H3C S6820 Series Command Reference Manual
Openflow
Hide thumbs
Also See for S6820 Series:
- Installation manual (70 pages) ,
- Configuration examples (48 pages)
Related Manuals for H3C S6820 Series
Summary of Contents for H3C S6820 Series
- Page 1 H3C S6820 Switch Series OpenFlow Command Reference New H3C Technologies Co., Ltd. http://www.h3c.com.hk Software version: Release 612x Document version: 6W101-20170815...
- Page 2 , H3CS, H3CIE, H3CNE, Aolynk, Care, , IRF, NetPilot, Netflow, SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of New H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners Notice The information in this document is subject to change without notice.
- Page 3 Preface This command reference describes the OpenFlow configuration commands. This preface includes the following topics about the documentation: • Audience • Conventions • Obtaining documentation • Technical support • Documentation feedback Audience This documentation is intended for: • Network planners. •...
- Page 4 Convention Description Folder. Symbols Convention Description An alert that calls attention to important information that if not understood or followed WARNING! can result in personal injury. An alert that calls attention to important information that if not understood or followed CAUTION: can result in data loss, data corruption, or damage to hardware or software.
- Page 5 Obtaining documentation To access the most up-to-date H3C product documentation, go to the H3C website at http://www.h3c.com.hk To obtain information about installation, configuration, and maintenance, click http://www.h3c.com.hk/Technical_Documents...
-
Page 6: Table Of Contents
Contents OpenFlow commands ······································································· 1 active instance ···················································································································· 1 classification ······················································································································· 1 controller address ················································································································ 2 controller auxiliary ··············································································································· 3 controller connect interval ····································································································· 4 controller echo-request interval ······························································································ 5 controller mode ··················································································································· 5 datapath-id ························································································································· 6 default table-miss permit ······································································································· 7 description ·························································································································... -
Page 7: Openflow Commands
OpenFlow commands active instance Use active instance to activate an OpenFlow instance. Use undo active instance to deactivate an OpenFlow instance. Syntax active instance undo active instance Default An OpenFlow instance is not activated. Views OpenFlow instance view Predefined user roles network-admin Usage guidelines If the VLAN configuration or flow table configuration of an activated OpenFlow instance is changed,... -
Page 8: Controller Address
Parameters global: Specifies the global mode. vlan: Specifies the VLAN mode. vlan-id: Specifies a VLAN ID in the range of 1 to 4094. vlan-mask: Specifies a VLAN mask in the range of 0 to 4095. The default value is 4095. loosen: Specifies the loosen mode. -
Page 9: Controller Auxiliary
port port-number: Sets the port number used by the controller to establish TCP connections to the OpenFlow switch. The value range for the port number is 1 to 65535. The default value is 6633. local address: Specifies the source IP address used to establish TCP connections to the controller. When multiple routes are available between a controller and a switch, you can use this keyword to configure a source IP address for the switch. -
Page 10: Controller Connect Interval
Default An OpenFlow instance does not have auxiliary connections to a controller. Views OpenFlow instance view Predefined user roles network-admin Parameters controller-id: Specifies a controller by its ID in the range of 0 to 63. auxiliary auxiliary-id: Specifies an auxiliary connection ID in the range of 1 to 255. transport: Specifies the transport layer protocol. -
Page 11: Controller Echo-Request Interval
Views OpenFlow instance view Predefined user roles network-admin Parameters interval: Specifies the reconnection interval in the range of 10 to 120 seconds. Examples # Configure OpenFlow instance 1 to reconnect to a controller every 10 seconds. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] controller connect interval 10 controller echo-request interval Use controller echo-request interval to set the echo request interval for an OpenFlow switch. -
Page 12: Datapath-Id
Default The controller mode is multiple. Views OpenFlow instance view Predefined user roles network-admin Parameters multiple: Specifies the multiple mode. single: Specifies the single mode. Usage guidelines In single mode, the OpenFlow switch connects to only one controller at a time. When communication with the current controller fails, the OpenFlow instance connects to the controller with the lowest ID among the rest controllers. -
Page 13: Default Table-Miss Permit
[Sysname] openflow instance 1 [Sysname-of-inst-1] datapath-id 123456 default table-miss permit Use default table-miss permit to change the default action of table-miss flow entries to forward packets to the normal pipeline. Use undo default table-miss permit to restore the default. Syntax default table-miss permit undo default table-miss permit Default... -
Page 14: Display Openflow
Examples # Configure the description as test-desc for OpenFlow instance 1. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] description test-desc display openflow Use display openflow to display controller information for an OpenFlow instance. Syntax display openflow instance instance-id { controller [ controller-id ] | listened } Views Any view Predefined user roles... -
Page 15: Display Openflow Auxiliary
Field Description Connection detection interval (in seconds) at which an OpenFlow instance Echo interval sends an echo request message to all controllers. Controller IP address IP address of the controller. Controller port TCP port number of the controller. Source IP address of the controller that is connected to the OpenFlow Local IP address instance. -
Page 16: Display Openflow Flow-Table
Examples # Display auxiliary connection information for OpenFlow instance 100. <Sysname> display openflow instance 100 auxiliary Controller ID: 1 Auxiliary connection number: 2 Auxiliary connection ID : 1 Controller IP address : 192.168.49.48 Controller port : 6633 Connect type : TCP Connect state : Established Packets sent... - Page 17 Predefined user roles network-admin network-operator Parameters instance-id: Specifies an OpenFlow instance by its ID in the range of 1 to 4094. table-id: Specifies a flow table by its ID in the range of 0 to 254. If you do not specify a flow table ID, the command displays information about all flow tables for the specified OpenFlow instance.
