TE auto FRR. Examples # Configure the device to automatically create only link-protection bypass tunnels. <Sysname> system-view [Sysname] mpls te [Sysname-te] auto-tunnel backup [Sysname-te-auto-bk] nhop-only Related commands auto-tunnel backup...
  • Page 143: Reset Mpls Te Auto-Bandwidth-Adjustment Timers

    Examples # Configure MPLS TE tunnels that are not explicitly specified with a metric type to use the IGP metric for path selection. <Sysname> system-view [Sysname] mpls te [Sysname-te] path-metric-type igp Related commands mpls te metric mpls te path-metric-type reset mpls te auto-bandwidth-adjustment timers Use reset mpls te auto-bandwidth-adjustment timers to reset the automatic bandwidth adjustment feature.
  • Page 144: Timers Removal Unused

    Views IS-IS view Predefined user roles network-admin mdc-admin Parameters bw-constraint value: Specifies the type value of the sub-TLV that carries the bandwidth constraints, in the range of 23 to 254. unreserved-subpool-bw value: Specifies the type value of the sub-TLV that carries the unreserved subpool bandwidth, in the range of 23 to 254.
  • Page 145: Tunnel-Number

    Usage guidelines An automatically created bypass tunnel can protect multiple primary CRLSPs. A bypass tunnel is unused when the bypass tunnel is not bound to any primary CRLSP. When a bypass tunnel is unused for the period of time configured by this command, MPLS TE removes the bypass tunnel to release the occupied bandwidth and tunnel interface number.
  • Page 146 The PLR uses the interface numbers in the specified range in ascending order for the bypass tunnels. When you use the tunnel-number command, follow these restrictions and guidelines: • The min-number must be smaller than or equal to the max-number. •...
  • Page 147: Static Crlsp Commands

    Static CRLSP commands display mpls static-cr-lsp Use display mpls static-cr-lsp to display information about static CRLSPs. Syntax display mpls static-cr-lsp [ lsp-name lsp-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters lsp-name lsp-name: Displays information about the static CRLSP specified by its name, a case-sensitive string of 1 to 15 characters.
  • Page 148: Static-Cr-Lsp Egress

    In-Label : Null Out-Label : 60 Out-Interface : GE1/0/1 Nexthop : 20.1.1.2 Class Type : CT0 Bandwidth : 0 kbps LSP State : Up Table 40 Command output Field Description LSP Name Name of the static CRLSP. LSR type of the local node on the static CRLSP: Ingress, Transit, or LSR Type Egress.
  • Page 149: Static-Cr-Lsp Ingress

    mdc-admin Parameters lsp-name: Specifies a name for the static CRLSP, a case-sensitive string of 1 to 15 characters. in-label in-label-value: Specifies an incoming label in the range of 16 to 1023. Usage guidelines The static CRLSP must not have the same incoming label as an existing static LSP or static PW. If it is the same, the static CRLSP will not be available, even if you modify the incoming label of the static LSP or the static PW.
  • Page 150: Static-Cr-Lsp Transit

    ct0: Specifies CT 0 for the static CRLSP. ct1: Specifies CT 1 for the static CRLSP. ct2: Specifies CT 2 for the static CRLSP. ct3: Specifies CT 3 for the static CRLSP. bandwidth-value: Specifies the bandwidth required by the static CRLSP, in the range of 1 to 4294967295 kbps.
  • Page 151 out-label out-label-value: Specifies an outgoing label, a value of 0, 3, or in the range of 16 to 1023. bandwidth: Specifies the CT and required bandwidth for the static CRLSP. If you do not specify this keyword, the bandwidth required by the static CRLSP is 0 kbps. If you specify this keyword but do not specify a CT, the static CRLSP belongs to CT 0.
  • Page 152: Rsvp Commands

    RSVP commands authentication challenge Use authentication challenge to enable the RSVP challenge-response handshake feature globally or for an RSVP neighbor. Use undo authentication challenge to disable the challenge-response handshake feature globally or for an RSVP neighbor. Syntax authentication challenge undo authentication challenge Default The RSVP challenge-response handshake feature is disabled.
  • Page 153: Authentication Key

    [Sysname-rsvp-peer-1.1.1.9] authentication challenge Related commands authentication key authentication lifetime authentication window-size display rsvp authentication reset rsvp authentication rsvp authentication challenge rsvp authentication key rsvp authentication lifetime rsvp authentication window-size authentication key Use authentication key to enable RSVP authentication globally or for an RSVP neighbor, and configure the authentication key.
  • Page 154: Authentication Lifetime

    • RSVP view—Configuration applies to all RSVP security associations. • RSVP neighbor view—Configuration applies only to RSVP security associations with the specified RSVP neighbor. • Interface view—Configuration applies only to RSVP security associations established on the current interface. Configurations in RSVP neighbor view, interface view, and RSVP view are in descending order of priority.
  • Page 155 Use authentication lifetime in RSVP neighbor view to set the idle timeout for RSVP security associations with an RSVP neighbor. Use undo authentication lifetime to restore the default. Syntax authentication lifetime life-time undo authentication lifetime Default The idle timeout for an RSVP security association is 1800 seconds. Views RSVP view, RSVP neighbor view Predefined user roles...
  • Page 156: Authentication Window-Size

    Related commands authentication challenge authentication key authentication window-size display rsvp authentication reset rsvp authentication rsvp authentication challenge rsvp authentication key rsvp authentication lifetime rsvp authentication window-size authentication window-size Use authentication window-size in RSVP view to set the global RSVP authentication window size, which is the maximum number of authenticated RSVP messages that can be received out of sequence.
  • Page 157: Display Rsvp

    • If the new sequence number equals the last sequence number, RSVP regards the message a replay message and discards the message. • If the new sequence number is smaller than the last sequence number but greater than the last sequence number minus the window size, and has never been received before, RSVP accepts the message.
  • Page 158 Syntax display rsvp [ interface [ interface-type interface-number ] ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters interface: Displays RSVP information on interfaces. interface-type interface-number: Displays RSVP information on the interface specified by its type and number. Usage guidelines If you do not specify the interface keyword, this command displays global RSVP information.
  • Page 159 Field Description Hello lost Maximum number of consecutive lost or erroneous hellos allowed. Authentication RSVP authentication state. Lifetime Idle timeout for RSVP security associations, in seconds. Maximum number of out-of-sequence authenticated RSVP messages Window size that can be received. Challenge State of the challenge-response handshake feature.
  • Page 160: Display Rsvp Authentication

    Field Description State Interface state recorded by RSVP: UP or Down. IP address IP address of the current interface used by RSVP. MPLS TE MPLS TE state on the interface. RSVP RSVP state on the interface. Hello State of the hello extension feature on the interface. BFD state on the interface.
  • Page 161 Usage guidelines If you do not specify the from ip-address to ip-address options, this command displays information about the security associations established with all RSVP neighbors. After RSVP authentication is enabled, the device automatically establishes security associations when sending and receiving RSVP messages. A security association includes the following information: •...
  • Page 162 Field Description Direction of the security association: • Receive—Receive security association, used to authenticate Mode messages received from an RSVP neighbor. • Send—Send security association, used to authenticate messages sent to an RSVP neighbor. Type of the security association: • Peer—Security association established in RSVP neighbor view.
  • Page 163 Field Description Type of the security association: • Peer—Security association established in RSVP neighbor view. Type • Interface—Security association established in interface view. • Global—Security association established in RSVP view. State of the authentication challenge-response feature: • Not configured—The challenge-response handshake feature is disabled locally.
  • Page 164: Display Rsvp Lsp

    display rsvp lsp Use display rsvp lsp to display information about CRLSPs established by RSVP. Syntax display rsvp lsp [ destination ip-address ] [ source ip-address ] [ tunnel-id tunnel-id ] [ lsp-id lsp-id ] [ verbose ] Views Any view Predefined user roles network-admin network-operator...
  • Page 165 Tunnel name. The tunnel ingress node generates the name and notifies other nodes of the name through a Path message. If the ingress node is an HPE device, the tunnel name is Sysname_ttunnel-ID, where Sysname represents the device name, and Tunnel-name tunnel-ID represents the ID of the tunnel.
  • Page 166 Tunnel name. The tunnel ingress node generates the name and notifies other nodes of the name through a Path message. If the ingress node is an HPE device, the tunnel name is Tunnel name Sysname_ttunnel-ID, where Sysname represents the device name, and tunnel-ID represents the ID of the tunnel.
  • Page 167: Display Rsvp Peer

    Field Description Incoming label of the FRR bypass tunnel. nner label This field is displayed only when a bypass tunnel is bound. Name of the bypass tunnel. Bypass tunnel This field is displayed only when a bypass tunnel is bound. Related commands display rsvp request display rsvp reservation...
  • Page 168 Field Description Local hello state: • Idle—Hello extension is disabled. • Init—Hello extension is enabled. The local device failed to exchange State hellos with the neighbor or hello exchanges are in progress. • Up—Hello extension is enabled. The local device successfully exchanged hellos with the neighbor.
  • Page 169: Display Rsvp Request

    Field Description Neighbor device instance carried in the last hello received from the Dst instance neighbor. Summary refresh State of the Srefresh feature on the neighbor, Enabled or Disabled. GR state of the neighbor: • Invalid—Neighbor is not GR capable, or GR is disabled locally. •...
  • Page 170 3.3.3.9 1.1.1.9 57.10.10.1 Table 50 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Resource reservation style: • Style SE—Shared-explicit style. • FF—Fixed-filter style. # Display detailed information about the RSVP resource reservation requests sent to all upstream devices.
  • Page 171: Display Rsvp Reservation

    Related commands display rsvp lsp display rsvp reservation display rsvp sender display rsvp reservation Use display rsvp reservation to display information about RSVP resource reservation states. Syntax display rsvp reservation [ destination ip-address ] [ source ip-address ] [ tunnel-id tunnel-id ] [ nexthop ip-address ] [ verbose ] Views Any view...
  • Page 172 # Display detailed information about all RSVP resource reservation states. <Sysname> display rsvp reservation verbose Destination: 3.3.3.9 Source: 1.1.1.9 Tunnel ID: 1 Style: SE Nexthop: 57.20.20.1 Nexthop LIH: 0x35 Received message epoch: 0 Received message ID: 0 In-Interface: GE1/0/4 Unknown object number: 0 Flow descriptor 1: Flow specification: Mean rate (CIR): 50.00 kbps...
  • Page 173: Display Rsvp Sender

