Page 2
The information in this document is subject to change without notice. All contents in this document, including statements, information, and recommendations, are believed to be accurate, but they are presented without warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions contained herein.
Page 3
Preface This command reference describes the commands for configuring VXLAN features. This preface includes the following topics about the documentation: • Audience. • Conventions. • Documentation feedback. Audience This documentation is intended for: • Network planners. • Field technical support and servicing engineers. •...
Page 4
Symbols Convention Description An alert that calls attention to important information that if not understood or followed WARNING! can result in personal injury. An alert that calls attention to important information that if not understood or followed CAUTION: can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information.
Page 5
Documentation feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.
Related commands display arp suppression vsi reset arp suppression vsi description to configure a description for a VSI. description to restore the default. undo description Syntax description text undo description Default A VSI does not have a description. Views VSI view Predefined user roles network-admin mdc-admin...
network-operator Parameters : Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you name vsi-name do not specify a VSI, this command displays entries for all VSIs. : Specifies an IRF member device by its member ID. If you do not specify a slot slot-number member device, this command displays entries on the master device.
Page 11
: Displays detailed information about Layer 3 interfaces. If you do not specify this keyword, verbose the command displays brief information about Layer 3 interfaces. Usage guidelines If you do not specify any parameters, this command displays brief L2VPN information for all Layer 3 interfaces that are mapped to VSIs.
Field Description • Down—The interface is physically down. Type L2VPN type of the interface. This field displays VSI for the VXLAN feature. display l2vpn mac-address to display MAC address entries for VSIs. display l2vpn mac-address Syntax display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count ] Views Any view Predefined user roles...
Field Description • Static—Static remote-MAC entry. • EVPN—Remote-MAC entry advertised through BGP EVPN. • OpenFlow—Remote-MAC entry issued by a remote controller through OpenFlow. For a local MAC address, this field displays the AC's link ID on the VSI. Link ID/Name For a remote MAC address, this field displays the tunnel interface name.
Page 14
Field Description shutdown command. # Display detailed information about all VSIs. <Sysname> display l2vpn vsi verbose VSI Name: vpna VSI Index VSI State : Up : 1500 Bandwidth Broadcast Restrain Multicast Restrain Unknown Unicast Restrain: - MAC Learning : Enabled MAC Table Limit MAC Learning rate Drop Unknown...
Page 15
Field Description • Down—The VSI is down. • Administratively down—The VSI has been manually shut down by using shutdown command. MTU on the VSI. Maximum bandwidth (in kbps) for known unicast traffic on the VSI. This field Bandwidth displays a hyphen (-) if it is not available in the current software version. Broadcast restraint bandwidth (in kbps).
Field Description Packet statistics state: • Enabled—The packet statistics feature is enabled for the VXLAN tunnels of Tunnel Statistics the VSI. • Disabled—The packet statistics feature is disabled for the VXLAN tunnels of the VSI. Tunnel state: • Up—The tunnel is operating correctly. •...
Page 17
: Specifies a VXLAN tunnel. The argument tunnel tunnel-number tunnel-number represents the tunnel interface number. If you do not specify a VXLAN tunnel, this command displays information about all VXLAN tunnels associated with the specified VXLAN. The following compatibility matrixes show the value ranges for the argument: tunnel-number Hardware...
Page 18
Hardware Value range MSR3610-I-XS 0 to 10239 MSR3610-IE-XS 0 to 10239 Hardware Value range MSR810-LM-GL 0 to 10239 MSR810-W-LM-GL 0 to 10239 MSR830-6EI-GL 0 to 10239 MSR830-10EI-GL 0 to 10239 MSR830-6HI-GL 0 to 10239 MSR830-10HI-GL 0 to 10239 MSR2600-6-X1-GL 0 to 10239 MSR3600-28-SI-GL 0 to 10239 Examples...
Table 7 Command output Field Description Link ID Tunnel's link ID in the VXLAN. Tunnel state: • Up—The tunnel is operating correctly. • Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary proxy tunnel is operating correctly. State •...
Views VSI view Predefined user roles network-admin Usage guidelines By default, the device floods unknown unicast frames received from the local site to the following interfaces in the frame's VXLAN: • All site-facing interfaces except for the incoming interface. • All VXLAN tunnel interfaces.
Syntax l2vpn statistics interval interval undo l2vpn statistics interval Default The VXLAN statistics collection interval is 15 minutes. Views System view Predefined user roles network-admin Parameters : Specifies an interval value in the range of 30 to 65535 seconds. interval Examples # Set the VXLAN statistics collection interval to 30 seconds.
Page 23
Hardware Value range MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LM-CNDE-SJK, MSR810-CNDE-SJK MSR810-LMS, MSR810-LUS 0 to 1023 MSR810-LMS-EA, MSR810-LME 0 to 10239 MSR2600-6-X1, MSR2600-10-X1 0 to 10239 MSR 2630 0 to 10239 MSR3600-28, MSR3600-51 0 to 10239 MSR3600-28-SI, MSR3600-51-SI 0 to 10239 MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, 0 to 10239 MSR3600-51-X1-DP MSR3610-I-DP, MSR3610-IE-DP, MSR3610-IE-ES,...
