H3C MSR 5600 Comware 7 Vxlan Command Reference
H3C MSR 5600 Comware 7 Vxlan Command Reference

H3C MSR 5600 Comware 7 Vxlan Command Reference

Hide thumbs Also See for MSR 5600:

Advertisement

Quick Links

H3C MSR 5600 Routers
Comware 7 VXLAN Command Reference
New H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: MSR-CMW710-R0707
Document version: 6W301-20190302

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the MSR 5600 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for H3C MSR 5600

  • Page 1 H3C MSR 5600 Routers Comware 7 VXLAN Command Reference New H3C Technologies Co., Ltd. http://www.h3c.com Software version: MSR-CMW710-R0707 Document version: 6W301-20190302...
  • Page 2 The information in this document is subject to change without notice. All contents in this document, including statements, information, and recommendations, are believed to be accurate, but they are presented without warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions contained herein.
  • Page 3 This documentation is intended for: • Network planners. • Field technical support and servicing engineers. • Network administrators working with the MSR 5600 routers. Conventions The following information describes the conventions used in the documentation. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown.
  • Page 4 Symbols Convention Description An alert that calls attention to important information that if not understood or followed WARNING! can result in personal injury. An alert that calls attention to important information that if not understood or followed CAUTION: can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information.
  • Page 5 Documentation feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.
  • Page 6: Table Of Contents

    Contents VXLAN commands ··········································································· 1     Basic VXLAN commands ············································································································· 1   arp suppression enable ········································································································ 1   description ························································································································· 1   display arp suppression vsi ···································································································· 2   display l2vpn interface ·········································································································· 3   display l2vpn mac-address ···································································································· 4  ...
  • Page 7: Vxlan Commands

    VXLAN commands Basic VXLAN commands arp suppression enable Use arp suppression enable to enable ARP flood suppression. Use undo arp suppression enable to disable ARP flood suppression. Syntax arp suppression enable undo arp suppression enable Default ARP flood suppression is disabled. Views VSI view Predefined user roles...
  • Page 8: Display Arp Suppression Vsi

    Default A VSI does not have a description. Views VSI view Predefined user roles network-admin Parameters text : Specifies a description, a case-sensitive string of 1 to 80 characters. Examples # Configure a description for VSI vpn1. <Sysname> system-view [Sysname] vsi vpn1 [Sysname-vsi-vpn1] description vsi for vpn1 Related commands display l2vpn vsi...
  • Page 9: Display L2Vpn Interface

    <Sysname> display arp suppression vsi IP address MAC address Vsi Name Link ID Aging 1.1.1.2 000f-e201-0101 vsi1 0x5000000 1.1.1.3 000f-e201-0202 vsi1 0x5000001 1.1.1.4 000f-e201-0203 vsi2 0x5000000 # Display the number of ARP flood suppression entries. <Sysname> display arp suppression vsi count Total entries: 3 Table 1 Command output Field...
  • Page 10: Display L2Vpn Mac-Address

    Interface Owner Link ID State Type GE1/0/1 vxlan3 GE1/0/2 vxlan4 Down Table 2 Command output Field Description Interface Layer 3 interface name. Owner VSI name. Link ID The interface's link ID on the VSI. Physical state of the interface: • State Up—The interface is physically up.
  • Page 11 Syntax display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count ] Views Any view Predefined user roles network-admin network-operator Parameters vsi vsi-name : Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays MAC address entries for all VSIs.
  • Page 12: Display L2Vpn Vsi

    Related commands reset l2vpn mac-address display l2vpn vsi Use display l2vpn vsi to display information about VSIs. Syntax display l2vpn vsi [ name vsi-name ] [ verbose ] Views Any view Predefined user roles network-admin network-operator Parameters name vsi-name : Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command displays information about all VSIs.
  • Page 13 MAC Learning : Enabled MAC Table Limit Drop Unknown : Disabled Flooding : Enabled Service Class Gateway Interface : VSI-interface 100 VXLAN ID : 10 Tunnel Statistics : Disabled Tunnels: Tunnel Name Link ID State Type Flood Proxy Split horizon Tunnel1 0x5000001 Manual...
  • Page 14: Display Vxlan Tunnel

