Aruba JH691A Reference guide

Category
Software
Type
Reference guide
HPE FlexFabric 5940 Switch Series
VXLAN Command Reference
Software version: Release 671x and later
Document version: 6W100-20230822
© Copyright 2023 Hewlett Packard Enterprise Development LP
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard
Enterprise products and services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett
Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or
copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s
standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise
website.
Acknowledgments
Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the
United States and other countries.
Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the
United States and/or other countries.
Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.
Java and Oracle are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
i
Contents
VXLAN commands ························································································ 1
Basic VXLAN commands ··································································································································· 1
ac statistics enable ····································································································································· 1
arp suppression enable ······························································································································ 1
arp suppression mode ································································································································ 2
bandwidth (Ethernet service instance view) ······························································································· 3
bandwidth (VSI view) ································································································································· 4
description ·················································································································································· 5
display arp suppression vsi ························································································································ 5
display hardware-resource vxlan ··············································································································· 6
display igmp host group ····························································································································· 8
display ipv6 nd suppression vsi·················································································································· 9
display l2vpn drni arp ······························································································································· 10
display l2vpn drni arp suppression ··········································································································· 12
display l2vpn drni mac-address ················································································································ 13
display l2vpn drni nd ································································································································ 14
display l2vpn drni nd suppression ············································································································ 15
display l2vpn mac-address ······················································································································· 17
display l2vpn mac-address mac-move ································································································· 19
display l2vpn service-instance ················································································································· 20
display l2vpn vsi ······································································································································· 22
display vxlan tunnel ·································································································································· 26
display vxlan tunnel-interface ··················································································································· 27
emulate-ping vxlan ··································································································································· 28
emulate-ping vxlan enable ······················································································································· 30
encapsulation ··········································································································································· 31
flooding disable ········································································································································ 33
group ························································································································································ 34
hardware-resource vxlan ·························································································································· 35
igmp host enable ······································································································································ 36
ipv6 nd suppression enable ····················································································································· 37
ipv6 nd suppression mode ······················································································································· 38
l2vpn enable ············································································································································· 39
l2vpn mac-address software-learning enable ·························································································· 39
l2vpn statistics interval ····························································································································· 40
learning mode disable ······························································································································ 40
mac-address mac-learning priority ··········································································································· 41
mac-address static vsi ······························································································································ 42
mac-based ac ··········································································································································· 43
private-vsi ················································································································································· 44
private-vsi secondary ······························································································································· 45
reserved vxlan ·········································································································································· 46
reset arp suppression vsi ························································································································· 46
reset ipv6 nd suppression vsi ··················································································································· 47
reset l2vpn mac-address ·························································································································· 47
reset l2vpn mac-address mac-move ········································································································ 48
reset l2vpn statistics ac ···························································································································· 48
reset l2vpn statistics vsi ··························································································································· 49
restrain ····················································································································································· 49
rewrite inbound tag ··································································································································· 50
rewrite outbound tag ································································································································ 51
selective-flooding mac-address ················································································································ 52
service-instance ······································································································································· 53
shutdown ·················································································································································· 53
statistics enable (Ethernet service instance view)···················································································· 54
statistics enable (tunnel interface view) ··································································································· 55
statistics enable (VSI view) ······················································································································ 55
ii
tunnel ······················································································································································· 56
tunnel bfd enable······································································································································ 57
tunnel global source-address ··················································································································· 58
tunnel statistics vxlan auto ······················································································································· 59
vsi ····························································································································································· 60
vxlan ························································································································································· 60
vxlan default-decapsulation······················································································································ 61
vxlan invalid-udp-checksum discard ········································································································ 62
