H3C S6800 Series Command Reference Manual

Brand: H3C

Model: S6800 Series

Type: Command Reference Manual

H3C S6800 Switch Series

VXLAN Command Reference

Hangzhou H3C Technologies Co., Ltd.

http://www.h3c.com

Software version: Release 24xx

Document version: 6W102-20151130

No part of this manual may be reproduced or transmitted in any form or by any means without prior written

consent of Hangzhou H3C Technologies Co., Ltd.

Trademarks

H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H

Care, , IRF, NetPilot, Netflow, SecEngine,

SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of Hangzhou H3C

Technologies Co., Ltd.

All other trademarks that may be mentioned in this manual are the property of their respective owners

Notice

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface

This command reference describes VXLAN configuration commands.

This preface includes the following topics about the documentation:

• Audience.

• Conventions.

• About the H3C S6800 documentation set.

• Obtaining documentation.

• Technical support.

• Documentation feedback.

Audience

This documentation is intended for:

• Network planners.

• Field technical support and servicing engineers.

• Network administrators working with the S6800 switch series.

Conventions

This section describes the conventions used in the documentation.

Port numbering in examples

The port numbers in the documentation are for illustration only and might be unavailable on your

device.

Command conventions

Convention Description

Boldface Bold

text represents commands and keywords that you enter literally as shown.

Italic

Italic text represents arguments that you replace with actual values.

[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.

{ x | y | ... }

Braces enclose a set of required syntax choices separated by vertical bars, from which

you select one.

[ x | y | ... ]

Square brackets enclose a set of optional syntax choices separated by vertical bars,

from which you select one or none.

{ x | y | ... } *

Asterisk marked braces enclose a set of required syntax choices separated by vertical

bars, from which you select at least one.

[ x | y | ... ] *

Asterisk marked square brackets enclose optional syntax choices separated by vertical

bars, from which you select one choice, multiple choices, or none.

&<1-n>

The argument or keyword and argument combination before the ampersand (&) sign

can be entered 1 to n times.

# A line that starts with a pound (#) sign is comments.

GUI conventions

Convention Description

Boldface

Window names, button names, field names, and menu items are in Boldface. For

example, the

New User

window appears; click

Multi-level menus are separated by angle brackets. For example,

File

Create

Folder

Symbols

Convention Description

WARNING!

An alert that calls attention to important information that if not understood or followed

can result in personal injury.

CAUTION:

An alert that calls attention to important information that if not understood or followed

can result in data loss, data corruption, or damage to hardware or software.

IMPORTANT:

An alert that calls attention to essential information.

NOTE:

An alert that contains additional or supplementary information.

TIP:

An alert that provides helpful information.

Network topology icons

Convention Description

Represents a generic network device, such as a router, switch, or firewall.

Represents a routing-capable device, such as a router or Layer 3 switch.

Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that

supports Layer 2 forwarding and other Layer 2 features.

Represents an access controller, a unified wired-WLAN module, or the access

controller engine on a unified wired-WLAN switch.

Represents an access point.

Wireless terminator unit.

Wireless terminator.

Represents a mesh access point.

Represents omnidirectional signals.

Represents directional signals.

Represents a security product, such as a firewall, UTM, multiservice security

gateway, or load balancing device.



Convention Description

Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN,

IPS, or ACG card.

About the H3C S6800 documentation set

The H3C S6800 documentation set includes the following categories of documents:

Category Documents Purposes

Hardware

specifications and

installation

Compliance and safety

manual

CE DOC

Provides regulatory information and the safety

instructions that must be followed during

installation.

Installation quick start Provides basic installation instructions.

Installation guide

Provides a complete guide to hardware

installation and hardware specifications.

Fan assemblies installation

manual

Describes the appearance, specifications, and

installation and removal of hot-swappable fan

assemblies.

Power modules user manual

Describes the appearance, specifications, and

installation and removal of hot-swappable power

modules.

Pluggable transceiver

modules installation guide

Guides you through installing SFP/SFP+/QSFP+

transceiver modules.