    Field Description • Enabled—The packet statistics feature is enabled for the VXLAN tunnels of the VSI. • Disabled—The packet statistics feature is disabled for the VXLAN tunnels of the VSI. Tunnel state: • Up—The tunnel is operating correctly. • Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the tunnel is blocked because the primary proxy tunnel is operating State correctly.
  • Page 15 tunnel tunnel-number : Specifies a VXLAN tunnel. The tunnel-number argument represents the tunnel interface number. The value range for the tunnel-number argument is 0 to 10239. If you do not specify a VXLAN tunnel, this command displays information about all VXLAN tunnels associated with the specified VXLAN.
  • Page 16: Flooding Disable

    Field Description • Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and unknown unicast traffic to a flood proxy server through the tunnel. The flood proxy server replicates and forwards flood traffic to remote VTEPs. • Disabled—Flood proxy is disabled. State of split horizon: •...
  • Page 17: L2Vpn Enable

    Examples # Disable flooding for VSI vsi1. <Sysname> system-view [Sysname] vsi vsi1 [Sysname-vsi-vsi1] flooding disable l2vpn enable Use l2vpn enable to enable L2VPN. Use undo l2vpn enable to disable L2VPN. Syntax l2vpn enable undo l2vpn enable Default L2VPN is disabled. Views System view Predefined user roles...
  • Page 18: Mac-Address Static Vsi

    Examples # Set the VXLAN statistics collection interval to 30 seconds. <Sysname> system-view [Sysname] l2vpn statistics interval 30 mac-address static vsi Use mac-address static vsi to add a static remote-MAC address entry for a VXLAN VSI. Use undo mac-address static vsi to remove static remote-MAC address entries for a VXLAN VSI.
  • Page 19: Mtu

    Examples # Add MAC address 000f-e201-0101 to VSI vsi1. Specify Tunnel-interface 1 as the outgoing interface. <Sysname> system-view [Sysname] mac-address static 000f-e201-0101 interface tunnel 1 vsi vsi1 Related commands vxlan tunnel mac-learning disable Use mtu to set the MTU for a VSI. Use undo mtu to restore the default.
  • Page 20: Reset Arp Suppression Vsi

    Syntax reserved vxlan vxlan-id undo reserved vxlan Default No VXLAN has been reserved. Views System view Predefined user roles network-admin Parameters vxlan-id : Specifies a VXLAN ID in the range of 0 to 16777215. Usage guidelines You can specify only one reserved VXLAN on the VTEP. The reserved VXLAN cannot be the VXLAN created on any VSI.
  • Page 21: Reset L2Vpn Mac-Address

    display arp suppression vsi reset l2vpn mac-address Use reset l2vpn mac-address to clear dynamic MAC address entries on VSIs. Syntax reset l2vpn mac-address [ vsi vsi-name ] Views User view Predefined user roles network-admin Parameters vsi vsi-name : Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VSI, this command clears all dynamic MAC address entries on all VSIs.
  • Page 22: Selective-Flooding Mac-Address

    selective-flooding mac-address Use selective-flooding mac-address to enable selective flood for a MAC address. Use undo selective-flooding mac-address to disable selective flood for a MAC address. Syntax selective-flooding mac-address mac-address undo selective-flooding mac-address mac-address Default Selective flood is disabled for all MAC addresses. Views VSI view Predefined user roles...
  • Page 23: Shutdown

    Parameters service-class-value : Specifies a service class value. The value range for this argument is 0 to 15. Usage guidelines Class Based Tunnel Selection (CBTS) compares the service class value of VXLAN packets with the service class values of MPLS TE tunnels. CBTS uses the following rules to select a tunnel to forward the traffic: •...
  • Page 24: Tunnel