    Field Description Flag value and its meaning in an RRO: • No FRR—FRR is not configured. • FRR Avail—FRR is available. • In use—FRR has occurred. • Flag BW—Bandwidth protection. • Node-Prot—Node protection. • Node-ID—The IP address in the RRO is the LSR ID of the node. •...
  • Page 174 3.3.3.9 1.1.1.9 0.00 3.3.3.9 2.2.2.9 17767 125.00 Table 54 Command output Field Description Destination Tunnel destination address. Source Tunnel source address. Resource reservation style: • Style SE—Shared-explicit style. • FF—Fixed-filter style. Bitrate Tunnel bandwidth in kbps. # Display detailed information about all RSVP path states. <Sysname>...
  • Page 175 Tunnel ID: 253 Style: SE Sender address: 2.2.2.9 LSP ID: 17767 Setup priority: 7 Holding priority: 7 FRR desired: Yes BW protection desired: Yes Received upstream label: 1115 Sent upstream label: 1115 Previous hop: 57.10.10.1 Previous hop LIH: 0xf0008 Mean rate (CIR): 125.00 kbps Mean burst size (CBS): 0.00 bytes MTU: 1500 Qos service: Controlled-Load...
  • Page 176 Field Description QoS service QoS service type: Controlled-Load or Guaranteed. Value of the Epoch field in the Message ID object of the received Received message Epoch message. Received message ID Message ID in the received message. Sent message epoch Value of the Epoch field in the Message ID object of the sent message. Sent message ID Message ID in the sent message.
  • Page 177: Display Rsvp Statistics

    Field Description Bypass tunnel Name of the bypass tunnel. Only the PLR node displays this field. Address of the path message sender after an FRR. The value of this field Sender address is the address of the outgoing interface of the bypass tunnel on the PLR node.
  • Page 178 Packet Received Sent Path Resv PathError ResvError PathTear ResvTear ResvConf Bundle Srefresh Hello Challenge Response Error # Display RSVP statistics on interfaces. <Sysname> display rsvp statistics interface GE1/0/2: Packet Received Sent Path Resv PathError ResvError PathTear ResvTear ResvConf Bundle Srefresh Hello Challenge Response...
  • Page 179: Dscp

    Srefresh Hello Challenge Response Error Table 56 Command output Field Description Number of added/deleted PSBs. Number of added/deleted RSBs. Number of added/deleted LSPs. Path Number of received/sent Path messages. Resv Number of received/sent Resv messages. PathError Number of received/sent Path Error messages. ResvError Number of received/sent Resv Error messages.
  • Page 180: Graceful-Restart Enable

    Predefined user roles network-admin mdc-admin Parameters dscp-value: Specifies a DSCP value in the range of 0 to 63. Usage guidelines The DSCP value of an IP packet specifies the priority level of the packet and affects the transmission priority of the packet. Examples # Set the DSCP value for outgoing RSVP packets to 56.
  • Page 181: Hello Interval

    [Sysname-rsvp] graceful-restart enable Related commands rsvp hello enable hello interval Use hello interval to set the interval for sending hello requests. Use undo hello interval to restore the default. Syntax hello interval interval undo hello interval Default Hello request messages are sent at an interval of 5 seconds. Views RSVP view Predefined user roles...
  • Page 182: Keep-Multiplier

    undo hello lost Default The maximum number of consecutive lost or erroneous hellos is 4. Views RSVP view Predefined user roles network-admin mdc-admin Parameters times: Specifies the maximum number of consecutive lost or erroneous hellos, in the range of 3 to Usage guidelines When a device sends a hello to a neighbor but the device does not receive any reply within an interval, the hello is lost.
  • Page 183: Peer

    Predefined user roles network-admin mdc-admin Parameters number: Specifies the PSB and RSB timeout multiplier in the range of 3 to 255. Usage guidelines The PSB and RSB timeout is computed in this formula: Timeout = (keep-multiplier+0.5) × 1.5 × refresh-time. Refresh-time is the interval at which the peer device advertises the Path and Resv messages to the local device.
  • Page 184: Refresh Interval

    If a matching neighbor exists and an authentication key has been configured for the neighbor, the device verifies the validity of the message according to the key. Otherwise, the device uses the authentication key configured in interface view or RSVP view to verify the message validity. If no authentication key is configured in any view, the device ignores the authentication object carried in the message and accepts the message.
  • Page 185: Reset Rsvp Authentication

    Usage guidelines This command performs the following actions: • Determines the interval for sending Path and Resv messages. • Adds the locally configured refresh interval in the sent Path and Resv messages, so the peer device can use this value to calculate the PSB and RSB timeout. Examples # Set the refresh interval for Path and Resv messages to 60 seconds.
  • Page 186: Rsvp

    Syntax reset rsvp statistics [ interface [ interface-type interface-number ] ] Views User view Predefined user roles network-admin mdc-admin Parameters interface: Clears RSVP statistics on interfaces. interface-type interface-number: Clears RSVP statistics on the interface specified by its type and number. Usage guidelines If you do not specify the interface keyword, this command clears global RSVP statistics.
  • Page 187: Rsvp Authentication Challenge

    Usage guidelines To enable global RSVP, you must enable both global RSVP (by using the rsvp command) and global MPLS TE (by using the mpls te command). Examples # Enable RSVP globally and enter RSVP view. <Sysname> system-view [Sysname] rsvp [Sysname-rsvp] Related commands mpls te...
  • Page 188: Rsvp Authentication Key

    Examples # Enable RSVP challenge-response handshake on interface VLAN-interface 10. <Sysname> system-view [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] rsvp authentication challenge Related commands authentication challenge authentication key authentication lifetime authentication window-size display rsvp authentication reset rsvp authentication rsvp authentication key rsvp authentication lifetime rsvp authentication window-size rsvp authentication key Use rsvp authentication key to enable RSVP authentication on an interface and configure the...
  • Page 189: Rsvp Authentication Lifetime

    the same calculation and compares the calculated digest with the digest in the message. If the two digests are the same, the message passes the RSVP authentication and is accepted. Otherwise, the peer device discards the message. RSVP authentication can be configured in the following views: •...
  • Page 190 Default The idle timeout for RSVP security associations is 1800 seconds on an interface. Views Interface view Predefined user roles network-admin mdc-admin Parameters life-time: Specifies the RSVP security association idle timeout in the range of 30 to 86400 seconds. Usage guidelines When RSVP authentication is enabled, the device dynamically establishes security associations when receiving and sending RSVP messages to record the message sequence numbers, which are used in RSVP authentication.
  • Page 191: Rsvp Authentication Window-Size

    rsvp authentication window-size Use rsvp authentication window-size to set the RSVP authentication window size, which is the maximum number of authenticated RSVP messages that can be received out of sequence on an interface. Use undo rsvp authentication window-size to restore the default. Syntax rsvp authentication window-size number undo rsvp authentication window-size...
  • Page 192: Rsvp Bfd Enable

    A modification to the window size affects only security associations established after the modification. To apply the new setting to existing security associations, you must execute the reset rsvp authentication command to delete and then re-establish the security associations. Examples # Set the maximum number of out-of-sequence authenticated RSVP messages that can be received on interface VLAN-interface 10 to 10.
  • Page 193: Rsvp Enable

    [Sysname-Vlan-interface10] rsvp bfd enable rsvp enable Use rsvp enable to enable RSVP on an interface. Use undo rsvp enable to disable RSVP on an interface. Syntax rsvp enable undo rsvp enable Default RSVP is disabled on an interface. Views Interface view Predefined user roles network-admin mdc-admin...
  • Page 194: Rsvp Reduction Retransmit Increment

    Predefined user roles network-admin mdc-admin Usage guidelines With RSVP hello extension enabled, an interface sends and receives hello messages to detect the neighbor status. Examples # Enable RSVP hello extension on interface VLAN-interface 10. <Sysname> system-view [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] rsvp hello enable Related commands hello lost...
  • Page 195: Rsvp Reduction Retransmit Interval

    Related commands rsvp reduction retransmit interval rsvp reduction srefresh rsvp reduction retransmit interval Use rsvp reduction retransmit interval to set the RSVP message retransmission interval. Use undo rsvp reduction retransmit interval to restore the default. Syntax rsvp reduction retransmit interval retrans-timer-value undo rsvp reduction retransmit interval Default The RSVP message retransmission interval is 500 milliseconds.
  • Page 196 undo rsvp reduction srefresh Default Summary refresh and reliable RSVP message delivery are disabled. Views Interface view Predefined user roles network-admin mdc-admin Parameters reliability: Enables reliable RSVP message delivery. If you do not specify this keyword, the command enables only the summary refresh feature. Usage guidelines RSVP sends Path and Resv messages with the same states and objects to maintain the path and reservation states at intervals (configured by the refresh interval command).
  • Page 197 <Sysname> system-view [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] rsvp reduction srefresh reliability Related commands refresh interval rsvp reduction retransmit increment rsvp reduction retransmit interval...
  • Page 198: Tunnel Policy Commands

    Tunnel policy commands display mpls tunnel Use display mpls tunnel to display tunnel information. Syntax display mpls tunnel { all | statistics | [ vpn-instance vpn-instance-name ] destination { tunnel-ipv4-dest | tunnel-ipv6-dest } } Views Any view Predefined user roles network-admin network-operator mdc-admin...
  • Page 199: Preferred-Path

    CRLSP: Table 58 Command output Field Description CRLSP Number of CRLSPs (MPLS TE tunnels). preferred-path Use preferred-path to specify a preferred tunnel in a tunnel policy. Use undo preferred-path to restore the default. Syntax preferred-path tunnel number undo preferred-path tunnel number Default No preferred tunnel is specified.
  • Page 200: Tunnel-Policy (System View)

    Use undo select-seq to restore the default. Syntax select-seq { cr-lsp | lsp } * load-balance-number number undo select-seq Default The device selects only one tunnel in LSP-CRLSP order. Views Tunnel policy view Predefined user roles network-admin mdc-admin Parameters cr-lsp: Uses CRLSP tunnels. lsp: Uses LSP tunnels.
  • Page 201 Default No tunnel policy is configured on the device. Views System view Predefined user roles network-admin mdc-admin Parameters tunnel-policy-name: Specifies a name for the tunnel policy, a case-sensitive string of 1 to 19 characters. Examples # Create tunnel policy policy1 and enter its view. <Sysname>...
  • Page 202: Mpls L3Vpn Commands