Usage guidelines A remote MAC address is the MAC address of a VM in a remote site. Remote MAC entries include manually added MAC entries, dynamically learned MAC entries, and MAC entries advertised through a protocol, for example, BGP EVPN. When you add a remote MAC address entry, make sure the specified VSI's VXLAN has been assigned the specified VXLAN tunnel.
Fragmentation is disabled for a VSI that uses the default MTU. If you set a MTU for a VSI, the packets longer than the MTU are fragmented. Examples # Set the MTU to 1400 bytes for VSI vxlan1. <Sysname> system-view [Sysname] vsi vxlan1 [Sysname-vsi-vxlan1] mtu 1400 Related commands...
Views User view Predefined user roles network-admin Parameters : Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you name vsi-name do not specify a VSI, this command clears ARP flood suppression entries on all VSIs. Examples # Clear ARP flood suppression entries on all VSIs.
Views User view Predefined user roles network-admin Parameters : Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do vsi vsi-name not specify a VSI, this command clears packet statistics on VXLAN tunnel interfaces of all VSIs. Examples # Clear packet statistics on VXLAN tunnel interfaces of all VSIs.
service-class to set a service class value for outgoing VXLAN packets. service-class to restore the default. undo service-class Syntax service-class service-class-value undo service-class The following matrixes show the hardware and command compatibility: Hardware Command compatibility MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LM-CNDE-SJK, MSR810-CNDE-SJK MSR810-LMS, MSR810-LUS...
Page 29
Hardware Command compatibility MSR2630-XS MSR3600-28-XS MSR3610-XS MSR3620-XS MSR3610-I-XS MSR3610-IE-XS Hardware Command compatibility MSR810-LM-GL MSR810-W-LM-GL MSR830-6EI-GL MSR830-10EI-GL MSR830-6HI-GL MSR830-10HI-GL MSR2600-6-X1-GL MSR3600-28-SI-GL Default No service class value is set for outgoing VXLAN packets. Views VSI view Predefined user roles network-admin Parameters : Specifies a service class value. The value range for this argument is 0 service-class-value to 15.
To set the service class value for an MPLS TE tunnel, use the mpls te service-class command. For more information about this command, see MPLS TE commands in MPLS Command Reference. If you execute the command multiple times for a VSI, the most recent service-class configuration takes effect.
Page 31
Syntax tunnel tunnel-number { flooding-proxy | no-split-horizon } undo tunnel tunnel-number Default A VXLAN does not contain VXLAN tunnels. Views VXLAN view Predefined user roles network-admin Parameters er: Specifies a tunnel interface number. The value range for this argument is 0 to tunnel-numb 10239.The tunnel must be a VXLAN tunnel.
Page 32
Hardware Value range MSR3600-28-WiNet 0 to 10239 MSR3610-X1-WiNet 0 to 10239 MSR3610-WiNet, MSR3620-10-WiNet, MSR3620-DP-WiNet, 0 to 10239 MSR3620-WiNet, MSR3660-WiNet Hardware Value range MSR2630-XS 0 to 10239 MSR3600-28-XS 0 to 10239 MSR3610-XS 0 to 10239 MSR3620-XS 0 to 10239 MSR3610-I-XS 0 to 10239 MSR3610-IE-XS 0 to 10239 Hardware...
To modify the flood proxy or split horizon setting on a VXLAN tunnel, you must first use the undo command to remove the tunnel. tunnel Examples # Assign VXLAN tunnels 1 and 2 to VXLAN 10000. <Sysname> system-view [Sysname] vsi vpna [Sysname-vsi-vpna] vxlan 10000 [Sysname-vsi-vpna-vxlan-10000] tunnel 1 [Sysname-vsi-vpna-vxlan-10000] tunnel 2...
tunnel global source-address to specify a global source address for VXLAN tunnels. tunnel global source-address to restore the default. undo tunnel global source-address Syntax tunnel global source-address { ipv4-address | ipv6 ipv6-address } undo tunnel global source-address [ ipv6 ] Default No global source address is specified for VXLAN tunnels.
Views VSI view Predefined user roles network-admin Usage guidelines This command enables packet statistics only for VXLAN tunnels. It does not take effect on VXLAN-DCI tunnels. Examples # Enable packet statistics for all VXLAN tunnels associated with VSI vpna. <Sysname> system-view [Sysname] vsi vpna [Sysname-vsi-vpna] tunnel statistics enable Related commands...
Related commands display l2vpn vsi vxlan to create a VXLAN and enter its view, or enter the view of an existing VXLAN. vxlan to restore the default. undo vxlan Syntax vxlan vxlan-id undo vxlan Default No VXLANs exist. Views VSI view Predefined user roles network-admin Parameters...