Pluggable modules manual

Describes the hot-swappable modules available

for the H3C switches, their external views, and

specifications.

Software

configuration

Configuration guides

Describe software features and configuration

procedures.

Command references

Provide a quick reference to all available

commands.

Operations and

maintenance

MIB Companion Describes the MIBs for the software release.

Release notes

Provide information about the product release,

including the version history, hardware and

software compatibility matrix, version upgrade

information, technical support information, and

software upgrading.

Obtaining documentation

Access the most up-to-date H3C product documentation on the World Wide Web at

http://www.h3c.com

Click the following links to obtain different categories of product documentation:

[Technical Documents]

—Provides hardware installation, software upgrading, and software feature

configuration and maintenance documentation.

[Products & Solutions]

—Provides information about products and technologies, as well as solutions.

[Software Download]

—Provides the documentation released with the software version.

Technical support

service@h3c.com

http://www.h3c.com

Documentation feedback

You can e-mail your comments about product documentation to info@h3c.com.

We appreciate your comments.

Contents

VXLAN commands ·························································································· 1

Basic VXLAN commands ··································································································································· 1

arp suppression enable ······························································································································ 1

description ·················································································································································· 1

display arp suppression vsi ························································································································ 2

display igmp host group ····························································································································· 3

display l2vpn mac-address ························································································································· 4

display l2vpn service-instance ··················································································································· 6

display l2vpn vsi ········································································································································· 8

display vxlan tunnel ·································································································································· 10

encapsulation ··········································································································································· 12

flooding disable ········································································································································ 13

group ························································································································································ 14

igmp host enable ······································································································································ 15

l2vpn enable ············································································································································· 16

mac-address static ··································································································································· 16

reserved vxlan ·········································································································································· 17

reset arp suppression vsi ························································································································· 18

reset l2vpn mac-address ·························································································································· 18

selective-flooding mac-address ················································································································ 19

service-instance ······································································································································· 19

shutdown ·················································································································································· 20

tunnel ······················································································································································· 20

tunnel bfd enable ······································································································································ 21

tunnel global source-address ··················································································································· 22

vsi ····························································································································································· 23

vtep group member remote ······················································································································ 24

vxlan ························································································································································· 24

vxlan invalid-udp-checksum discard ········································································································ 25

vxlan invalid-vlan-tag discard ··················································································································· 25

vxlan local-mac report ······························································································································ 26

vxlan tunnel mac-learning disable ············································································································ 27

vxlan udp-port ·········································································································································· 27

xconnect vsi ············································································································································· 28

OVSDB commands ·········································································································································· 29

ovsdb server ca-certificate ······················································································································· 29

ovsdb server certificate ···························································································································· 30

ovsdb server enable ································································································································· 30

ovsdb server private-key ·························································································································· 31

ovsdb server pssl ····································································································································· 32

ovsdb server ptcp ····································································································································· 32

ovsdb server ssl ······································································································································· 33

ovsdb server tcp ······································································································································· 33

vtep access port ······································································································································· 34

vtep enable ··············································································································································· 35

vxlan tunnel service node ························································································································· 35

Index ············································································································· 37

VXLAN commands

For Release 2416, VXLAN requires a license. For Release 2418P01 and later versions, VXLAN

does not require a license. For information about feature licensing, see Fundamentals Configuration

Guide.

Basic VXLAN commands

arp suppression enable

Use arp suppression enable to enable ARP flood suppression.

Use undo arp suppression enable to restore the default.

Syntax

arp suppression enable

undo arp suppression enable

Default

ARP flood suppression is disabled.

Views

VSI view

Predefined user roles

network-admin

Usage guidelines

ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP

requests on behalf of VMs.

This feature snoops ARP packets to populate the ARP flood suppression table for local and remote

MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf

of the VM. If no match is found, the VTEP floods the request to both local and remote sites.