    MPLS L3VPN commands address-family ipv4 (VPN instance view) Use address-family ipv4 in VPN instance view to enter IPv4 VPN view. Use undo address-family ipv4 to remove all configurations from IPv4 VPN view. Syntax address-family ipv4 undo address-family ipv4 Views VPN instance view Predefined user roles network-admin mdc-admin...
  • Page 203: Description (Vpn Instance View)

    mdc-admin Usage guidelines A VPNv4 address comprises an RD and an IPv4 prefix. VPNv4 routes comprise VPNv4 addresses. For a PE to exchange BGP VPNv4 routes with a BGP peer, you must enable that peer by executing the peer enable command in BGP VPNv4 address family view or BGP-VPN VPNv4 address family view.
  • Page 204: Display Bgp Routing-Table Ipv4 Unicast Inlabel

    Examples # Configure a description of This is vpn1 for VPN instance vpn1. <Sysname> system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] description This is vpn1 display bgp routing-table ipv4 unicast inlabel Use display bgp routing-table ipv4 unicast inlabel to display incoming labels for BGP IPv4 unicast routes.
  • Page 205: Display Bgp Routing-Table Ipv4 Unicast Outlabel

    Field Description Route status codes: • * - valid—Valid route. • > - best—Common optimal route. • d – damped—Route damped for route flap. • Status h - history—History route. • i - internal—Internal route. • e - external—External route. •...
  • Page 206: Display Bgp Routing-Table Vpnv4

    chassis chassis-number slot slot-number: Specifies the card where the standby process resides. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.) Usage guidelines This command displays outgoing labels for BGP IPv4 unicast routes regardless of whether the unicast keyword is specified or not.
  • Page 207 display bgp routing-table vpnv4 [ [ route-distinguisher route-distinguisher ] [ network-address [ { mask | mask-length } [ longest-match ] ] | network-address [ mask | mask-length ] advertise-info as-path-acl as-path-acl-number community-list basic-community-list-number comm-list-name } [ whole-match ] | adv-community-list-number } ] | [ vpn-instance vpn-instance-name ] peer ip-address { advertised-routes | received-routes } [ network-address [ mask | mask-length ] | statistics ] | statistics ] [ standby slot slot-number ] In IRF mode:...
  • Page 208 vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays BGP VPNv4 routes advertised to or received from the specified peer on the public network. peer: Displays BGP VPNv4 routing information advertised to or received from a peer.
  • Page 209 3.3.3.9 65420? Route distinguisher: 200:1 Total number of routes: 2 Network NextHop LocPrf PrefVal Path/Ogn * >i 10.3.1.0/24 3.3.3.9 * >i 192.168.1.0 3.3.3.9 65420? # Display brief information about BGP VPNv4 routes with RD 100:1. <Sysname> display bgp routing-table vpnv4 route-distinguisher 100:1 BGP local router ID is 1.1.1.9 Status codes: * - valid, >...
  • Page 210 3.3.3.9 65420? Route distinguisher: 200:1 Total number of routes: 2 Network NextHop LocPrf PrefVal Path/Ogn * >i 10.3.1.0/24 3.3.3.9 * >i 192.168.1.0 3.3.3.9 65420? # Display information about BGP VPNv4 routes matching BGP community list 100. <Sysname> display bgp routing-table vpnv4 community-list 100 BGP local router ID is 1.1.1.9 Status codes: * - valid, >...
  • Page 211 Route distinguisher: 100:1 Total number of routes: 2 Network NextHop LocPrf Path/Ogn * > 10.1.1.0/24 10.1.1.2 * >e 192.168.1.0 10.1.1.1 65410? # Display information about BGP VPNv4 routes received from peer 3.3.3.9 on the public network. <Sysname> display bgp routing-table vpnv4 peer 3.3.3.9 received-routes Total number of routes: 2 BGP local router ID is 1.1.1.9 Status codes: * - valid, >...
  • Page 212 Field Description PrefVal Preferred value. Path/Ogn AS_PATH and Origin attributes. # Display detailed information about BGP VPNv4 routes to 10.3.1.0/24. <Sysname> display bgp routing-table vpnv4 10.3.1.0 24 BGP local router ID: 1.1.1.9 Local AS number: 100 Route distinguisher: 100:1(vpn1) Total number of routes: 1 Paths: 1 available, 1 best BGP routing table information of 10.3.1.0/24:...
  • Page 213 BGP local router ID: 1.1.1.9 Local AS number: 100 Route distinguisher: 100:1(vpn1) Total number of routes: 1 Paths: 1 available, 1 best BGP routing table information of 10.3.1.0/24: From : 3.3.3.9 (3.3.3.9) Rely nexthop : 172.1.1.2 Original nexthop: 3.3.3.9 OutLabel : 1279 Ext-Community : <RT: 111:1>...
  • Page 214 Local AS number: 100 Route distinguisher: 100:1 Total number of routes: 1 Paths: 1 best BGP routing table information of 10.1.1.0/24: Advertised to VPN peers (1 in total): 3.3.3.9 Inlabel : 1279 Table 63 Command output Field Description Paths Number of routes to the specified destination network. BGP routing table information of Advertisement information for the BGP route to 10.1.1.0/24.
  • Page 215: Display Bgp Routing-Table Vpnv4 Inlabel

    Table 65 Command output Field Description Total number of routes from all PEs Total number of VPNv4 routes from all PEs. Total number of routes Total number of VPNv4 routes with the specified RD. Related commands ip as-path (Layer 3—IP Routing Command Reference) display bgp routing-table vpnv4 inlabel Use display bgp routing-table vpnv4 inlabel to display incoming labels for BGP VPNv4 routes.
  • Page 216: Display Bgp Routing-Table Vpnv4 Outlabel

    Field Description Route status codes: • * - valid—Valid route. • > - best—Common optimal route. • d – damped—Route damped for route flap. • Status codes h - history—History route. • i - internal—Internal route. • e - external—External route. •...
  • Page 217: Display Ospf Sham-Link

    BGP local router ID is 1.1.1.9 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Total number of routes from all PEs: 8 Route distinguisher: 100:1(vpn1) Total number of routes: 2...
  • Page 218 Syntax In standalone mode: display ospf [ process-id ] sham-link [ area area-id ] [ standby slot slot-number ] In IRF mode: display ospf [ process-id ] sham-link [ area area-id ] [ standby chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin...
  • Page 219: Display Ip Vpn-Instance

    OSPF Process 100 with Router ID 100.1.1.2 Sham link: 3.3.3.3 --> 5.5.5.5 Neighbor ID: 120.1.1.2 State: Full Area: 0.0.0.1 Cost: 1 State: P-2-P Type: Sham Timers: Hello 10, Dead 40, Retransmit 5, Transmit Delay 1 Request list: 0 Retransmit list: 0 MD5 authentication enabled.
  • Page 220: Domain-Id

    Route Distinguisher : 100:1 VPN ID : 1:1 Description : vpn1 Interfaces : GigabitEthernet1/0/2 Address-family IPv4: Export VPN Targets : Import VPN Targets : Export Route Policy : outpolicy Import Route Policy : inpolicy Tunnel Policy : tunnel1 Maximum Routes Limit : 5000 Address-family IPv6: Export VPN Targets : Import VPN Targets :...
  • Page 221: Export Route-Policy

    Usage guidelines When you redistribute OSPF routes into BGP, BGP adds the primary domain ID to the redistributed BGP VPNv4 routes as a BGP extended community attribute. Then, BGP advertises the routes to the peer PE. When the peer PE receives the routes, it compares the OSPF domain ID in the routes with the locally configured primary and secondary domain IDs.
  • Page 222: Ext-Community-Type

    [Sysname-vpn-instance-vpn1] export route-policy poly-1 # Apply export routing policy poly-2 to IPv4 VPN vpn2. <Sysname> system-view [Sysname] ip vpn-instance vpn2 [Sysname-vpn-instance-vpn2] address-family ipv4 [Sysname-vpn-ipv4-vpn2] export route-policy poly-2 # Apply export routing policy poly-3 to IPv6 VPN vpn3. <Sysname> system-view [Sysname] ip vpn-instance vpn3 [Sysname-vpn-instance-vpn3] address-family ipv6 [Sysname-vpn-ipv6-vpn3] export route-policy poly-3 Related commands...
  • Page 223: Import Route-Policy

    [Sysname-ospf-100] ext-community-type route-type 8000 import route-policy Use import route-policy to apply an import routing policy to a VPN instance. Use undo import route-policy to remove the application. Syntax import route-policy route-policy undo import route-policy Default All routes matching the import target attribute are accepted. Views VPN instance view, IPv4 VPN view, IPv6 VPN view Predefined user roles...
  • Page 224: Ip Binding Vpn-Instance

    route-policy (Layer 3—IP Routing Configuration Guide) ip binding vpn-instance Use ip binding vpn-instance to associate an interface with a VPN instance. Use undo ip binding vpn-instance to remove the association. Syntax ip binding vpn-instance vpn-instance-name undo ip binding vpn-instance vpn-instance-name Default An interface is associated with no VPN instance and belongs to the public network.
  • Page 225: Nesting-Vpn

    Default No VPN instance is created. Views System view Predefined user roles network-admin mdc-admin Parameters vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. Examples # Create a VPN instance named vpn1. <Sysname> system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] Related commands...
  • Page 226: Peer Next-Hop-Invariable

    peer next-hop-invariable Use peer next-hop-invariable to configure the device to not change the next hop of routes advertised to peers. Use undo peer next-hop-invariable to restore the default. Syntax peer { group-name | ip-address [ mask-length ] } next-hop-invariable undo peer { group-name | ip-address [ mask-length ] } next-hop-invariable Default The device uses its address as the next hop of routes advertised to EBGP peers.
  • Page 227: Peer Upe Route-Policy

    Default No BGP peer is configured as a UPE. Views BGP VPNv4 address family view Predefined user roles network-admin mdc-admin Parameters group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The specified peer group must exist. ip-address: Specifies a peer by its IP address.
  • Page 228: Policy Vpn-Target

    mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command advertises routes permitted by a routing policy to all dynamic peers in the subnet. route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
  • Page 229: Route-Distinguisher (Vpn Instance View)

