Page 2
, H3CS, H3CIE, H3CNE, Aolynk, Care, , IRF, NetPilot, Netflow, SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners Notice The information in this document is subject to change without notice.
Page 3
Preface This command reference describes OpenFlow configuration commands. This preface includes the following topics about the documentation: • Audience. • Conventions. • About the H3C S7500E-XS documentation set. • Obtaining documentation. • Technical support. • Documentation feedback. Audience This documentation is intended for: •...
Page 4
GUI conventions Convention Description Window names, button names, field names, and menu items are in Boldface. For Boldface example, the New User window appears; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > > Folder.
Page 5
Description Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN, IPS, or ACG card. About the H3C S7500E-XS documentation set The H3C S7500E-XS documentation set includes the following categories of documents: Category Documents Purposes Product description and Marketing brochures Describes product specifications and benefits.
Page 6
Obtaining documentation Access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com. Click the following links to obtain different categories of product documentation: [Technical Documents]—Provides hardware installation, software upgrading, and software feature configuration and maintenance documentation.
OpenFlow commands active instance Use active instance to activate or reactivate an OpenFlow instance. Use undo active instance to deactivate an OpenFlow instance. Syntax active instance undo active instance Default An OpenFlow instance is not activated. Views OpenFlow instance view Predefined user roles network-admin Usage guidelines...
Predefined user roles network-admin Parameters global: Specifies the global mode. vlan: Specifies the VLAN mode. vlan-id: Specifies the VLAN ID in the range of 1 to 4094. vlan-mask: Specifies a VLAN mask in the range of 0 to 4095. The default value is 4095. loosen: Specifies the loosen mode.
ip ip-address: Specifies the IPv4 address of the controller. ipv6 ipv6-address: Specifies the IPv6 address of the controller. port port-number: Sets the port number used to establish TCP connections to the controller. The value range for the port number is 1 to 65535. The default value is 6633. local address: Specifies the source IP address used to establish TCP connections to the controller.
Default The reconnection interval is 60 seconds. Views OpenFlow instance view Predefined user roles network-admin Parameters interval-value: Sets a reconnection interval in the range of 10 to 120 seconds. Usage guidelines The OpenFlow switch waits until the reconnection interval has expired before it attempts to reconnect to a controller.
controller mode Use controller mode to set the controller mode for an OpenFlow instance. Use undo controller mode to restore the default. Syntax controller mode { multiple | single } undo controller mode Default The controller mode is multiple. Views OpenFlow instance view Predefined user roles network-admin...
Usage guidelines This command takes effect only on OpenFlow connections that the OpenFlow instance establishes with controllers through TCP. By default, an OpenFlow instance backs up OpenFlow connections established over TCP on the subordinate device. This prevents connection interruption when a master/subordinate switchover occurs.
Default The default action of a table-miss flow entry is to drop packets. Views OpenFlow instance view Predefined user roles network-admin Examples # Configure the default action of a table-miss flow entry to forward packets to the normal pipeline. <Sysname> system-view [Sysname] openflow instance 1 [Sysname-of-inst-1] default table-miss permit description...
Page 15
Predefined user roles network-admin network-operator Parameters instance-id: Specifies an OpenFlow instance by its ID in the range of 1 to 4094. controller-id: Specifies a controller by its ID in the range of 0 to 63. If you do not specify a controller ID, this command displays information about all controllers for an OpenFlow instance.
Field Description Type of the connection between the OpenFlow instance and the controller: Connect type TCP or SSL. State of the connection between the OpenFlow instance and the controller: Connect state Idle or Established. Packets sent Number of packets that have been sent to the controller. Packets received Number of packets that have been received from the controller.
Page 18
Instruction information: Set meter: 100 Apply actions: Output interface: XGE1/1/4 Write actions: Output interface: Controller, send length: 128 bytes Table 2 Command output Field Description Table information Information about the flow table. Table type Type of the flow table: MAC-IP or Extensibility. flow entry count Number of flow entries deployed by the controller.
Page 19
Table 3 Match field types Field Mask field Description Input interface Ingress port (see Table Physical input interface Ingress physical port. Metadata Metadata mask Metadata and mask. Ethernet destination Ethernet destination MAC Ethernet destination MAC address and mask. MAC address address mask Ethernet source MAC Ethernet source MAC...
Page 20
Field Mask field Description ICMPv6 code ICMPv6 code. Target IP address in an IPv6 Neighbor IPv6 ND target address Discovery message. IPv6 ND source MAC Source link-layer address in an IPv6 Neighbor address Discovery message. IPv6 ND target MAC Target link-layer address in an IPv6 Neighbor address Discovery message.
Field Description Decrement MPLS TTL Decreases the MPLS TTL by 1. Decrement IP TTL Decreases the IP TTL by 1. Copy TTL inwards Copies the TTL from the outermost header to the second outermost header. Copy TTL outwards Copies the TTL from the second outermost header to the outermost header. Table 5 Ports Port name Ingress port...