Examples

# Enable ARP flood suppression for the VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] arp suppression enable

Related commands

• display arp suppression vsi

• reset arp suppression vsi

description

Use description to configure a description for a VSI.

Use undo description to delete the description of a VSI.

Syntax

description text

undo description

Default

A VSI does not have a description.

Views

VSI view

Predefined user roles

network-admin

Parameters

text: Specifies the VSI description, a case-sensitive string of 1 to 80 characters.

Examples

# Configure a description for the VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] description vsi for vpn1

Related commands

display l2vpn vsi

display arp suppression vsi

Use display arp suppression vsi to display ARP flood suppression entries.

Syntax

display arp suppression vsi [ name vsi-name ] [ slot slot-number ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name vsi-name: Specifies a VSI by its name. If you do not specify a VSI, this command displays

entries for all VSIs.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member

device, this command displays entries on the master device.

count: Displays the number of ARP flood suppression entries that match the command.

Examples

# Display the ARP flood suppression entries on the master device.

<Sysname> display arp suppression vsi

IP address MAC address Vsi Name Link ID Aging

1.1.1.2 000f-e201-0101 vsi1 0x5000003 14

1.1.1.3 000f-e201-0202 vsi1 0x5000004 18

1.1.1.4 000f-e201-0203 vsi2 0x5000005 10

# Display the number of ARP flood suppression entries on the master device.

<Sysname> display arp suppression vsi count

Total entries: 3

Table 1 Command output

Field Description

Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

Aging

Remaining lifetime (in minutes) of the ARP flood suppression entry. When

the timer expires, the entry is deleted.

Related commands

• arp suppression enable

• reset arp suppression vsi

display igmp host group

Use display igmp host group to display information about the multicast groups that contain IGMP

host-enabled interfaces.

Syntax

display igmp host group [ group-address | interface interface-type interface-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

group-address: Specifies a multicast group address. The value range is 224.0.1.0 to

239.255.255.255. If you do not specify a multicast group, the command displays information about

all multicast groups.

interface interface-type interface-number: Specifies an interface by its type and number. If you do

not specify an interface, the command displays multicast group information for all interfaces.

verbose: Displays detailed multicast group information. If you do not specify this keyword, the

command displays brief multicast group information.

Usage guidelines

For the VXLAN multicast source interface of a multicast-mode VXLAN to join its VXLAN multicast

group, you must enable the IGMP host function.

Use this command to verify the following information:

• Multicast group information for VXLANs.

• Group membership status of VXLAN multicast source interfaces.

Examples

# Display brief information about all multicast groups that contain IGMP host-enabled interfaces.

<Sysname> display igmp host group

IGMP host groups in total: 2

Vlan-interface10(1.1.1.20):

IGMP host groups in total: 2

Group address Member state Expires

225.1.1.1 Idle Off

225.1.1.2 Idle Off

# Display detailed information about all multicast groups that contain IGMP host-enabled interfaces.

<Sysname> display igmp host group verbose

Vlan-interface10(1.1.1.20):

IGMP host groups in total: 2

Group: 225.1.1.1

Group mode: Exclude

Member state: Idle

Expires: Off

Source list (sources in total: 0):

Group: 225.1.1.2

Group mode: Exclude

Member state: Idle

Expires: Off

Source list (sources in total: 0):

Table 2 Command output

Field Description

IGMP host groups in total

Total number of multicast groups that contain IGMP host-enabled

interfaces.

Vlan-interface10(1.1.1.20) Name and IP address of the IGMP host-enabled interface.

IGMP host groups in total Total number of multicast groups on the interface.

Group address/Group Address of the multicast group.

Member state

Member state:

• Delay—The interface has joined the multicast group, and it has started

the delay timer for sending IGMP reports.

• Idle—The interface has joined the multicast group, but it has not

started the delay timer for sending IGMP reports.

The delay timer is not user configurable.

Expires

Remaining delay time for the interface to send an IGMP report.

This field displays

Off

if the delay timer is disabled.

Group mode

Multicast source filtering mode:

• Include.

• Exclude.