- Page 18 Flow entry rule 1 information: (Not effective) cookie: 0x0, priority: 0, hard time: 0, idle time: 0, flags: flow_send_rem |check_overlap, byte count: 8, packet count: 1 Match information: Input interface: HGE1/0/3 Ethernet source MAC address: 0000-0000-0001 Ethernet source MAC address mask: ffff-ffff-ffff Instruction information: Set meter: 100 Apply actions:...
- Page 19 Field Description Contents of the instruction set of the flow entry: • Set meter—Sends the matched packet to a specific meter. • Write metadata—Writes the value into the metadata fields of the matched packet. Metadata is used for passing messages between flow tables.
- Page 20 Field Mask field Description ICMPv6 type ICMPv6 type. ICMPv6 code ICMPv6 code. Output interface Output port. VRF index VPN index. Fragment Fragment. Physical output interface Output physical port. CVLAN ID Mask CVLAN ID and mask. Extension matching fields. Address ID Experimenter represents the unique identifier of an address.
-
Page 21: Display Openflow Group
display openflow group Use display openflow group to display group entry information for an OpenFlow instance. Syntax display openflow instance instance-id group [ group-id ] Views Any view Predefined user roles network-admin network-operator Parameters instance-id: Specifies an OpenFlow instance by its ID in the range of 1 to 4094. group-id: Specifies a group by its ID in the range of 0 to 4294967040. -
Page 22: Display Openflow Instance
Table 7 Command output Field Description Group count Total number of group entries included in the OpenFlow instance. Type of the group entry: • All—Executes all buckets in the group. This group is used for multicast or broadcast forwarding. Type •... - Page 23 Configuration information: Description : test-desc Active status : Active Inactive configuration: None Active configuration: Classification: VLAN, loosen mode, total VLANs(1) In-band management VLAN, total VLANs(0) Empty VLAN Connect mode: Multiple MAC address learning: Disabled TCP DSCP value: 10 Flow table: Table ID(type): 0(MAC-IP), count: 0 Flow-entry max-limit: 65535 Datapath ID: 0x0000001234567891...
-
Page 24: Display Openflow Meter
Field Description Flow table Flow table information for the OpenFlow instance. Table ID(type) Type of the flow table: MAC-IP or Extensibility. count Total number of flow entries included in the current flow table. Flow-entry max-limit Maximum number of flow entries allowed in the extensibility flow table. Datapath ID Datapath ID of the OpenFlow instance. - Page 25 Examples # Display meter entry information for OpenFlow instance 100. <Sysname> display openflow instance 100 meter Meter flags: KBPS -- Rate value in kb/s, PKTPS -- Rate value in packet/sec BURST -- Do burst size, STATS -- Collect statistics Instance 100 meter table information: meter entry count: 2 Meter entry 100 information: Meter flags: KBPS...