vxlan invalid-vlan-tag discard ··················································································································· 62
vxlan local-mac report ······························································································································ 63
vxlan tunnel mac-learning disable ············································································································ 64
vxlan udp-port ·········································································································································· 64
vxlan vlan-based ······································································································································ 65
vxlan vni ··················································································································································· 66
vxlan-over-vxlan enable ··························································································································· 66
xconnect vsi ············································································································································· 67
VXLAN IP gateway commands ························································································································ 69
arp distributed-gateway dynamic-entry synchronize ················································································ 69
arp send-rate ············································································································································ 69
bandwidth ················································································································································· 70
default ······················································································································································ 71
description ················································································································································ 71
display interface vsi-interface ··················································································································· 72
display reserve-vlan-interface global ········································································································ 75
distributed-gateway local ·························································································································· 76
gateway subnet ········································································································································ 76
gateway vsi-interface ······························································································································· 77
interface vsi-interface ······························································································································· 78
ipv6 nd distributed-gateway dynamic-entry synchronize·········································································· 78
mac-address ············································································································································ 79
mtu ··························································································································································· 80
reserve-vlan-interface global ···················································································································· 80
reset counters interface vsi-interface ······································································································· 81
shutdown ·················································································································································· 82
vtep group member local ·························································································································· 82
vtep group member remote ······················································································································ 83
vxlan tunnel arp-learning disable ············································································································· 83
vxlan tunnel nd-learning disable··············································································································· 84
OVSDB commands ·········································································································································· 85
ovsdb server bootstrap ca-certificate ······································································································· 85
ovsdb server enable ································································································································· 86
ovsdb server pki domain ·························································································································· 86
ovsdb server pssl ····································································································································· 87
ovsdb server ptcp ····································································································································· 88
ovsdb server ssl ······································································································································· 89
ovsdb server tcp ······································································································································· 90
vtep access port ······································································································································· 90
vtep acl disable ········································································································································ 91
vtep enable ··············································································································································· 92
vxlan tunnel flooding-proxy ······················································································································ 92
Document conventions and icons ································································ 94
Conventions ····················································································································································· 94
Network topology icons ···································································································································· 95
Support and other resources ······································································· 96
Accessing Hewlett Packard Enterprise Support······························································································· 96
Accessing updates ··········································································································································· 96
Websites ·················································································································································· 97
Customer self repair ································································································································· 97
Remote support ········································································································································ 97
Documentation feedback ························································································································· 97
iii
Index ············································································································ 99
1
VXLAN commands
Basic VXLAN commands
ac statistics enable
Use ac statistics enable to enable packet statistics for Ethernet service instances of a VLAN.
Use undo ac statistics enable to disable packet statistics for Ethernet service instances of
a VLAN.
Syntax
ac statistics enable
undo ac statistics enable
Default
The packet statistics feature is disabled for Ethernet service instances of a VLAN.
Views
VLAN view
Predefined user roles
network-admin
Usage guidelines
This command enables packet statistics for the Ethernet service instances automatically created for
VLAN-based VXLAN assignment.
Before you enable this feature, you must use the vxlan vlan-based command to enable
VLAN-based VXLAN assignment.
Examples
# Map VLAN 10 to VXLAN 100, and enable packet statistics for Ethernet service instances of VLAN
10.
<Sysname> system-view
[Sysname] vxlan vlan-based
[Sysname] vlan 10
[Sysname-vlan10] vxlan vni 100
[Sysname-vlan10] ac statistics enable
Related commands
display l2vpn service-instance
reset l2vpn statistics ac
vxlan vlan-based
arp suppression enable
Use arp suppression enable to enable ARP flood suppression.
Use undo arp suppression enable to disable ARP flood suppression.
2
Syntax
arp suppression enable [ no-broadcast ]
undo arp suppression enable
Default
ARP flood suppression is disabled.
Views
VSI view
Predefined user roles
network-admin
Parameters
no-broadcast: Disables flooding the ARP requests that do not match any ARP flood suppression
entries.
Usage guidelines
ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP
requests on behalf of VMs.
This feature snoops ARP packets to populate the ARP flood suppression table with local and remote
MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf
of the VM. If no match is found and the no-broadcast keyword is not specified, the VTEP floods
the request to both local and remote sites.
Examples
# Enable ARP flood suppression and disable flooding the ARP requests that do not match any ARP
flood suppression entries for VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] arp suppression enable no-broadcast
Related commands
arp suppression mode
display arp suppression vsi
reset arp suppression vsi
arp suppression mode
Use arp suppression mode to set the ARP flood suppression mode.
Use undo arp suppression mode to restore the default.
Syntax
arp suppression mode { proxy-reply | unicast-forward }
[ mismatch-discard ]
undo arp suppression mode
Default
If ARP flood suppression is enabled, the default ARP flood suppression mode is proxy reply. In proxy
reply mode, the device broadcasts the ARP requests that are not targeted at the device and do not
match any ARP flood suppression entries.