    <Sysname> system-view [Sysname] bgp 100 [Sysname-bgp] address-family vpnv4 [Sysname-bgp-vpnv4] undo policy vpn-target route-distinguisher (VPN instance view) Use route-distinguisher to configure an RD for a VPN instance. Use undo route-distinguisher to remove the RD of a VPN instance. Syntax route-distinguisher route-distinguisher undo route-distinguisher Default No RD is specified for a VPN instance.
  • Page 230: Routing-Table Limit

    Default If BGP runs within an MPLS backbone, and the BGP AS number is not greater than 65535, the first two octets of the external route tag are 0xD000, and the last two octets are the local BGP AS number. For example, if the local BGP AS number is 100, the external route tag value is 3489661028 (100 + the decimal value of 0xD0000000).
  • Page 231 Syntax routing-table limit number { warn-threshold | simply-alert } undo routing-table limit Default The maximum number of active routes is not configured. Views VPN instance view, IPv4 VPN view, IPv6 VPN view Predefined user roles network-admin mdc-admin Parameters number: Specifies the maximum number of active routes, in the range of 1 to 262144. warn-threshold: Specifies a warning threshold in the range of 1 to 100 in percentage.
  • Page 232: Rr-Filter

    rr-filter Use rr-filter to create an RR reflection policy so that only IBGP routes whose extended community attribute matches the specified extended community list are reflected. Use undo rr-filter to restore the default. Syntax rr-filter extended-community-number undo rr-filter Default An RR does not filter reflected routes. Views BGP VPNv4 address family view Predefined user roles...
  • Page 233 Predefined user roles network-admin mdc-admin Parameters source-ip-address: Specifies the source IP address of the sham link. destination-ip-address: Specifies the destination IP address of the sham link. cost cost: Specifies the cost of the sham link, in the range of 1 to 65535. The default cost is 1. dead dead-interval: Specifies the dead interval in the range of 1 to 32768 seconds.
  • Page 234: Snmp-Agent Trap Enable L3Vpn

    You cannot configure a sham link with the same source and destination IP address for multiple OSPF processes in a VPN instance. The sham links configured on the local and remote PEs must be in the same OSPF area. Otherwise, the OSPF neighbor relationship cannot be established.
  • Page 235 undo tnl-policy Default No tunnel policy is associated with a VPN instance. Views VPN instance view, IPv4 VPN view Predefined user roles network-admin mdc-admin Parameters tunnel-policy-name: Specifies a tunnel policy by its name, a case-sensitive string of 1 to 19 characters.
  • Page 236: Vpn Popgo

    Related commands tunnel-policy vpn popgo Use vpn popgo to specify the VPN label processing mode as POPGO forwarding on an egress PE, which will pop the label for each packet and forward the packet out of the interface corresponding to the label.
  • Page 237: Vpn-Target (Vpn Instance View/Ipv4 Vpn View/Ipv6 Vpn View)

    Default No VPN ID is configured for a VPN instance. Views VPN instance view Predefined user roles network-admin mdc-admin Parameters vpn-id: Specifies a VPN ID for the VPN instance, in the form of OUI:Index. Both OUI and Index are hex numbers. The OUI is in the range of 0 to FFFFFF, and the index is in the range of 0 to FFFFFFFF.
  • Page 238 • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. • 32-bit AS number:16-bit user-defined number, where the AS number must not be less than 65536. For example, 65536:1. both: Uses the specified route targets as both import targets and export targets. The both keyword is also used when you do not specify any of the following keywords: both, export-extcommunity, and import-extcommunity.
  • Page 239: Ipv6 Mpls L3Vpn Commands

    IPv6 MPLS L3VPN commands This chapter describes only IPv6 MPLS L3VPN-specific commands. For information about the commands available for both IPv4 MPLS L3VPN and IPv6 MPLS L3VPN, see "MPLS L3VPN commands." address-family ipv6 (VPN instance view) Use address-family ipv6 to enter IPv6 VPN view. Use undo address-family ipv6 to remove all configurations from IPv6 VPN view.
  • Page 240: Disable-Dn-Bit-Check

    Predefined user roles network-admin mdc-admin Usage guidelines A VPNv6 address comprises an RD and an IPv6 prefix. In IPv6 MPLS L3VPNs, PEs exchange BGP VPNv6 routes. For a PE to exchange BGP VPNv6 routes with a BGP peer, you must enable that peer by executing the peer enable command in BGP VPNv6 address family view.
  • Page 241: Disable-Dn-Bit-Set

    Examples # Ignore the DN bit in LSAs for OSPFv3 VRF process 100. <Sysname> system-view [Sysname] ospfv3 100 vpn-instance vpn1 [Sysname-ospfv3-100] disable-dn-bit-check Related commands disable-dn-bit-set display ospfv3 (Layer 3—IP Routing Command Reference) disable-dn-bit-set Use disable-dn-bit-set to disable setting the DN bit in OSPFv3 LSAs. Use undo disable-dn-bit-set to restore the default.
  • Page 242: Display Bgp Routing-Table Vpnv6

    display bgp routing-table vpnv6 Use display bgp routing-table vpnv6 to display BGP VPNv6 routing information. Syntax In standalone mode: display bgp routing-table vpnv6 [ [ route-distinguisher route-distinguisher ] [ network-address prefix-length advertise-info as-path-acl as-path-acl-number community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number } ] | peer ip-address { advertised-routes | received-routes } [ network-address prefix-length | statistics ] | statistics ] [ standby slot slot-number ] In IRF mode:...
  • Page 243 peer: Displays BGP VPNv6 routing information advertised to or received from a peer. ip-address: Specifies the peer IP address. advertised-routes: Displays BGP VPNv6 routing information advertised to the specified peer. received-routes: Displays BGP VPNv6 routing information received from the specified peer. statistics: Displays BGP VPNv6 routing statistics.
  • Page 244 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 Path/Ogn: ? Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0...
  • Page 245 PrefVal : 0 OutLabel : 1279 Path/Ogn: ? Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 Path/Ogn: ? # Display information about BGP VPNv6 routes matching the BGP community list 100. <Sysname>...
  • Page 246 Route distinguisher: 200:1 Total number of routes: 1 * >i Network : 2001:3:: PrefixLen : 96 NextHop : ::FFFF:3.3.3.9 LocPrf : 100 PrefVal : 0 OutLabel : 1279 Path/Ogn: ? # Display information about BGP VPNv6 routes advertised to 3.3.3.9 on the public network. <Sysname>...
  • Page 247 Field Description Route status codes: • * - valid—Valid route. • > - best—Common best route. • d – damped—Route damped for route flap. • Status codes h - history—History route. • i - internal—Internal route. • e - external—External route. •...
  • Page 248: Display Bgp Routing-Table Vpnv6 Inlabel

    Field Description Inlabel Incoming label of the route. # Display statistics about BGP VPNv6 routes advertised to peer 3.3.3.9 on the public network. <Sysname> display bgp routing-table vpnv6 peer 3.3.3.9 advertised-routes statistics Advertised routes total: 2 # Display statistics about BGP VPNv6 routes received from peer 3.3.3.9 on the public network. <Sysname>...
  • Page 249: Display Bgp Routing-Table Vpnv6 Outlabel

    mdc-admin mdc-operator Examples # Display incoming labels for all BGP VPNv6 routes. <Sysname> display bgp routing-table vpnv6 inlabel Total number of routes: 1 BGP local router ID is 1.1.1.9 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Route distinguisher: 100:1...
  • Page 250 In IRF mode: display bgp routing-table vpnv6 outlabel [ standby chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters standby: Displays BGP VPNv6 route outgoing labels for a standby BGP process. If you do not specify a standby BGP process, this command displays information for the active BGP process.
  • Page 251: Display Ospfv3 Sham-Link

    Field Description Route status codes: • * - valid—Valid route. • > - best—Common optimal route. • d – damped—Route damped for route flap. • Status h - history—History route. • i - internal—Internal route. • e - external—External route. •...
  • Page 252: Domain-Id

    Neighbor ID State Instance ID Destination address 0.0.0.0 Down 1:1::58 95.0.0.1 P-2-P 1:1::95 # Display detailed information about all OSPFv3 sham links. <Sysname> display ospfv3 sham-link verbose OSPFv3 Process 1 with Router ID 125.0.0.1 Sham-link (Area: 0.0.0.1) Source : 1:1::125 Destination : 1:1::58 Interface ID: 2147483649 Neighbor ID : 0.0.0.0, Neighbor state: Down...
  • Page 253: Ext-Community-Type

    Views OSPFv3 view Predefined user roles network-admin mdc-admin Parameters domain-id: Specifies an OSPFv3 domain ID, in one of the following formats: • Integer, in the range of 0 to 4294967295. For example, 1. • Dotted decimal notation. For example, 0.0.0.1. •...
  • Page 254: Peer Next-Hop-Invariable

    Default The type codes for domain ID, route type, and router ID are hex numbers 0005, 0306, and 0107, respectively. Views OSPFv3 view Predefined user roles network-admin mdc-admin Parameters domain-id type-code1: Specifies the type code for domain ID. Valid values are hex numbers 0005, 0105, 0205, and 8005.
  • Page 255: Policy Vpn-Target

    Parameters group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. ip-address: Specifies a peer by its IP address. mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet.
  • Page 256: Route-Tag

    route-tag Use route-tag to configure an external route tag for redistributed VPN routes. Use undo route-tag to restore the default. Syntax route-tag tag-value undo route-tag Default If BGP runs within an MPLS backbone, and the BGP AS number is not greater than 65535, the first two octets of the external route tag are 0xD000, and the last two octets are the local BGP AS number.
  • Page 257: Route-Tag-Check Enable

    [Sysname] ospfv3 100 vpn-instance vpn1 [Sysname-ospfv3-100] route-tag 100 Related commands default tag (Layer 3—IP Routing Command Reference) display ospfv3 (Layer 3—IP Routing Command Reference) import-route (Layer 3—IP Routing Command Reference) route-tag-check enable route-tag-check enable Use route-tag-check enable to enable the external route check feature for OSPFv3 LSAs. Use undo route-tag-check enable to restore the default.
  • Page 258: Rr-Filter

    route-tag rr-filter Use rr-filter to create an RR reflection policy so that only IBGP routes whose extended community attribute matches the specified extended community list are reflected. Use undo rr-filter to restore the default. Syntax rr-filter extended-community-number undo rr-filter Default An RR does not filter reflected routes.
  • Page 259 Views OSPFv3 area view Predefined user roles network-admin mdc-admin Parameters source-ipv6-address: Specifies the source IPv6 address of the sham link. destination-ipv6-address: Specifies the destination IPv6 address of the sham link. cost cost: Specifies the cost of the sham link, in the range of 1 to 65535. The default cost is 1. dead dead-interval: Specifies the dead interval in the range of 1 to 32768 seconds.
  • Page 260: Mpls L2Vpn Commands