Source list Multicast sources of the multicast group.

sources in total Total number of multicast sources.

NOTE:

For more information about the command output, see IGMP in IP Multicast Configuration Guide.

Related commands

igmp host enable

display l2vpn mac-address

Use display l2vpn mac-address to display MAC address entries for VSIs.

Syntax

display l2vpn mac-address [ vsi vsi-name ] [ dynamic ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not

specify a VSI, the command displays MAC address entries for all VSIs.

dynamic: Specifies dynamic MAC address entries learned in the data plane. If you do not specify

this keyword, the command displays all MAC address entries. The MAC address entries include

dynamic remote- and local-MAC entries, remote-MAC entries issued through OpenFlow, and

manually added static remote-MAC entries. VXLAN does not support static local-MAC entries.

count: Displays the number of MAC address entries. If you do not specify this keyword, the

command displays detailed information about MAC address entries.

Examples

# Display MAC address entries for all VSIs.

<Sysname> display l2vpn mac-address

MAC Address State VSI Name Link ID/Name Aging

0000-0000-000a Dynamic vpn1 1 Aging

0000-0000-000b Static vpn1 Tunnel10 NotAging

0000-0000-000c Dynamic vpn1 Tunnel60 Aging

0000-0000-000d Dynamic vpn1 Tunnel99 Aging

--- 4 mac address(es) found ---

# Display the total number of MAC address entries in all VSIs.

<Sysname> display l2vpn mac-address count

4 mac address(es) found

Table 3 Command output

Field Description

State

Entry state.

For Release 2416:

• dynamic—Local- or remote-MAC entry dynamically learned in the data

plane.

• static—Manually added remote-MAC entry.

For Release 2418P01 and later versions:

• Dynamic—Local- or remote-MAC entry dynamically learned in the data

plane.

• Static—Manually added remote-MAC entry.

• OpenFlow—Remote-MAC entry issued by a remote controller through

OpenFlow.

Link ID/Name

For a local MAC address, this field displays the AC's link ID on the VSI.

For a remote MAC address, this field displays the tunnel name.

Field Description

Aging

Entry aging state:

• Aging.

• NotAging.

Related commands

reset l2vpn mac-address

display l2vpn service-instance

Use display l2vpn service-instance to display information about Ethernet service instances.

Syntax

display l2vpn service-instance [ interface interface-type interface-number [ service-instance

instance-id ] ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies a Layer 2 Ethernet interface or Layer 2

aggregate interface by its interface type and number. If you do not specify an interface, the command

displays Ethernet service instance information for all Layer 2 Ethernet interfaces and Layer 2

aggregate interfaces.

service-instance instance-id: Specifies an Ethernet service instance by its ID, in the range of 1 to

4096. If you do not specify an Ethernet service instance, the command displays information about all

Ethernet service instances on the specified interface.

verbose: Displays detailed information about Ethernet service instances. If you do not specify this

keyword, the command displays brief information about Ethernet service instances.

Examples

# Display brief information about all Ethernet service instances.

<Sysname> display l2vpn service-instance

Total number of service-instances: 4, 4 up, 0 down

Total number of ACs: 4, 4 up, 0 down

Interface SrvID Owner LinkID State Type

FGE1/0/3 1 vsi10 1 Up VSI

FGE1/0/3 2 vsi11 1 Up VSI

FGE1/0/3 3 vsi12 1 Up VSI

FGE1/0/3 4 vsi13 1 Up VSI

Table 4 Command output

Field Description

Total number of ACs

Total number of attachment circuits (ACs) and the number of ACs in each state

(up or down).

Field Description

Interface Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.

SrvID Ethernet service instance ID.

Owner

VSI name. This field is empty if an Ethernet service instance is not mapped to

any VSI.

LinkID Ethernet service instance's link ID on the VSI.

State

Ethernet service instance state:

• Up.

• Down.

Type

L2VPN type of the Ethernet service instance:

• VSI.

• VPWS.