3
Views
VSI view
Predefined user roles
network-admin
Parameters
proxy-reply: Specifies proxy reply mode. If an ARP request is not targeted at the device and
matches an ARP flood suppression entry, the device replies to the ARP request on behalf of the
target IP address. The ARP reply carries the following information:
•
Sender IP address—Target IP address in the ARP request.
•
Sender MAC address—MAC address in the matching ARP flood suppression entry.
•
Source MAC address—MAC address in the matching ARP flood suppression entry.
unicast-forward: Specifies unicast forwarding mode. If an ARP request is not targeted at the
device and matches an ARP flood suppression entry, the device acts as follows:
1. Replaces the target MAC address and destination MAC address in the ARP request with the
MAC address in the entry.
2. Unicasts the ARP request.
mismatch-discard: Specifies mismatch discarding mode. In this mode, the device discards an
ARP request that is not targeted at the device and does not match any ARP flood suppression entry.
If you do not specify this keyword, the device will broadcast such an ARP request.
Usage guidelines
The device does not forward ARP requests in proxy reply mode, which decreases system resource
consumption. Unicast forwarding mode reduces the ARP entry learning errors caused by the delay in
refreshing ARP flood suppression entries at the expense of high system resource usage.
Examples
# Enable ARP flood suppression and set its mode to unicast forwarding on VSI vsi1.
<Sysname> system-view
[Sysname] vsi vsi1
[Sysname-vsi-vsi1] arp suppression enable
[Sysname-vsi-vsi1] arp suppression mode unicast-forward
Related commands
arp suppression enable
bandwidth (Ethernet service instance view)
Use bandwidth to set the bandwidth limit for an Ethernet service instance.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth
undo bandwidth
Default
No bandwidth limit is set for an Ethernet service instance.
Views
Ethernet service instance view
4
Predefined user roles
network-admin
Parameters
bandwidth: Specifies a bandwidth limit in kbps. The value range for this argument is 64 to
167772159.
Usage guidelines
The bandwidth limit takes effect only on incoming traffic. An Ethernet service instance drops excess
incoming traffic when its bandwidth limit is reached.
If you use the bandwidth command for both an Ethernet service instance and its mapped VSI, the
Ethernet service instance bandwidth is limited exclusively from the VSI bandwidth. For example, VSI
vsi1 has AC 1, AC 2, AC 3, and Tunnel 1. The bandwidth limit of VSI vsi1 is 500 kbps, and the
bandwidth limit of AC 1 is 120 kbps. The total bandwidth of AC 2, AC 3, and Tunnel 1 is limited to 500
kbps.
Examples
# Set the bandwidth limit to 10240 kbps for Ethernet service instance 200.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] service-instance 200
[Sysname-Ten-GigabitEthernet1/0/1-srv200] encapsulation s-vid 200
[Sysname-Ten-GigabitEthernet1/0/1-srv200] bandwidth 10240
Related commands
bandwidth (VSI view)
bandwidth (VSI view)
Use bandwidth to set the bandwidth limit for a VSI.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth
undo bandwidth
Default
No bandwidth limit is set for a VSI.
Views
VSI view
Predefined user roles
network-admin
Parameters
bandwidth: Specifies a bandwidth limit in kbps. The value range for this argument is 64 to
167772159.
Usage guidelines
This command limits the total bandwidth of the incoming traffic on all ACs and VXLAN tunnels
mapped to a VSI. A VSI drops excess incoming traffic when its bandwidth limit is reached.
5
If you use the bandwidth command for both an Ethernet service instance and its mapped VSI, the
Ethernet service instance bandwidth is limited exclusively from the VSI bandwidth. For example, VSI
vsi1 has AC 1, AC 2, AC 3, and Tunnel 1. The bandwidth limit of VSI vsi1 is 500 kbps, and the
bandwidth limit of AC 1 is 120 kbps. The total bandwidth of AC 2, AC 3, and Tunnel 1 is limited to 500
kbps.
If you use both the restrain and bandwidth commands on a VSI, the bandwidth command
limits only the bandwidth of the traffic not restrained by the restrain command.
Examples
# Set the bandwidth limit to 10240 kbps for VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] bandwidth 10240
Related commands
bandwidth (Ethernet service instance view)
display l2vpn vsi
description
Use description to configure a description for a VSI.
Use undo description to restore the default.