    MPLS L2VPN commands ac interface Use ac interface to bind an Ethernet service instance to a cross-connect. Use undo ac interface to remove the binding. Syntax ac interface interface-type interface-number [ service-instance instance-id ] [ access-mode { ethernet | vlan } ] undo ac interface interface-type interface-number [ service-instance instance-id ] Default No Ethernet service instance is bound to a cross-connect.
  • Page 261: Address-Family L2Vpn

    [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] service-instance 200 [Sysname-GigabitEthernet1/0/1-srv200] encapsulation s-vid 200 [Sysname-GigabitEthernet1/0/1-srv200] quit [Sysname-GigabitEthernet1/0/1] quit [Sysname] xconnect-group vpn1 [Sysname-xcg-vpn1] connection actopw [Sysname-xcg-vpn1-actopw] ac interface gigabitethernet 1/0/1 service-instance 200 # Configure Ethernet service instance 200 on GigabitEthernet 1/0/1 to match packets with an outer VLAN tag of 200, and bind the Ethernet service instance to the auto-discovery cross-connect in the cross-connect group vpwsbgp.
  • Page 262: Auto-Discovery

    mdc-admin Usage guidelines To establish a BGP PW to a remote PE, you must execute the peer enable command in BGP L2VPN address family view to enable the remote PE. Examples # Create the BGP L2VPN address family and enter BGP L2VPN address family view. <Sysname>...
  • Page 263: Backup-Peer

    backup-peer Use backup-peer to configure a backup PW for a cross-connect, and enter cross-connect backup PW view. If the backup PW has been configured, this command places you into cross-connect backup PW view. Use undo backup-peer to remove the backup PW from a cross-connect. Syntax backup-peer ip-address pw-id pw-id [ in-label label-value out-label label-value ] [ pw-class class-name | tunnel-policy tunnel-policy-name ] *...
  • Page 264: Ccc

    Examples # Configure a primary PW and a backup PW for the cross-connect pw2pw in the cross-connect group vpn2. The primary PW is destined to 6.6.6.6 and has a PW ID of 100. The backup PW is destined to 7.7.7.7 and has a PW ID of 200. <Sysname>...
  • Page 265: Connection

    A remote CCC connection is a static L2VPN connection that is manually created by specifying the incoming and outgoing labels on two PEs. A remote CCC connection does not need a public tunnel, but it requires configuring two static LSPs in opposite directions on each P device between the two PEs.
  • Page 266: Connection Remote-Site-Id

    Predefined user roles network-admin mdc-admin Parameters connection-name: Specifies the name of the cross-connect, a case-sensitive string of 1 to 20 characters, excluding hyphens. Usage guidelines A cross-connect is a point-to-point connection. You can perform the following operations in cross-connect view: •...
  • Page 267: Control-Word Enable

    Usage guidelines This command creates an auto-discovery cross-connect that uses BGP to establish a PW from the local site to the specified remote site. In auto-discovery cross-connect view, you can execute ac interface to bind an AC to the auto-discovery cross-connect. The PE can forward packets between the AC and the PW. Examples # Create an auto-discovery cross-connect from site 1 to site 3 in site view, and enter auto-discovery cross-connect view.
  • Page 268: Description

    [Sysname] pw-class pw100 [Sysname-pw-pw100] control-word enable Related commands display l2vpn pw-class description Use description to configure a description for a cross-connect group. Use undo description to remove the description of a cross-connect group. Syntax description text undo description Default No description is configured for a cross-connect group. Views Cross-connect group view Predefined user roles...
  • Page 269 mdc-admin mdc-operator Parameters peer ip-address: Specifies a BGP peer by its IP address. advertised: Displays MPLS L2VPN label block information advertised to the BGP peer. received: Displays MPLS L2VPN label block information received from the BGP peer. statistics: Displays BGP MPLS L2VPN label block statistics. route-distinguisher route-distinguisher: Displays BGP MPLS L2VPN label block information for the route distinguisher (RD), which is a string of 3 to 21 characters.
  • Page 270 Table 76 Command output Field Description Status codes: • * – valid—Valid route. • > – best—Best route. • d – damped—Dampened route. • h – history—History route. Status codes • s – suppressed—Suppressed route. • S – Stale—Stale route. •...
  • Page 271 Table 77 Command output Field Description Number of label block messages: • available—Number of available label block messages. Paths • best—Number of best label block messages. From IP address of the peer from which the label block was received. Original next hop. If the label block was obtained from a BGP route update, this Original nexthop field displays the next hop address in that BGP route update.
  • Page 272: Display L2Vpn Bgp

    LB offset LB base : 1034 LB range : 10 : 0x01000ADFFF Advertised to peers (1 in total): 192.3.3.3 Table 78 Command output Field Description Number of label block messages: • Paths available—Number of available label block messages. • best—Number of best label block messages. LB offset Offset of the label block.
  • Page 273 If you do not specify a peer or local, this command displays label blocks received from all peers and local label blocks that match the received ones. If no local label block matches the received ones, the command only displays the label blocks received from all peers. A local label block matches a received label block if the local label block LO ≤...
  • Page 274: Display L2Vpn Forwarding

    <Sysname> display l2vpn bgp local Xconnect-group Name: vpnb Site Offset Range Label Base 1034 # Display detailed information about all local label blocks. <Sysname> display l2vpn bgp local verbose Xconnect-group Name: vpnb Site ID Offset : 2:2 Range : 10 Label Base : 1034 Link ID...
  • Page 275 Parameters ac: Displays AC forwarding information. pw: Displays PW forwarding information. xconnect-group group-name: Displays forwarding information for the cross-connect group specified by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a group, this command displays forwarding information for all cross-connect groups.
  • Page 276 Field Description AC access mode: • Access Mode VLAN. • Ethernet. Match criterion of the Ethernet service instance. This field is displayed only when the Encapsulation AC type is Ethernet service instance on a Layer 2 interface. # Display brief PW forwarding information for all cross-connect groups. <Sysname>...
  • Page 277: Display L2Vpn Ldp

    Table 85 Command output Field Description PW state: Up, Down, or Blocked. PW State Blocked indicates that the PW is a backup PW. PW attribute: • PW Attributes Main—The PW is the primary PW. • Backup—The PW is the backup PW. VCCV CC This field is not supported in the current software version.
  • Page 278: Display L2Vpn Pw

    Peer PW ID/VPLS ID In/Out Label State Owner 192.3.3.3 1001 775125/775126 vpws1 192.3.3.3 1001 775125/775126 vpws1 192.3.3.3 1003 775117/775122 vpws3 192.3.3.3 1004 775120/775120 vpws4 192.4.4.4 1000 775116/unknown Down vpws5 Table 86 Command output Field Description This field displays the PW ID for FEC 128, and displays the VPLS ID for FEC 129. PW ID/VPLS ID Only VPLS supports FEC 129.
  • Page 279 Syntax display l2vpn pw [ xconnect-group group-name ] [ protocol { bgp | ldp | static } ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters xconnect-group group-name: Displays L2VPN PW information for the cross-connect group specified by its name, a case-sensitive string of 1 to 31 characters.
  • Page 280 Field Description PW state: • Up—The PW is available. • Down—The PW is not available. State • Blocked—The PW is a backup PW. • Idle—The incoming label of the PW is not available. • Dup—The incoming label of the static PW is used by a static LSP or a static CRLSP.
  • Page 281: Display L2Vpn Pw-Class

    Field Description PW state: • Up—The PW is available. • Down—The PW is not available. PW State • Blocked—The PW is a backup PW. • Idle—The incoming label of the PW is not available. • Duplicate—The incoming label of the static PW is used by a static LSP or a static CRLSP.
  • Page 282 Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters class-name: Displays information about the PW class specified by its name, a case-sensitive string of 1 to 19 characters. If you do not specify a PW class, this command displays information about all PW classes.
  • Page 283: Display L2Vpn Service-Instance

    Table 91 Command output Field Description PW Type PW type, Ethernet or VLAN. Control Word This field is not supported in the current software version. VCCV CC This field is not supported in the current software version. VCCV BFD This field is not supported in the current software version. Sequencing on the PW.
  • Page 284 GE1/0/3 vpws1 VPWS GE1/0/3 vpws2 VPWS GE1/0/3 vpws3 VPWS GE1/0/3 vpws4 VPWS GE1/0/3 Table 92 Command output Field Description SrvID Ethernet service instance ID. Name of the cross-connect group bound to the Ethernet service instance. If no Owner cross-connect group is bound, this field is blank. Type L2VPN type: VSI or VPWS.
  • Page 285: Display L2Vpn Xconnect-Group

    Related commands service-instance display l2vpn xconnect-group Use display l2vpn xconnect-group to display cross-connect group information. Syntax display l2vpn xconnect-group [ name group-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters name group-name: Displays information about the cross-connect group specified by its name, a case-sensitive sting of 1 to 31 characters.
  • Page 286: Encapsulation

    BGP PWs: Peer Remote Site Link ID State 192.3.3.3 ACs: Link ID State GE1/0/4 srv1 Table 95 Command output Field Description Xconnect-group Name Cross-connect group name. Description for the cross-connect group. If no description is configured, this Description field is not displayed. Connection Name Cross-connect name.
  • Page 287: L2Vpn Enable

    Parameters s-vid vlan-id: Matches packets with a specific outer VLAN ID in the range of 1 to 4094. only-tagged: Matches tagged packets. If the outer VLAN is not the PVID, the matching result does not differ, whether or not you specify the only-tagged keyword. If the outer VLAN is the PVID, the matching result depends on whether or not the only-tagged keyword is specified.
  • Page 288: L2Vpn Switchover

    mdc-admin Usage guidelines You must enable L2VPN before configuring other L2VPN settings. Examples # Enable L2VPN. <Sysname> system-view [Sysname] l2vpn enable l2vpn switchover Use l2vpn switchover to switch traffic from the specified PW to its backup or primary PW. Syntax l2vpn switchover peer ip-address pw-id pw-id Views User view...
  • Page 289: Peer