    Usage guidelines Use this command to temporarily disable a VSI to provide Layer 2 switching services. The shutdown action does not change settings on the VSI. You can continue to configure the VSI. After you bring up the VSI again, the VSI provides services based on the latest settings. Examples # Shut down VSI vpn1.
  • Page 25: Tunnel Global Source-Address

    Examples # Assign VXLAN tunnels 1 and 2 to VXLAN 10000. <Sysname> system-view [Sysname] vsi vpna [Sysname-vsi-vpna] vxlan 10000 [Sysname-vsi-vpna-vxlan-10000] tunnel 1 [Sysname-vsi-vpna-vxlan-10000] tunnel 2 Related commands display vxlan tunnel tunnel global source-address Use tunnel global source-address to specify a global source address for VXLAN tunnels. Use undo tunnel global source-address to restore the default.
  • Page 26: Vsi

    undo tunnel statistics enable Default The packet statistics feature is disabled for the VXLAN tunnels associated with a VSI. Views VSI view Predefined user roles network-admin Usage guidelines This command enables packet statistics only for VXLAN tunnels. It does not take effect on VXLAN-DCI tunnels.
  • Page 27: Vxlan

    [Sysname] vsi vxlan10 [Sysname-vsi-vxlan10] Related commands display l2vpn vsi vxlan Use vxlan to create a VXLAN and enter its view, or enter the view of an existing VXLAN. Use undo vxlan to restore the default. Syntax vxlan vxlan-id undo vxlan Default No VXLANs exist.
  • Page 28: Vxlan Invalid-Udp-Checksum Discard

    Views System view Predefined user roles network-admin Usage guidelines VXLAN fast forwarding enables the device to bypass QoS and security services when the device forwards data traffic over VXLAN tunnels based on the software. As a best practice, enable this feature to improve forwarding speed only when QoS and security services are not configured on the following interfaces: •...
  • Page 29: Vxlan Ip-Forwarding

    vxlan ip-forwarding Use vxlan ip-forwarding to enable Layer 3 forwarding for all VXLANs. Use undo vxlan ip-forwarding to enable Layer 2 forwarding for all VXLANs. Syntax vxlan ip-forwarding undo vxlan ip-forwarding Default Layer 3 forwarding is enabled for all VXLANs. Views.
  • Page 30: Vxlan Tunnel Mac-Learning Disable

    Usage guidelines When the local-MAC logging feature is enabled, the VXLAN module immediately sends a log message with its local MAC addresses to the information center. When a local MAC address is added or removed, a log message is also sent to the information center to notify the local-MAC change.
  • Page 31: Xconnect Vsi

    Views System view Predefined user roles network-admin Parameters port-number : Specifies a UDP port number in the range of 1 to 65535. As a best practice, specify a port number in the range of 1024 to 65535 to avoid conflict with well-known ports. Usage guidelines You must configure the same destination UDP port number on all VTEPs in a VXLAN.
  • Page 32: Vxlan Ip Gateway Commands

    For an Ethernet frame destined for the local site, the VTEP adds 802.1Q VLAN tags to the frame before forwarding the frame. In VLAN access mode, VXLAN packets sent between VXLAN sites do not contain 802.1Q VLAN tags. VXLAN can provide Layer 2 connectivity for different 802.1Q VLANs between sites. You can use different 802.1Q VLANs to provide the same service in different sites.
  • Page 33: Bandwidth

    Views System view Predefined user roles network-admin Usage guidelines When local proxy ARP is enabled on distributed VXLAN IP gateways, each gateway learns ARP information independently. A gateway does not forward ARP packets destined for its local VSI interfaces to other gateways. For distributed VXLAN IP gateways to have the same ARP entries, you must enable dynamic ARP entry synchronization.
  • Page 34: Default

    [Sysname-Vsi-interface100] bandwidth 10000 default Use default to restore the default settings for a VSI interface. Syntax default Views VSI interface view Predefined user roles network-admin Usage guidelines CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impact of this command when you use it on a live network.
  • Page 35: Display Interface Vsi-Interface