Syntax
description text
undo description
Default
A VSI does not have a description.
Views
VSI view
Predefined user roles
network-admin
Parameters
text: Specifies a description, a case-sensitive string of 1 to 80 characters.
Examples
# Configure a description for VSI vpn1.
<Sysname> system-view
[Sysname] vsi vpn1
[Sysname-vsi-vpn1] description vsi for vpn1
Related commands
display l2vpn vsi
display arp suppression vsi
Use display arp suppression vsi to display ARP flood suppression entries.
6
Syntax
display arp suppression vsi [ name vsi-name ] [ slot slot-number ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you
do not specify a VSI, this command displays entries for all VSIs.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a
member device, this command displays entries on the master device.
count: Displays the number of ARP flood suppression entries that match the command.
Examples
# Display ARP flood suppression entries.
<Sysname> display arp suppression vsi
IP address MAC address VSI name Link ID Aging(min)
1.1.1.2 000f-e201-0101 vsi1 0x70000 14
1.1.1.3 000f-e201-0202 vsi1 0x80000 18
1.1.1.4 000f-e201-0203 vsi2 0x90000 10
# Display the number of ARP flood suppression entries.
<Sysname> display arp suppression vsi count
Total entries: 3
Table 1 Command output
Field
Description
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging(min) Remaining lifetime (in minutes) of the ARP flood suppression entry. When
the timer expires, the entry is deleted.
Related commands
arp suppression enable
reset arp suppression vsi
display hardware-resource vxlan
Use display hardware-resource vxlan to display the VXLAN hardware resource mode.
Syntax
display hardware-resource [ vxlan ]
Views
Any view
Predefined user roles
network-admin
7
network-operator
Parameters
vxlan: Specifies the VXLAN hardware resource mode. If you do not specify this keyword, the
command displays all hardware resource modes.
Examples
# Display the VXLAN hardware resource mode.
<Sysname> display hardware-resource vxlan
Vxlan resource(vxlan), all supported modes:
l2gw L2 gateway--underlay/overlay 48K/0K
l3gw8k L3 gateway--underlay/overlay 40K/8K
l3gw16k L3 gateway--underlay/overlay 32K/16K
l3gw24k L3 gateway--underlay/overlay 24K/24K
l3gw32k L3 gateway--underlay/overlay 16K/32K
l3gw40k L3 gateway--underlay/overlay 8K/40K
border8k Border--underlay/overlay 40K/8K
border16k Border--underlay/overlay 32K/16K
border24k Border--underlay/overlay 24K/24K
border32k Border--underlay/overlay 16K/32K
border40k Border--underlay/overlay 8K/40K
-----------------------------------------------
Default Current Next
l2gw l3gw24k l3gw24k
Table 2 Command output
Field
Description
Vxlan resource(vxlan), all
supported modes
VXLAN hardware resource modes supported by the device.
• l2gw—Layer 2 gateway mode.
• l3gw8k—Layer 3 gateway mode that supports 8 K of overlay adjacency
table.
• l3gw16k—Layer 3 gateway mode that supports 16 K of overlay
adjacency table.
• l3gw24k—Layer 3 gateway mode that supports 24 K of overlay
adjacency table.
• l3gw32k—Layer 3 gateway mode that supports 32 K of overlay
adjacency table.
• l3gw40k—Layer 3 gateway mode that supports 40 K of overlay
adjacency table.
• border8k—Border mode that supports 8 K of overlay adjacency table.
• border16k—Border mode that supports 16 K of overlay adjacency table.
• border24k—Border mode that supports 24 K of overlay adjacency table.
• border32k—Border mode that supports 32 K of overlay adjacency table.
• border40k—Border mode that supports 40 K of overlay adjacency table.
Default The default VXLAN hardware resource mode.
Current The current VXLAN hardware resource mode.
Next The VXLAN hardware resource mode for the next startup.
8
Related commands
hardware-resource vxlan
display igmp host group
Use display igmp host group to display information about the multicast groups that contain
IGMP host-enabled interfaces.