    Predefined user roles network-admin mdc-admin Parameters mtu: Specifies an MTU value in the range of 300 to 65535, in bytes. Usage guidelines The MTU specifies the maximum packet length, including the control word, PW label, and network layer packet. For an LDP PW to come up, the PEs at the two ends of the PW must have the same MTU. Examples # Set an MTU of 1400 bytes for the cross-connect ac2pw in the cross-connect group vpn1.
  • Page 290 in-label label-value: Specifies the incoming label of the PW, in the range of 16 to 1023. out-label label-value: Specifies the outgoing label of the PW, in the range of 16 to 1023. pw-class class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters.
  • Page 291: Peer Signaling

    peer signaling Use peer signaling to enable BGP to exchange label block information with the specified peer or peer group. Use undo peer signaling to disable BGP to exchange label block information with the specified peer or peer group. Syntax peer { group-name | ip-address [ mask-length ] } signaling [ non-standard ] undo peer { group-name | ip-address [ mask-length ] } signaling Default...
  • Page 292: Policy Vpn-Target

    policy vpn-target Use policy vpn-target to enable route target-based filtering of incoming BGP L2VPN information. Use undo policy vpn-target to disable route target-based filtering of incoming BGP L2VPN information. Syntax policy vpn-target undo policy vpn-target Default Route target-based filtering of incoming BGP L2VPN information is enabled. Views BGP L2VPN address family view Predefined user roles...
  • Page 293: Pw-Class (System View)

    Predefined user roles network-admin mdc-admin Parameters class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters. Usage guidelines The specified PW class will be used to establish all PWs in the auto-discovery cross-connect group. Examples # Specify a PW class named pw100 for the auto-discovery cross-connect group bbb.
  • Page 294: Pw-Type

    Examples # Create a PW class named pw100 and enter PW view. <Sysname> system-view [Sysname] pw-class pw100 [Sysname-pw-pw100] Related commands control-word enable display l2vpn pw-class pw-type pw-type Use pw-type to specify a PW type for a PW class. Use undo pw-type to restore the default. Syntax pw-type { ethernet | vlan } undo pw-type...
  • Page 295: Revertive

    • VLAN—Packets transmitted over a PW must carry a P-tag. For a packet from a CE: − If the peer PE does not require the ingress to rewrite the P-tag, the PE keeps the P-tag unchanged for the packet, and then encapsulates the packet. If the packet contains no P-tag, the PE adds a null label (the label value is 0) into the packet, and then encapsulates the packet.
  • Page 296: Route-Distinguisher

    Parameters wtr wtr-time: Specifies the wait time in the range of 0 to 180 seconds. When the primary PW recovers, the PE waits for the specified time before switching traffic from the backup PW to the primary PW. never: Disables backup to primary switchover. Examples # Set the switchover wait time to 120 seconds for the cross-connect ac2pw in the cross-connect group vpn1.
  • Page 297: Rr-Filter

    Examples # Configure the RD 22:2 for the BGP cross-connect group bbb. <Sysname> system-view [Sysname] xconnect-group bbb [Sysname-xcg-bbb] auto-discovery bgp [Sysname-xcg-bbb-auto] route-distinguisher 22:2 rr-filter Use rr-filter to create a route reflector (RR) reflection policy so that only the L2VPN information that contains the specified extended community number is reflected.
  • Page 298: Shutdown

    Default No Ethernet service instance is created on an interface. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin mdc-admin Parameters instance-id: Specifies the ID of the Ethernet service instance, in the range of 1 to 4096. Examples # Create Ethernet service instance 1 on Layer 2 Ethernet interface GigabitEthernet 1/0/1, and enter Ethernet service instance 1 view.
  • Page 299: Site

    <Sysname> system-view [Sysname] xconnect-group vpn2 [Sysname-xcg-vpn2] shutdown Related commands display l2vpn xconnect-group site Use site to create a local site and enter site view. Use undo site to delete a local site. Syntax site site-id [ range range-value ] [ default-offset default-offset ] undo site site-id Default No site is created.
  • Page 300: Tunnel-Policy

    You cannot modify the default-offset for a site with the site command. To modify it, you must delete the site and re-create the site with the new default-offset. Examples # Create site 1, configure the VPN to contain a maximum of 30 sites, set the start site ID to 0 for the cross-connect group bbb, and enter site view.
  • Page 301: Vpn-Target

    [Sysname-xcg-bbb] auto-discovery bgp [Sysname-xcg-bbb-auto] site 2 range 10 default-offset 0 [Sysname-xcg-bbb-auto-2] connection remote-site-id 3 [Sysname-xcg-bbb-auto-2-3] tunnel-policy policy1 Related commands tunnel-policy (system view) vpn-target Use vpn-target to configure route targets for a cross-connect group. Use undo vpn-target to remove the specified or all route targets for a cross-connect group. Syntax vpn-target vpn-target&<1-8>...
  • Page 302: Xconnect-Group

    [Sysname-xcg-bbb] auto-discovery bgp [Sysname-xcg-bbb-auto] vpn-target 10:1 100:1 1000:1 import-extcommunity [Sysname-xcg-bbb-auto] vpn-target 20:1 200:1 2000:1 export-extcommunity xconnect-group Use xconnect-group to create a cross-connect group and enter cross-connect group view. If the specified group has been created, this command places you into cross-connect group view. Use undo xconnect-group to delete a cross-connect group.
  • Page 303: Vpls Commands

    VPLS commands address-family l2vpn Use address-family l2vpn to create the BGP L2VPN address family, and enter BGP L2VPN address family view. Use undo address-family l2vpn to delete the BGP L2VPN address family, and all settings from BGP L2VPN address family view. Syntax address-family l2vpn undo address-family l2vpn...
  • Page 304: Backup-Peer

    Views VSI view Predefined user roles network-admin mdc-admin Parameters bgp: Enables the VSI to automatically discover neighbors through BGP. Usage guidelines You can use the signaling-protocol command to specify the signaling protocol, LDP or BGP, to establish PWs to the remote PEs found by BGP. Examples # Enable the VSI aaa to automatically discover neighbors through BGP and enter auto-discovery VSI view.
  • Page 305: Control-Word Enable

    mdc-admin Parameters ip-address: Specifies the LSR ID of the peer PE on the backup PW. pw-id pw-id: Specifies a PW ID for the backup PW, in the range of 1 to 4294967295. in-label label-value: Specifies the incoming label for the backup PW, in the range of 16 to 1023. out-label label-value: Specifies the outgoing label for the backup PW, in the range of 16 to 1023.
  • Page 306: Default-Pw-Id

    Syntax control-word enable undo control-word enable Default Control word is disabled. Views PW class view Predefined user roles network-admin mdc-admin Usage guidelines The control word field is between the MPLS label stack and the Layer 2 data. It carries extra control information about the Layer 2 frame, for example, the sequence number.
  • Page 307: Description

    Parameters default-pw-id: Specifies the default PW ID for the VSI, in the range of 1 to 4294967295. Usage guidelines After you set the default PW ID for a VSI, you do not need to provide a PW ID in the backup-peer and peer commands.
  • Page 308 Syntax display bgp l2vpn auto-discovery [ peer ip-address { advertised | received } [ statistics ] | route-distinguisher route-distinguisher [ pe-address ip-address [ advertise-info ] ] | statistics ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters peer ip-address: Specifies a BGP peer by its IP address.
  • Page 309 * >i 2.2.2.9 2.2.2.9 100:100 * >i 3.3.3.9 3.3.3.9 100:100 Table 96 Command output Field Description Status codes: • * – valid—Valid route. • > – best—Best route. • d – damped—Dampened route. • Status codes h – history—History route. •...
  • Page 310: Display Bgp L2Vpn Signaling

    Field Description Origin of the label block: • igp—Originated in the AS. Origin • egp—Learned through EGP. • incomplete—Unknown origin. Attribute of the VPLS PE information: • MED—Multi-Exit Discriminator attribute. • Attribute value localpref—Local preference value. • pref-val—Preferred value. • pre—Preference value.
  • Page 311 mdc-operator Parameters ip-address: Specifies a BGP peer by its IP address. advertised: Displays VPLS label block information advertised to the BGP peer. received: Displays VPLS label block information received from the BGP peer. statistics: Displays VPLS label block statistics. route-distinguisher route-distinguisher: Displays BGP VPLS label block information for the route distinguisher (RD), which is a string of 3 to 21 characters.
  • Page 312 Table 98 Command output Field Description Status codes: • * – valid—Valid route. • > – best—Best route. • d – damped—Dampened route. • h – history—History route. Status codes • s – suppressed—Suppressed route. • S – Stale—Stale route. •...
  • Page 313 Field Description Extended community attribute: • RT—Route target. Ext-Community • L2VPN info—L2VPN information, including the MTU and encapsulation type. AS path attribute, which records all ASs that the label block passed to AS-path prevent routing loops. Origin of the label block: •...
  • Page 314: Display L2Vpn Auto-Discovery

    Table 100 Command output Field Description LB offset Offset of the label block. LB base Initial value of the label block. LB range Size of the label block. display l2vpn auto-discovery Use display l2vpn auto-discovery to display information about automatically discovered VPLS PEs.
  • Page 315 Syntax display l2vpn bgp [ local | peer ip-address ] [ vsi vsi-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters local: Displays local VPLS label block information. peer ip-address: Displays VPLS label block information received from the remote peer. vsi vsi-name: Displays VPLS label block information for the VSI specified by its name, a case-sensitive string of 1 to 31 characters.
  • Page 316 : 1:1 PW State : Up Encapsulation : BGP-VPLS : 1500 Nexthop : 1.1.1.9 Local VC Label : 1419 Remote VC Label : 1420 Link ID Local Label Block : 1418/10/0 Remote Label Block : 1418/10/0 Export Route Target: 1:1 Remote Site ID Offset : 1:1...
  • Page 317: Display L2Vpn Forwarding