Predefined user roles network-admin Usage guidelines VXLAN fast forwarding enables the device to bypass QoS and security services when the device forwards data traffic over VXLAN tunnels based on the software. As a best practice, enable this feature to improve forwarding speed only when QoS and security services are not configured on the following interfaces: •...
vxlan local-mac report to enable local-MAC logging. vxlan local-mac report to disable local-MAC logging. undo vxlan local-mac report Syntax vxlan local-mac report undo vxlan local-mac report Default Local-MAC logging is disabled. Views System view Predefined user roles network-admin Usage guidelines When the local-MAC logging feature is enabled, the VXLAN module immediately sends a log message with its local MAC addresses to the information center.
Examples # Disable remote-MAC address learning. <Sysname> system-view [Sysname] vxlan tunnel mac-learning disable vxlan udp-port to set the destination UDP port number for VXLAN packets. vxlan udp-port to restore the default. undo vxlan udp-port Syntax vxlan udp-port port-number undo vxlan udp-port Default The destination UDP port number is 4789 for VXLAN packets.
Page 40
Parameters : Specifies the VSI name, a case-sensitive string of 1 to 31 characters. vsi-name : Specifies an access mode. If the AC is an Ethernet service instance or Layer 3 access-mode subinterface, you can specify this keyword. The default access mode is VLAN. If the AC is a Layer 3 interface, you cannot specify this keyword.
undo bandwidth Default The expected bandwidth (in kbps) equals the interface baudrate divided by 1000. Views VSI interface view Predefined user roles network-admin Parameters : Specifies the expected bandwidth, in the range of 1 to 400000000 kbps. bandwidth-value Usage guidelines The expected bandwidth is an informational parameter used only by higher-layer protocols for calculation.
[Sysname-Vsi-interface100] default This command will restore the default settings. Continue? [Y/N]:y description description to configure the description of a VSI interface. to restore the default. undo description Syntax description text undo description Default The description of a VSI interface is interface-name plus Interface (for example, Vsi-interface100 Interface).
Page 44
displays information about the specified interface. For more information about VA interfaces, see PPPoE configuration in Layer 2—WAN Access Configuration Guide. : Display brief interface information. If you do not specify this keyword, the command displays brief detailed interface information. : Displays complete interface descriptions.
Page 45
Field Description • Primary—Manually configured primary IP address. • Sub—Manually configured secondary IP address. If the interface has both primary and secondary IP addresses, the primary IP address is displayed. If the interface has only secondary IP addresses, the lowest secondary IP address is displayed.
Page 46
Brief information on interfaces in route mode: Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Primary IP Description Vsi100 DOWN DOWN # Display brief information and complete description for VSI-interface 100. <Sysname> display interface vsi-interface 100 brief description Brief information on interfaces in route mode: Link: ADM - administratively down;...
Related commands reset counters interface vsi-interface distributed-gateway local to specify a VSI interface as a distributed gateway to distributed-gateway local provide services for the local site. to restore the default. undo distributed-gateway local Syntax distributed-gateway local undo distributed-gateway local Default A VSI interface is not a distributed gateway.
Parameters : Specifies an IPv4 subnet address in dotted-decimal notation. ipv4-address : Specifies a wildcard mask in dotted decimal notation. In contrast to a network wildcard-mask mask, the 0 bits in a wildcard mask represent "do care" bits, and the 1 bits represent "don't care" bits. If the "do care"...
[Sysname] vsi vpna [Sysname-vsi-vpna] gateway vsi-interface 100 Related commands interface vsi-interface interface vsi-interface to create a VSI interface and enter its view, or enter the view of interface vsi-interface an existing VSI interface. to delete a VSI interface. undo interface vsi-interface Syntax interface vsi-interface vsi-interface-id undo interface vsi-interface vsi-interface-id...
Predefined user roles network-admin Parameters : Specifies a MAC address in H-H-H format. mac-address Examples # Assign MAC address 0001-0001-0001 to VSI-interface 100. <Sysname> system-view [Sysname] interface vsi-interface 100 [Sysname-Vsi-interface100] mac-address 1-1-1 to set the MTU for a VSI interface. to restore the default.
Parameters : Specifies a VSI interface by its number. Make sure vsi-interface [ vsi-interface-id ] the specified VSI interface has been created on the device. If you do not specify the option, this command clears packet statistics on all vsi-interface [ vsi-interface-id ] interfaces except for VA interfaces.
Default A VTEP is not assigned to any VTEP group. Views System view Predefined user roles network-admin Parameters group-ip : Specifies a VTEP group by its group IP address. The IP address must already exist on the local VTEP. : Specifies the member VTEP IP address for the local VTEP. The IP address must member-ip already exist on the local VTEP.
Need help?
Do you have a question about the MSR 810 and is the answer not in the manual?
Questions and answers