Syntax
display igmp [ vpn-instance vpn-instance-name ] host group [ group-address
| interface interface-type interface-number ] [ verbose ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a
case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command
displays information about the multicast groups that contain IGMP host-enabled interfaces for the
public network.
group-address: Specifies a multicast group address in the range of 224.0.1.0 to
239.255.255.255. If you do not specify a multicast group, this command displays information about
all multicast groups.
interface interface-type interface-number: Specifies an interface by its type and
number. If you do not specify an interface, this command displays multicast group information for all
interfaces.
verbose: Displays detailed multicast group information. If you do not specify this keyword, the
command displays brief multicast group information.
Usage guidelines
For the VXLAN multicast source interface of a multicast-mode VXLAN to join its VXLAN multicast
group, enable the IGMP host feature on the interface. The VXLAN multicast source interface
provides the source IP address for multicast VXLAN packets.
Use this command to verify the following information:
•
Multicast group information for VXLANs.
•
Group membership status of VXLAN multicast source interfaces.
Examples
# Display brief information about all multicast groups that contain IGMP host-enabled interfaces.
<Sysname> display igmp host group
IGMP host groups in total: 2
Vlan-interface10(1.1.1.20):
IGMP host groups in total: 2
Group address Member state Expires
225.1.1.1 Idle Off
225.1.1.2 Idle Off
# Display detailed information about all multicast groups that contain IGMP host-enabled interfaces.
9
<Sysname> display igmp host group verbose
Vlan-interface10(1.1.1.20):
IGMP host groups in total: 2
Group: 225.1.1.1
Group mode: Exclude
Member state: Idle
Expires: Off
Source list (sources in total: 0):
Group: 225.1.1.2
Group mode: Exclude
Member state: Idle
Expires: Off
Source list (sources in total: 0):
Table 3 Command output
Field
Description
IGMP host groups in total Total number of multicast groups that contain IGMP host-enabled interfaces.
Vlan-interface10(1.1.1.20) Name and IP address of the IGMP host-enabled interface.
IGMP host groups in total Total number of multicast groups on the interface.
Group address/Group Address of the multicast group.
Member state
Member state:
• Delay—The interface has joined the multicast group, and it has started
the delay timer for sending IGMP reports.
• Idle—The interface has joined the multicast group, but it has not started
the delay timer for sending IGMP reports.
The delay timer is not user configurable.
Expires Remaining delay time for the interface to send an IGMP report.
This field displays Off if the delay timer is disabled.
Group mode Multicast source filtering mode:
• Include.
• Exclude.
Source list Multicast sources of the multicast group.
sources in total Total number of multicast sources.
NOTE:
For more information about the command output, see IGMP in IP Multicast Configuration Guide.
Related commands
igmp host enable
display ipv6 nd suppression vsi
Use display ipv6 nd suppression vsi to display ND flood suppression entries.
Syntax
display ipv6 nd suppression vsi [ name vsi-name ] [ slot slot-number ]
[ count ]
10
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you
do not specify a VSI, this command displays entries for all VSIs.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a
member device, this command displays entries on the master device.
count: Displays the number of ND flood suppression entries that match the command.
Examples
# Display ND flood suppression entries.
<Sysname> display ipv6 nd suppression vsi
IPv6 address MAC address VSI name Link ID Aging (min)
1000::2 000f-e201-0101 vsi1 0x70000 5
1000::3 000f-e201-0202 vsi1 0x80000 5
1000::4 000f-e201-0203 vsi2 0x90000 5
# Display the number of ND flood suppression entries.
<Sysname> display ipv6 nd suppression vsi count
Total entries: 3
Table 4 Command output
Field
Description
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Aging (min) Remaining lifetime (in minutes) of the ND flood suppression entry. When the
timer expires, the entry is deleted.
Related commands
ipv6 nd suppression enable
reset ipv6 nd suppression vsi
display l2vpn drni arp
Use display l2vpn drni arp to display L2VPN ARP entries on a DR member device.
Syntax
display l2vpn drni arp [ local | remote ] [ count | { public-instance |
vpn-instance vpn-instance-name } [ count | ip-address ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
11
Parameters
local: Specifies locally learned L2VPN ARP entries.
remote: Specifies DRNI-synchronized L2VPN ARP entries.
count: Displays the number of L2VPN ARP entries. If you do not specify this keyword, the
command displays detailed information about L2VPN ARP entries.
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a
case-sensitive string of 1 to 31 characters.
ip-address: Specifies an IPv4 address. If you do not specify an IPv4 address, this command
displays all L2VPN ARP entries that match the specified criteria.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both locally learned
and DRNI-synchronized L2VPN ARP entries.