    Field Description Label Base Initial value of the label block. RD of the label block. If no RD is configured, this field displays a hyphen (-). # Display detailed information about all local label blocks. <Sysname> display l2vpn bgp local verbose VSI Name: aaa Site ID Offset...
  • Page 318 Parameters ac: Displays AC forwarding information. pw: Displays PW forwarding information. vsi vsi-name: Displays L2VPN forwarding information for the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays L2VPN forwarding information for all VSIs.
  • Page 319 Field Description AC access mode: • Access Mode VLAN. • Ethernet. Match criterion of the Ethernet service instance. This field is displayed only when the Encapsulation AC is an Ethernet service instance on a Layer 2 interface. # Display brief PW forwarding information for all VSIs. <Sysname>...
  • Page 320: Display L2Vpn Ldp

    Tunnel NHLFE IDs: 1035 Table 108 Command output Field Description Link ID Link ID of the PW in the VSI. PW Type Data encapsulation type of the PW. PW state: Up, Down, Blocked, or BFD Defect. PW State Blocked indicates that the PW is blocked. BFD Defect indicates that BFD has detected a defect on the PW.
  • Page 321 pw-id pw-id: Displays FEC 128 LDP PW label information for the PW specified by its PW ID. The PW ID is in the range of 1 to 4294967295. If you specify the peer ip-address option without the pw-id pw-id option, this command displays all LDP PW label information advertised by the specified peer vpls-id vpls-id: Displays FEC 129 LDP PW label information for the VPLS instance specified by its ID, which is a string of 3 to 21 characters.
  • Page 322 <Sysname> display l2vpn ldp verbose Peer: 2.2.2.9 PW ID: 500 VSI Name: ccc PW State: Up PW Status Communication: Notification method PW ID FEC (Local/Remote): PW Type : VLAN/VLAN Group ID : 0/0 Label : 1552/1552 Control Word: Disabled/Disabled VCCV CV Type: -/- VCCV CC Type: -/- : 1500/1500 PW Status...
  • Page 323: Display L2Vpn Mac-Address

    Table 110 Command output Field Description PW status communication method: • Notification method—Notifies the PW status through Notification PW Status messages. Communication • Label withdraw method—Assigns a PW label to the PW when the state of the AC associated with PW comes up, and withdraws the PW label when the AC state goes down.
  • Page 324: Display L2Vpn Pw

    Parameters vsi vsi-name: Displays MAC address table information for the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC address table information for all VSIs. dynamic: Displays dynamically generated MAC address entries.
  • Page 325 mdc-admin mdc-operator Parameters vsi vsi-name: Displays L2VPN PW information for the VSI specified by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays L2VPN PW information for all VSIs. protocol: Specifies a signaling protocol.
  • Page 326 Field Description Link ID Link ID of the PW in the VSI. PW state: • Up—The PW is available. • Down—The PW is not available. • Blocked—The PW is a backup PW. State • Defect—BFD has detected a defect on the PW. •...
  • Page 327 Link ID PW State : Up In Label : 1554 Out Label: 1416 : 1500 PW Attributes : Main VCCV CC VCCV BFD Tunnel Group ID : 0x800000160000001 Tunnel NHLFE IDs : 1030 VSI Name: ccc Peer: 2.2.2.9 PW ID: 500 Signaling Protocol : LDP Link ID...
  • Page 328: Display L2Vpn Pw-Class

    Field Description VCCV BFD type: • Fault Detection with BFD—BFD packets use IP/UDP encapsulation (with VCCV BFD IP/UDP headers). • Fault Detection with Raw-BFD—BFD packets use PW-ACH encapsulation (without IP/UDP headers). Tunnel Group ID ID of the tunnel group for the PW. NHLFE ID of the public tunnel that carries the PW.
  • Page 329: Display L2Vpn Service-Instance

    <Sysname> display l2vpn pw-class Total number of PW classes: 2 PW Class Name PW Type Control Word VCCV CC VCCV BFD Ethernet Enabled Control-Word Raw-BFD VLAN Disabled Router-Alert Table 114 Command output Field Description VCCV CC type: • Control-Word—Control word. VCCV CC •...
  • Page 330 Examples # Display brief information about all Ethernet service instances. <Sysname> display l2vpn service-instance Total number of service-instances: 8, 8 up, 0 down Total number of ACs: 4, 4 up, 0 down Interface SrvID Owner LinkID State Type GE1/0/3 vpls1 GE1/0/3 vpls2 GE1/0/3...
  • Page 331: Display L2Vpn Vsi

    Table 116 Command output Field Description Interface Layer 2 Ethernet interface or Layer 2 aggregate interface. Service Instance Ethernet service instance ID. Packet match criterion of the Ethernet service instance. If no packet match criterion Encapsulation is configured, the field is not displayed. VSI Name Name of the VSI bound to the Ethernet service instance.
  • Page 332 Table 117 Command output Field Description VSI state: • State • Down. • Admin down—The VSI is manually brought down by using the shutdown command. # Display detailed information about all VSIs. <Sysname> display l2vpn vsi verbose VSI Name: vpls1 VSI Index VSI Description : vsi for vpls1...
  • Page 333: Encapsulation

    Related commands encapsulation Use encapsulation to configure a packet match criterion for an Ethernet service instance. Use undo encapsulation to remove a packet match criterion from an Ethernet service instance. Syntax encapsulation s-vid vlan-id [ only-tagged ] encapsulation s-vid vlan-id c-vid vlan-id encapsulation { default | tagged | untagged } undo encapsulation Default...
  • Page 334: L2Vpn Enable

    <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] service-instance 1 [Sysname-GigabitEthernet1/0/1-srv1] encapsulation s-vid 111 c-vid 20 Related commands display l2vpn service-instance l2vpn enable Use l2vpn enable to enable L2VPN. Use undo l2vpn enable to disable L2VPN. Syntax l2vpn enable undo l2vpn enable Default L2VPN is disabled.
  • Page 335: Mac-Learning Enable

    Usage guidelines The specified LSR ID and PW ID uniquely identify a PW. If a PW has a backup PW or primary PW, this command switches traffic from the PW to the backup or primary PW. If the PW does not have a backup or primary PW, this command does not perform the switchover.
  • Page 336: Peer

    Default A VSI has an MTU of 1500 bytes. Views VSI view Predefined user roles network-admin mdc-admin Parameters mtu: Specifies an MTU value in the range of 300 to 65535, in bytes. Usage guidelines The MTU specifies the maximum length of a packet transmitted on a PW, including the control word, PW label, and network layer packet.
  • Page 337 mdc-admin Parameters ip-address: Specifies the LSR ID of the peer PE. pw-id pw-id: Specifies a PW ID for the PW, in the range of 1 to 4294967295. in-label label-value: Specifies the incoming label of the PW, in the range of 16 to 1023. out-label label-value: Specifies the outgoing label of the PW, in the range of 16 to 1023.
  • Page 338: Peer Auto-Discovery

    Related commands default-pw-id display l2vpn ldp display l2vpn pw pw-class tunnel-policy peer auto-discovery Use peer auto-discovery to enable BGP to exchange VPLS PE information with the specified peers. Use undo peer auto-discovery to disable BGP from exchanging VPLS PE information with the specified peers.
  • Page 339: Peer Signaling

    [Sysname-bgp] address-family l2vpn [Sysname-bgp-l2vpn] peer 3.3.3.9 auto-discovery # Enable BGP to exchange VPLS PE information with the peer group test through non-standard MP_REACH_NLRI. <Sysname> system-view [Sysname] bgp 100 [Sysname-bgp] address-family l2vpn [Sysname-bgp-l2vpn] peer test auto-discovery non-standard Related commands display bgp l2vpn auto-discovery peer signaling Use peer signaling to enable BGP to exchange label block information with the specified peers.
  • Page 340: Policy Vpn-Target

    Related commands display bgp l2vpn signaling policy vpn-target Use policy vpn-target to enable route target-based filtering of incoming BGP L2VPN information. Use undo policy vpn-target to disable route target-based filtering of incoming BGP L2VPN information. Syntax policy vpn-target undo policy vpn-target Default Route target-based filtering of incoming BGP L2VPN information is enabled.
  • Page 341: Pw-Class (System View)

    Views Auto-discovery VSI view Predefined user roles network-admin mdc-admin Parameters class-name: Specifies a PW class by its name, a case-sensitive string of 1 to 19 characters. Usage guidelines The specified PW class will be used to establish all PWs on the auto-discovery VSI. Examples # Specify a PW class named pw100 for the auto-discovery VSI aaa.
  • Page 342: Pwsignaling

    Usage guidelines In PW class view, you can configure PW attributes such as the PW type and whether to enable control word. A PW class simplifies PW attribute configuration for PWs that have the same PW attributes. You can configure the PW attributes in a PW class, and specify the PW class for the PWs. Examples # Create a PW class named pw100 and enter PW class view.
  • Page 343: Pw-Type

    pw-type Use pw-type to specify a PW type for a PW class. Use undo pw-type to restore the default. Syntax pw-type { ethernet | vlan } undo pw-type Default The PW type for a PW class is VLAN. Views PW class view Predefined user roles network-admin mdc-admin...
  • Page 344: Reset L2Vpn Mac-Address

    • For traffic received from the PW: If the AC access mode (configured by the xconnect vsi command) is VLAN, the PE modifies or keeps the P-tag and forwards the traffic through the AC. If the AC access mode is Ethernet, the PE removes the P-tag and forwards the traffic through the AC.
  • Page 345: Route-Distinguisher

    Syntax revertive { wtr wtr-time | never } undo revertive { wtr | never } Default When the primary PW recovers, traffic is immediately switched back from the backup PW to the primary PW. Views VSI LDP signaling view, VSI static configuration view Predefined user roles network-admin mdc-admin...
  • Page 346: Rr-Filter

    Parameters route-distinguisher: Specifies an RD, a string of 3 to 21 characters. An RD can be in one of the following formats: • 16-bit AS number:32-bit user-defined number. For example, 101:3. • 32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1. •...
  • Page 347: Service-Instance

    Examples # Configure the RR to reflect only the BGP L2VPN information that contains the extended community number 10. <Sysname> system-view [Sysname] bgp 100 [Sysname-bgp] address-family l2vpn [Sysname-bgp-l2vpn] rr-filter 10 service-instance Use service-instance to create an Ethernet service instance on an interface, and enter Ethernet service instance view.
  • Page 348: Signaling-Protocol