-
Page 26: Display Openflow Summary
Field Description Referenced information Information about the meter entry used by flow entries. Count Total number of flow entries that use the meter entry. Flow table Flow table to which the flow entries that use the meter entry belong. Flow entry Flow entries that use the meter entry. -
Page 27: Fail-Open Mode
Field Description Status of the OpenFlow channel to the controller: • Connected—An OpenFlow channel has been established. • Failed(Se)—The OpenFlow channel is disconnected from the controller, and the OpenFlow instance uses the secure connection interruption mode. • Failed(Sm)—The OpenFlow channel is disconnected from the controller, Channel and the OpenFlow instance uses the smart connection interruption mode. -
Page 28: Flow-Entry Max-Limit
Examples # Set the connection interruption mode to standalone for OpenFlow instance 1. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] fail-open mode standalone flow-entry max-limit Use flow-entry max-limit to set the maximum number of entries for an extensibility flow table on an OpenFlow switch. -
Page 29: Flow-Table
Examples # Disable logging for successful flow table modifications for OpenFlow instance 1. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] flow-log disable flow-table Use flow-table to create a flow table for an OpenFlow instance. Use undo flow-table to restore the default. Syntax flow-table { [ ingress-vlan ingress-table-id ] [ extensibility extensibility-table-id | mac-ip mac-ip-table-id ] * [ egress-vlan egress-table-id ] }... -
Page 30: Forbidden Port
[Sysname-of-inst-1] flow-table mac-ip 0 extensibility 1 Related commands qinq-network enable forbidden port Use forbidden port to forbid an OpenFlow instance from reporting ports of the specified types to controllers. Use undo forbidden port to restore the default. Syntax forbidden port { l3-physical-interface | vlan-interface | vsi-interface } * undo forbidden port Default All ports that belong to an OpenFlow instance are reported to the controllers. -
Page 31: Listening Port
Views OpenFlow instance view Predefined user roles network-admin Parameters vlan-id: Specifies a VLAN ID in the range of 1 to 4094. Usage guidelines By default, traffic in VLANs associated with an OpenFlow instance is forwarded in OpenFlow forwarding process. The OpenFlow instance cannot use these VLANs to connect to the controller. You can use this command to specify inband management VLANs for an OpenFlow instance. -
Page 32: Mac-Ip Dynamic-Mac Aware
To re-configure the SSL server, first execute the undo form of the command to delete the existing SSL server configuration. Examples # Enable an SSL server with the port number 20000 for OpenFlow instance 1. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] listening port 20000 ssl ssl_name mac-ip dynamic-mac aware Use mac-ip dynamic-mac aware to configure an OpenFlow instance to support dynamic MAC... -
Page 33: Openflow Instance
Views OpenFlow instance view Predefined user roles network-admin Examples # Forbid MAC address learning in VLANs associated with OpenFlow instance 1. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] mac-learning forbidden openflow instance Use openflow instance to create an OpenFlow instance and enter its view, or enter the view of an existing OpenFlow instance. -
Page 34: Permit-Port-Type Member-Port
Views System view Predefined user roles network-admin Usage guidelines Packet loss prevention ensures successful OpenFlow forwarding without packet loss. In an OpenFlow network, packet loss might occur on the switch during the flow entry deployment process. Packet loss then causes OpenFlow forwarding errors. For example, traffic is mistakenly sent to controllers and the controllers deploy faulty flow entries. -
Page 35: Precedence Dynamic Arp
precedence dynamic arp Use precedence dynamic arp to allow dynamic ARP entries to overwrite OpenFlow ARP entries. Use undo precedence dynamic to restore the default. Syntax precedence dynamic arp undo precedence dynamic arp Default An OpenFlow instance does not allow dynamic ARP entries to overwrite OpenFlow ARP entries. Views OpenFlow instance view Predefined user roles... -
Page 36: Qinq-Network Enable
The slow protocols include LACP, LAMP, and OAM. Examples # Create a highest-priority flow entry for OpenFlow instance 1 to drop slow protocol packets. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] protocol-packet filter slow qinq-network enable Use qinq-network enable to enable an OpenFlow instance to perform QinQ tagging for double-tagged packets passing an extensibility flow table. -
Page 37: Reset Openflow Instance Statistics
Usage guidelines Layer 3 flow entries in the MAC-IP flow tables might be overwritten. In such cases, you can use this command to obtain all Layer 3 flow entries in the MAC-IP flow tables from the controller again. Examples # Refresh all Layer 3 flow entries in the MAC-IP flow tables for OpenFlow instance 1. <Sysname>... -
Page 38: Tcp-Connection Backup
Parameters dscp-value: Specifies a DSCP value for OpenFlow packets, in the range of 0 to 63. Examples # Set the DSCP value to 63 for OpenFlow packets. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] tcp dscp 63 tcp-connection backup Use tcp-connection backup to enable OpenFlow connection backup. Use undo tcp-connection backup to disable OpenFlow connection backup. -
Page 39: Index
Index A C D F I L M O P Q R T active instance,1 in-band management vlan,24 classification,1 listening port,25 controller address,2 controller auxiliary,3 mac-ip dynamic-mac aware,26 controller connect interval,4 mac-learning forbidden,26 controller echo-request interval,5 controller mode,5 openflow instance,27 openflow lossless enable,27 datapath-id,6...
Need help?
Do you have a question about the S6820 Series and is the answer not in the manual?
Questions and answers