# Display detailed information about all Ethernet service instances on FortyGigE 1/0/3.

<Sysname> display l2vpn service-instance interface fortygige 1/0/3 verbose

Interface: FGE1/0/3

Service Instance: 1

Encapsulation : s-vid 16

VSI Name : vsi10

Link ID : 1

State : Up

Statistics : Enabled

Input Statistics:

Octets :0

Packets :0

Output Statistics:

Octets :0

Packets :0

Service Instance: 2

Encapsulation : s-vid 1001

only-tagged

VSI Name : vsi11

Link ID : 1

State : Up

Statistics : Enabled

Input Statistics:

Octets :0

Packets :0

Output Statistics:

Octets :0

Packets :0

Service Instance: 3

Encapsulation : s-vid 2000

c-vid 1016

VSI Name : vsi12

Link ID : 1

State : Up

Statistics : Enabled

Input Statistics:

Octets :0

Packets :0

Output Statistics:

Octets :0

Packets :0

Table 5 Command output

Field Description

Interface Name of a Layer 2 Ethernet interface or Layer 2 aggregate interface.

Service Instance Ethernet service instance ID.

Encapsulation

Frame match criterion of the Ethernet service instance. If the Ethernet service

instance does not contain a frame match criterion, the command does not display

this field.

Link ID Ethernet service instance's link ID on the VSI.

State

Ethernet service instance state:

• Up.

• Down.

Statistics

Packet statistics state:

• Enabled—Packet statistics is enabled for the Ethernet service instance.

• Disabled—Packet statistics is disabled for the Ethernet service instance.

Input Statistics

Incoming traffic statistics:

• Octets—Number of incoming bytes.

• Packets—Number of incoming packets.

Output Statistics

Outgoing traffic statistics:

• Octets—Number of outgoing bytes.

• Packets—Number of outgoing packets.

Related commands

• service-instance

• statistics enable (MPLS Command Reference)

• reset l2vpn statistics ac (MPLS Command Reference)

display l2vpn vsi

Use display l2vpn vsi to display information about VSIs.

Syntax

display l2vpn vsi [ name vsi-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you do

not specify a VSI, the command displays information about all VSIs.

verbose: Displays detailed information about VSIs. If you do not specify this keyword, the command

displays brief information about VSIs.

Examples

# Display brief information about all VSIs.

<Sysname> display l2vpn vsi

Total number of VSIs: 1, 1 up, 0 down, 0 admin down

VSI Name VSI Index MTU State

vpna 0 1500 Up

# Display detailed information about all VSIs.

<Sysname> display l2vpn vsi verbose

VSI Name: vpna

VSI Index : 0

VSI State : Up

MTU : 1500

Bandwidth : -

Broadcast Restrain : -

Multicast Restrain : -

Unknown Unicast Restrain: -

MAC Learning : Enabled

MAC Table Limit : -

Drop Unknown : -

Flooding : Enabled

VXLAN ID : 10

Tunnels:

Tunnel Name Link ID State Type Flooding proxy

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual Disabled

MTunnel0 0x6002710 Up Auto Disabled

ACs:

AC Link ID State

FGE1/0/1 srv1000 0 Up

Table 6 Command output

Field Description

VSI Description

Description of the VSI. If the VSI does not have a description, the command does

not display this field.

VSI State

VSI state:

• Up—The VSI is up. A VSI is up only when its VXLAN has an up VXLAN

tunnel and an up AC.

• Down—The VSI is down.

• Administratively down—The VSI has been manually shut down by using

the shutdown command.

MTU MTU on the VSI.

Field Description

Bandwidth Maximum bandwidth in kbps on the VSI.

Broadcast Restrain Broadcast restraint ratio.

Multicast Restrain Multicast restraint ratio.

Unknown Unicast

Restrain

Unknown unicast restraint ratio.

MAC Learning State of the MAC learning function.

MAC Table Limit Maximum number of MAC address entries on the VSI.

Drop Unknown

Action on source MAC-unknown frames received after the maximum number of

MAC entries is reached.