    Default A VSI is enabled. Views VSI view Predefined user roles network-admin mdc-admin Usage guidelines After you disable a VSI, the VSI cannot provide VPLS services. Use the shutdown command when you want to temporarily disable VPLS. When a VSI is disabled, you can still configure the VSI.
  • Page 349: Site

    Examples # Use LDP (FEC 129) to establish a PW to a remote PE discovered by BGP and enter auto-discovery VSI LDP signaling view. <Sysname> system-view [Sysname] vsi aaa [Sysname-vsi-aaa] auto-discovery bgp [Sysname-vsi-aaa-auto] signaling-protocol ldp [Sysname-vsi-aaa-auto-ldp] Related commands display l2vpn pw display l2vpn vsi site Use site to create a local site.
  • Page 350: Tunnel-Policy (Auto-Discovery Vsi View)

    [Sysname-vsi-aaa] auto-discovery bgp [Sysname-vsi-aaa-auto] signaling-protocol bgp [Sysname-vsi-aaa-auto-bgp] site 1 range 30 default-offset 0 Related commands display l2vpn pw display l2vpn vsi tunnel-policy (auto-discovery VSI view) Use tunnel-policy to specify a tunnel policy for an auto-discovery VSI. Use undo tunnel-policy to remove the configuration. Syntax tunnel-policy tunnel-policy-name undo tunnel-policy...
  • Page 351: Vpls-Id

    vpls-id Use vpls-id to set the VPLS ID of a VSI. Use undo vpls-id to remove the VPLS ID of a VSI. Syntax vpls-id vpls-id undo vpls-id Default No VPLS ID is specified for a VSI. Views Auto-discovery VSI LDP signaling view Predefined user roles network-admin mdc-admin...
  • Page 352: Vpn-Target

    vpn-target Use vpn-target to configure route targets for an auto-discovery VSI. Use undo vpn-target to remove route targets for an auto-discovery VSI. Syntax vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] undo vpn-target { vpn-target&<1-8> | all } [ both | export-extcommunity | import-extcommunity ] Default No route targets are configured for an auto-discovery VSI.
  • Page 353: Xconnect Vsi

    Use undo vsi to delete a VSI. Syntax vsi vsi-name undo vsi vsi-name Default No VSI is created. Views System view Predefined user roles network-admin mdc-admin Parameters vsi-name: Specifies a name for the VSI, a case-sensitive string of 1 to 31 characters. Usage guidelines You can create multiple PWs for a VSI manually, or by using LDP or BGP.
  • Page 354 • ethernet: Specifies the access mode as Ethernet. • vlan: Specifies the access mode as VLAN. Usage guidelines The AC access mode determines how the PE considers the VLAN tag in Ethernet frames received from the AC and how the PE forwards Ethernet frames to the AC. •...
  • Page 355: Mce Commands

    MCE commands address-family ipv4 (VPN instance view) Use address-family ipv4 to enter IPv4 VPN view. Use undo address-family ipv4 to remove all configurations from IPv4 VPN view. Syntax address-family ipv4 undo address-family ipv4 Views VPN instance view Predefined user roles network-admin mdc-admin Usage guidelines...
  • Page 356: Display Ip Vpn-Instance

    mdc-admin Parameters text: Specifies a description, a case-sensitive string of 1 to 79 characters. Examples # Configure a description of This is vpn1 for the VPN instance vpn1. <Sysname> system-view [Sysname] ip vpn-instance vpn1 [Sysname-vpn-instance-vpn1] description This is vpn1 display ip vpn-instance Use display ip vpn-instance to display information about VPN instances.
  • Page 357: Export Route-Policy

    Interfaces : Vlan-interface2 Address-family IPv4: Export VPN Targets : Import VPN Targets : Export Route Policy : outpolicy Import Route Policy : inpolicy Tunnel Policy : tunnel1 Maximum Routes Limit : 500 Threshold Value(%): 50 Address-family IPv6: Export VPN Targets : Import VPN Targets : Export Route Policy : outpolicy Import Route Policy : inpolicy...
  • Page 358: Import Route-Policy

    An export routing policy specified in VPN instance view applies to both IPv4 VPN and IPv6 VPN. An export routing policy specified in IPv4 VPN view applies only to IPv4 VPN. An export routing policy specified in IPv6 VPN view applies only to IPv6 VPN. If you have specified export routing policies in both IPv4 VPN view and VPN instance view, IPv4 VPN uses the export routing policy specified in IPv4 VPN view.
  • Page 359: Ip Binding Vpn-Instance

    Usage guidelines You can specify an import routing policy to filter received routes or modify their route attributes for the VPN instance. If you execute this command multiple times, the most recent configuration takes effect. An import routing policy specified in VPN instance view applies to both IPv4 VPN and IPv6 VPN. An import routing policy specified in IPv4 VPN view applies only to IPv4 VPN.
  • Page 360: Ip Vpn-Instance (System View)

    mdc-admin Parameters vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. Usage guidelines Use this command to associate the VPN instance with the interface connected to the CE. This command or its undo form clears the IP address and routing protocol configuration on the interface.
  • Page 361: Route-Distinguisher (Vpn Instance View)

    Related commands route-distinguisher route-distinguisher (VPN instance view) Use route-distinguisher to configure an RD for a VPN instance. Use undo route-distinguisher to restore the default. Syntax route-distinguisher route-distinguisher undo route-distinguisher Default No RD is specified for a VPN instance. Views VPN instance view Predefined user roles network-admin mdc-admin...
  • Page 362 undo routing-table limit Default The maximum number of active routes is not limited. Views VPN instance view, IPv4 VPN view, IPv6 VPN view Predefined user roles network-admin mdc-admin Parameters number: Specifies the maximum number of active routes. In VPN instance view, the value range is 1 to 262144.
  • Page 363: Vpn-Id

    [Sysname-vpn-instance-vpn3] route-distinguisher 100:3 [Sysname-vpn-instance-vpn3] address-family ipv6 [Sysname-vpn-ipv4-vpn3] routing-table limit 1000 simply-alert vpn-id Use vpn-id to configure a VPN ID for a VPN instance. Use undo vpn-id to restore the default. Syntax vpn-id vpn-id undo vpn-id Default No VPN ID is configured for a VPN instance. Views VPN instance view Predefined user roles...
  • Page 364: Vpn-Target (Vpn Instance View/Ipv4 Vpn View/Ipv6 Vpn View)

    Views OSPF view Predefined user roles network-admin mdc-admin Usage guidelines For the MCE to receive OSPF routes from the PE, you must disable routing loop detection for a VPN OSPF process on the MCE. This command is applicable only to VPN OSPF processes. Examples # Disable routing loop detection for VPN OSPF process 100.
  • Page 365 import-extcommunity: Uses the specified route targets as import targets. all: Removes all route targets. Usage guidelines MPLS L3VPN uses route targets to control the advertisement of VPN routing information. A PE adds the configured export targets into the route target attribute of routes advertised to a peer. The peer uses the local import targets to match the route targets of received routes.
  • Page 366: Ipv6 Mce Commands

    IPv6 MCE commands This chapter describes only IPv6 MCE-specific commands. For information about the commands available for both IPv4 MCE and IPv6 MCE, see "MCE commands." address-family ipv6 (VPN instance view) Use address-family ipv6 to enter IPv6 VPN view. Use undo address-family ipv6 to remove all configurations from IPv6 VPN view. Syntax address-family ipv6 undo address-family ipv6...
  • Page 367 Predefined user roles network-admin mdc-admin Usage guidelines For the MCE to receive OSPFv3 routes from the PE, you must disable routing loop detection for a VPN OSPFv3 process on the MCE. This command is applicable only to VPN OSPFv3 processes. Examples # Disable routing loop detection for VPN OSPFv3 process 100.
  • Page 368: Document Conventions And Icons

    Document conventions and icons Conventions This section describes the conventions used in the documentation. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. Command conventions Convention Description Bold text represents commands and keywords that you enter literally as shown. Boldface Italic text represents arguments that you replace with actual values.
  • Page 369: Network Topology Icons

    Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
  • Page 370: Support And Other Resources

    Support and other resources Accessing Hewlett Packard Enterprise Support • For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: www.hpe.com/assistance • To access documentation and support services, go to the Hewlett Packard Enterprise Support Center website: www.hpe.com/support/hpesc Information to collect •...
  • Page 371: Websites

    For more information and device support details, go to the following website: www.hpe.com/info/insightremotesupport/docs Documentation feedback Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hpe.com). When submitting your feedback, include the document title,...
  • Page 372 part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.
  • Page 373: Index

    Index A B C D E F G H I K L M N P R S T V W X display bgp l2vpn signaling,302 display bgp routing-table ipv4 unicast inlabel,196 interface,252 display bgp routing-table ipv4 unicast outlabel,197 accept-label,55 display bgp routing-table vpnv4,198 address-family ipv4 (VPN instance view),347...
  • Page 374 display mpls lsp statistics,11 hello lost,173 display mpls nib,12 display mpls nid,13 igp sync delay,58 display mpls static-cr-lsp,139 igp sync delay on-restart,59 display mpls static-lsp,23 import route-policy,215 display mpls summary,13 import route-policy,350 display mpls te ds-te,77 ip binding vpn-instance,351 display mpls te link-management ip binding vpn-instance,216 bandwidth-allocation,78...
  • Page 375 mpls te bidirectional,107 policy vpn-target,220 mpls te enable (interface view),110 policy vpn-target,332 mpls te enable (IS-IS view),110 policy vpn-target,247 mpls te enable (OSPF area view),111 policy vpn-target,284 mpls te fast-reroute,112 preferred-path,191 mpls te fast-reroute bypass-tunnel,113 pv-limit,51 mpls te igp advertise,114 pw-class (auto-discovery cross-connect group view),284 mpls te igp...
  • Page 376 select-seq load-balance-number,191 tunnel-number,137 service-instance,339 tunnel-policy,292 service-instance,289 tunnel-policy (auto-discovery VSI view),342 session protection,65 tunnel-policy (system view),192 sham-link,250 sham-link,224 vpls-id,343 shutdown,339 popgo,228 shutdown,290 vpn-id,355 signaling-protocol,340 vpn-id,228 site,341 vpn-instance,54 site,291 vpn-instance-capability simple (OSPF view),355 snmp-agent trap enable l3vpn,226 vpn-instance-capability simple (OSPFv3 view),358 snmp-agent trap enable ldp,53 vpn-target,344 snmp-agent trap enable...

Table of Contents