Page 22
<Sysname> display openflow instance 100 group Instance 100 group table information: Group count: 2 Group entry 103: Type: All, byte count: 55116, packet count: 401 Bucket 1 information: Action count 1, watch port: any, watch group: any Byte count 55116, packet count 401 Output interface: BAGG100 Bucket 2 information: Action count 1, watch port: any, watch group: any...
Field Description Referenced information Information about the group entry referenced by flow entries. Count Total number of flow entries that reference the group entry. Flow table Flow table to which the flow entries that reference the group entry belong. Flow entry Flow entries that reference the group entry.
Page 24
Qinq Network: Disabled Tcp Nsr: Enabled Port information: Ten-GigabitEthernet1/1/3 Active channel information: Controller 1 IP address: 192.168.49.49 port: 6633 Controller 2 IP address: 192.168.43.49 port: 6633 Instance 200 information: Configuration information: Description : test Active status : Active Inactive configuration: None Active configuration: Classification VLAN, total VLANs(4)
Page 25
TCP DSCP value: 10 Flow table: Table ID(type): 0(MAC-IP) Table ID(type): 1(Extensibility) Flow-entry max-limit: 65535 Datapath ID: 0x0000001234567890 Default table-miss: Permit Forbidden port: VLAN interface Qinq Network: Disabled Tcp Nsr: Enabled Active configuration: None Table 7 Command output Field Description Configuration information Information about the configuration.
Field Description QinQ tagging for double-tagged packets passing an extensibility flow table. Qinq Network This field is not supported in the current software version. Whether OpenFlow connection backup is enabled: • Tcp Nsr Enabled. • Disabled. Port information Ports that have been added to the OpenFlow instance. Active channel information Information about active channels.
Default The connection interruption mode is secure after an OpenFlow instance is activated, and the controller deploys the table-miss flow entry (the action is Drop) to the OpenFlow instance. Views OpenFlow instance view Predefined user roles network-admin Parameters secure: Configures the OpenFlow switch to use flow tables for traffic forwarding after it is disconnected from all controllers.
Use undo flow-table to restore the default. Syntax flow-table { extensibility extensibility-table-id | mac-ip mac-ip-table-id } undo flow-table Default An OpenFlow instance has an extensibility flow table with ID 0. Views OpenFlow instance view Predefined user roles network-admin Parameters extensibility extensibility-table-id: Specifies an extensibility flow table by its ID in the range of 0 to 254.
Parameters vlan-interface: Specifies VLAN interfaces that belong to an OpenFlow instance. vsi-interface: Specifies VSI interfaces that belong to an OpenFlow instance. This keyword does not take effect after it is configured. l3-physical-interface: Specifies Layer 3 Ethernet interfaces that belong to an OpenFlow instance. Examples # Forbid OpenFlow instance 1 to report VLAN interfaces that belong to the OpenFlow instance to controllers.
Syntax mac-ip dynamic-mac aware undo mac-ip dynamic-mac aware Default An OpenFlow instance ignores dynamic MAC address messages sent from controllers. Views OpenFlow instance view Predefined user roles network-admin Usage guidelines This command configures an OpenFlow instance to support querying and deleting dynamic MAC addresses in only MAC-IP flow tables.
openflow instance Use openflow instance to create an OpenFlow instance and enter OpenFlow instance view. Use undo openflow instance to remove an OpenFlow instance. Syntax openflow instance instance-id undo openflow instance instance-id Default No OpenFlow instance exists. Views System view Predefined user roles network-admin Parameters...
protocol-packet filter slow Use protocol-packet filter slow to create a highest-priority flow entry for dropping slow protocol packets. Use undo protocol-packet filter to restore the default. Syntax protocol-packet filter slow undo protocol-packet filter Default An OpenFlow instance does not have a highest-priority flow entry for dropping slow protocol packets. Views OpenFlow instance view Predefined user roles...
tcp dscp Use tcp dscp to set a DSCP value for OpenFlow packets. Use undo tcp dscp to restore the default. Syntax tcp dscp dscp-value undo tcp dscp Default The DSCP value for OpenFlow packets is 10. Views OpenFlow instance view Predefined user roles network-admin Parameters...
Index A C D F I M O P R T fail-open mode,21 flow-entry max-limit,22 active instance,1 flow-table,22 forbidden port,23 classification,1 controller address,2 in-band management vlan,24 controller connect interval,3 controller echo-request interval,4 controller mode,5 mac-ip dynamic-mac aware,24 controller tcp nsr disable,5 mac-learning forbidden,25 datapath-id,6 openflow instance,26...
Need help?
Do you have a question about the S7500E-XS Series and is the answer not in the manual?
Questions and answers