Hub-Spoke State of the hub-spoke function.

Flooding

State of the VSI's flooding function:

• Enabled—Flooding is enabled on the VSI. The VTEP floods unknown

unicast frames to both local and remote sites.

• Disabled—Flooding is disabled on the VSI. The VTEP floods unknown

unicast frames only to local sites.

Tunnels Information about the VXLAN tunnels assigned to the VXLAN.

Link ID Tunnel's link ID on the VSI.

State

Tunnel state:

• Up—The tunnel is operating correctly.

• Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but

the tunnel is blocked because the primary proxy tunnel is operating correctly.

• Defect—The tunnel interface is up, but the VTEP has not received BFD

control packets from the remote end for 5 seconds. You must check for

physical link or VXLAN tunnel problems. This value is available in Release

2418P01 and later versions.

• Down—The tunnel interface is down.

Type

Tunnel assignment method:

• Auto—The tunnel was automatically assigned to the VXLAN. For a

multicast-mode VXLAN, the tunnel (MTunnel) was automatically created and

assigned to the VXLAN to transmit flood traffic.

• Manual—The tunnel was manually assigned to the VXLAN.

Flooding proxy

Flood proxy state:

• Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast,

and unknown unicast traffic to a flood proxy server through the tunnel. The

flood proxy server replicates and forwards flood traffic to remote VTEPs.

• Disabled—Flood proxy is disabled.

ACs ACs that are bound to the VSI.

Link ID AC's link ID on the VSI.

State

AC state:

• Up.

• Down.

display vxlan tunnel

Use display vxlan tunnel to display VXLAN tunnel information for VXLANs.

Syntax

display vxlan tunnel [ vxlan-id vxlan-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vxlan-id: Specifies a VXLAN ID in the range of 0 to 16777215. If you do not specify a VXLAN, the

command displays VXLAN tunnel information for all VXLANs.

Examples

# Display VXLAN tunnel information for all VXLANs.

<Sysname> display vxlan tunnel

Total number of VXLANs: 1

VXLAN ID: 10, VSI name: vpna, Total tunnels: 4 (4 up, 0 down, 0 defect, 0 blocked)

Tunnel name Link ID State Type Flooding proxy

Tunnel0 0x5000000 Up Auto Disabled

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual/Auto Disabled

MTunnel0 0x6002710 Up Auto Disabled

# Display VXLAN tunnel information for VXLAN 10.

<Sysname> display vxlan tunnel vxlan-id 10

VXLAN ID: 10, VSI name: vpna, Total tunnels: 4 (4 up, 0 down, 0 defect, 0 blocked)

Tunnel name Link ID State Type Flooding proxy

Tunnel0 0x5000000 Up Auto Disabled

Tunnel1 0x5000001 Up Manual Disabled

Tunnel2 0x5000002 Up Manual/Auto Disabled

MTunnel0 0x6002710 Up Auto Disabled

Table 7 Command output

Field Description

Link ID Tunnel's link ID in the VXLAN.

State

Tunnel state:

• Up—The tunnel is operating correctly.

• Blocked—The tunnel is a backup proxy tunnel. Its tunnel interface is up, but the

tunnel is blocked because the primary proxy tunnel is operating correctly.

• Defect—The tunnel interface is up, but the VTEP has not received BFD control

packets from the remote end for 5 seconds. You must check for physical link or

VXLAN tunnel problems. This value is available in Release 2418P01 and later

versions.

• Down—The tunnel interface is down.

Type

Tunnel assignment method:

• Auto—The tunnel was automatically assigned to the VXLAN. For a

multicast-mode VXLAN, the tunnel (MTunnel) was automatically created and

assigned to the VXLAN to transmit flood traffic.

• Manual—The tunnel was manually assigned to the VXLAN.

Field Description

Flooding proxy

Flood proxy state:

• Enabled—Flood proxy is enabled. The VTEP sends broadcast, multicast, and

unknown unicast traffic to a flood proxy server through the tunnel. The flood

proxy server replicates and forwards flood traffic to remote VTEPs.