    Predefined user roles network-admin Parameters text : Specifies a description, a case-sensitive string of 1 to 255 characters. Examples # Configure the description as gateway for VXLAN 10 for VSI-interface 100. <Sysname> system-view [Sysname] interface vsi-interface 100 [Sysname-Vsi-interface100] description gateway for VXLAN 10 display interface vsi-interface Use display interface vsi-interface to display information about VSI interfaces.
  • Page 36 IP packet frame type: Ethernet II, hardware address: 0011-2200-0102 IPv6 packet frame type: Ethernet II, hardware address: 0011-2200-0102 Physical: Unknown, baudrate: 1000000 kbps Last clearing of counters: Never Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Input: 0 packets, 0 bytes, 0 drops Output: 0 packets, 0 bytes, 0 drops Table 8 Command output...
  • Page 37 Field Description IP packet frame type IPv4 packet framing format. hardware address MAC address. IPv6 packet frame type IPv6 packet framing format. Physical type of the interface, which is fixed at Unknown. Physical baudrate Interface baudrate in kbps. reset counters interface Last time when the vsi-interface command was used to clear interface...
  • Page 38: Distributed-Gateway Local

    Table 9 Command output Field Description Interface Abbreviated interface name. Physical link state of the interface: • UP—The interface is physically up. • DOWN—The interface is physically down. • ADM—The interface has been shut down by using the shutdown Link command.
  • Page 39: Gateway Subnet

    Usage guidelines If a VXLAN uses distributed gateway services, you must assign the same IP address to the VXLAN's VSI interfaces on different VTEPs. To avoid IP address conflicts, you must specify the VSI interface on each VTEP as a distributed gateway. Examples # Specify VSI-interface 100 as a distributed gateway.
  • Page 40: Gateway Vsi-Interface

    [Sysname] vsi vxlan [Sysname-vsi-vxlan] gateway subnet 100.0.10.0 0.0.0.255 gateway vsi-interface Use gateway vsi-interface to specify a gateway interface for a VSI. Use undo gateway vsi-interface to restore the default. Syntax gateway vsi-interface vsi-interface-id undo gateway vsi-interface Default No gateway interface is specified for a VSI. Views VSI view Predefined user roles...
  • Page 41: Mac-Address

    Predefined user roles network-admin Parameters vsi-interface-id : Specifies a VSI interface number. The value range for this argument is 0 to 8191. Examples # Create VSI-interface 100 and enter VSI interface view. <Sysname> system-view [Sysname] interface vsi-interface 100 [Sysname-Vsi-interface100] Related commands gateway vsi-interface mac-address Use mac-address to assign a MAC address to a VSI interface.
  • Page 42: Reset Counters Interface Vsi-Interface

    Default The MTU is 1500 bytes. Views VSI interface view Predefined user roles network-admin Parameters size : Specifies an MTU value in the range of 46 to 1560 bytes. Examples # Set the MTU to 1430 bytes for VSI-interface 100. <Sysname>...
  • Page 43: Vtep Group Member Local

    Syntax shutdown undo shutdown Default A VSI interface is not manually shut down. Views VSI interface view Predefined user roles network-admin Examples # Shut down VSI-interface 100. <Sysname> system-view [Sysname] interface vsi-interface 100 [Sysname-Vsi-interface100] shutdown vtep group member local Use vtep group member local to assign the local VTEP to a VTEP group. Use undo vtep group member local to remove the local VTEP from a VTEP group.
  • Page 44: Vtep Group Member Remote

    Related commands vtep group member remote vtep group member remote Use vtep group member remote to specify a VTEP group and its member VTEPs. Use undo vtep group member remote to remove a VTEP group and its member VTEPs. Syntax vtep group group-ip member remote member-ip&<1-8>...
  • Page 45 Usage guidelines By default, the device learns ARP information of remote VMs from packets received on VXLAN tunnel interfaces. To save resources on VTEPs in an SDN transport network, you can temporarily disable remote ARP learning when the controller and VTEPs are synchronizing entries. After the entry synchronization is completed, use the undo vxlan tunnel arp-learning disable command to enable remote ARP learning.

Table of Contents