• Disabled—Flood proxy is disabled.

Related commands

• tunnel

• vxlan

encapsulation

Use encapsulation to configure a frame match criterion for an Ethernet service instance.

Use undo encapsulation to remove a frame match criterion from an Ethernet service instance.

Syntax

Releases 2416, 2418P01, and 2418P05:

encapsulation default

encapsulation { tagged | untagged }

encapsulation s-vid vlan-id [ only-tagged ]

undo encapsulation

Release 2422 and later versions:

encapsulation default

encapsulation { tagged | untagged }

encapsulation s-vid vlan-id [ only-tagged ]

encapsulation s-vid vlan-id c-vid vlan-id

undo encapsulation

Default

An Ethernet service instance does not contain a frame match criterion.

Views

Ethernet service instance view

Predefined user roles

network-admin

Parameters

default: Matches frames that do not match any other Ethernet service instance on the interface.

tagged: Matches any frames that have an 802.1Q VLAN tag.

untagged: Matches any frames that do not have an 802.1Q VLAN tag.

s-vid vlan-id: Matches frames that are tagged with the specified outer 802.1Q VLAN ID. The vlan-id

argument specifies a 802.1Q VLAN ID in the range of 1 to 4094. If the outer 802.1Q VLAN is not the

PVID, the matching result does not differ, whether or not you specify the only-tagged keyword. If the

outer 802.1Q VLAN is the PVID, the matching result depends on whether or not the only-tagged

keyword is specified.

only-tagged: Matches only PVID-tagged frames. To match both untagged frames and PVID-tagged

frames, do not specify this keyword.

s-vid vlan-id c-vid vlan-id: Matches frames that are tagged with the specified outer and inner 802.1Q

VLAN IDs. The vlan-id argument specifies an 802.1Q VLAN ID in the range of 1 to 4094. This option

is available in Release 2422 and later versions.

Usage guidelines

The match criterion in each Ethernet service instance on an interface must be unique. For example,

you cannot configure the encapsulation tagged command in one Ethernet service instance if

another Ethernet service instance already contains this command. You cannot use the

encapsulation s-vid vlan-id command to specify the same 802.1Q VLAN ID for any two Ethernet

service instances on the interface.

For Release 2422 and later versions, the encapsulation s-vid vlan-id [ only-tagged ] and

encapsulation s-vid vlan-id c-vid vlan-id commands can specify the same outer VLAN ID for two

Ethernet service instances on an interface. Frames that match both Ethernet service instances are

assigned to the Ethernet service instance configured by using the encapsulation s-vid vlan-id c-vid

vlan-id command.

An Ethernet service instance can contain only one match criterion. To change the match criterion,

you must remove the original criterion first. When you remove the match criterion in an Ethernet

service instance, the mapping between the service instance and the VSI is removed automatically.

If the Ethernet service instance uses the default, tagged, or untagged frame match criterion, the

access mode set by the xconnect vsi command does not take effect. The VSI uses Ethernet access

mode to process traffic.

An SDN transport network uses a controller to deploy and manage VXLANs on VTEPs. If you

change the matching outer VLAN ID on the VTEP, you must also modify the VLAN ID set by the

Set-Field action on the controller.

Examples

# Configure Ethernet service instance 1 on FortyGigE 1/0/1 to match frames that have an outer

802.1Q VLAN ID of 111.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] service-instance 1

[Sysname-FortyGigE1/0/1-srv1] encapsulation s-vid 111

Related commands

display l2vpn service-instance

flooding disable

Use flooding disable to disable flooding for a VSI.

Use undo flooding disable to restore the default.

Syntax

flooding disable

undo flooding disable

Default

Flooding is enabled for a VSI.

Views

VSI view

Page is loading ...

H3C S6800 Series Command Reference Manual

H3C S6800 Series Command Reference Manual

H3C S6800 Series Command Reference Manual

Related papers

Other documents