If you do not specify the public-instance keyword or the vpn-instance
vpn-instance-name option, this command displays L2VPN ARP entries for the public instance
and all VPN instances.
Examples
# Display all L2VPN ARP entries on the local DR member device.
<Sysname> display l2vpn drni arp
Flags: D – Dynamic L - Local R – Remote S – Static I - Invalid
G - Gateway V - DRNI Virtual
VPN instance: vpn1 Interface: Vsi-interface1
IP address MAC address VSI index Link ID Flags
10.1.1.1 0003-0003-0003 0 0x1 DL
10.1.1.11 0001-0001-0001 0 0x1 DL
10.1.1.12 0001-0001-0011 0 0x2 DR
10.1.1.13 0001-0001-0021 0 0x2 DR
10.1.1.101 0001-0011-0101 0 0x1 SL
10.1.1.102 0001-0011-0102 0 0x1 SL
Public instance Interface: Vsi-interface2
IP address MAC address VSI index Link ID Flags
11.1.1.1 0033-0033-0033 0 0x1 DL
11.1.1.11 0011-0011-0011 0 0x1 DL
# Display the total number of L2VPN ARP entries on the local DR member device.
<Sysname> display l2vpn drni arp count
Total number of entries: 8
Table 5 Command output
Description
Interface VSI interface.
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
12
Description
Flags
ARP entry type:
• D—The entry is a valid dynamically learned entry.
• L—The entry is a valid local entry.
• R—The entry is a valid DRNI-synchronized entry.
• S—The entry is a valid static entry.
• I—The entry is invalid. Possible reasons:
ï‚¡ The VSI has been administratively shut down by using the
shutdown command.
ï‚¡ The outgoing tunnel interface does not exist.
• G—The entry is for a gateway.
• V—The entry is for the DRNI virtual IPv4 address of a gateway
interface.
display l2vpn drni arp suppression
Use display l2vpn drni arp suppression to display L2VPN ARP flood suppression entries
on a DR member device.
Syntax
display l2vpn drni arp suppression [ local | remote ] [ count | vsi vsi-name
[ count | ip-address ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies L2VPN ARP flood suppression entries that are learned locally.
remote: Specifies L2VPN ARP flood suppression entries that are synchronized by DRNI.
count: Displays the number of L2VPN ARP flood suppression entries. If you do not specify this
keyword, the command displays detailed information about L2VPN ARP flood suppression entries.
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not
specify a VSI, this command displays L2VPN ARP flood suppression entries for all VSIs.
ip-address: Specifies an IPv4 address. If you do not specify an IPv4 address, this command
displays all L2VPN ARP flood suppression entries that match the specified criteria.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both locally learned
and DRNI-synchronized L2VPN ARP flood suppression entries.
Examples
# Display all L2VPN ARP flood suppression entries on the local DR member device.
<Sysname> display l2vpn drni arp suppression
Flags: D - Dynamic L – Local R – Remote S - Static I – Invalid
VSI name: vpna
IP address MAC address Link ID Flags
13
10.1.1.12 0002-0002-0002 0x1 DL
10.1.1.13 0002-0002-0002 0x2 RI
10.1.1.101 0001-0011-0101 0x2 SR
# Display the total number of L2VPN ARP flood suppression entries on the local DR member device.
<Sysname> display l2vpn drni arp suppression count
Total number of entries: 3
Table 6 Command output
Description
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Flags
ARP flood suppression entry type:
• D—The entry is a valid dynamically learned entry.
• L—The entry is a valid local entry.
• R—The entry is a valid DRNI-synchronized entry.
• S—The entry is a valid static entry.
• I—The entry is invalid. Possible reasons:
ï‚¡ The VSI has been administratively shut down by using the
shutdown command.
ï‚¡ The outgoing tunnel interface does not exist.
display l2vpn drni mac-address
Use display l2vpn drni mac-address to display L2VPN MAC address entries on a DR
member device.
Syntax
display l2vpn drni mac-address [ local | remote ] [ count | vsi vsi-name
[ count | mac-address ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies L2VPN MAC address entries that are learned locally.
remote: Specifies L2VPN MAC address entries that are synchronized by DRNI.
count: Displays the number of L2VPN MAC address entries. If you do not specify this keyword, the
command displays detailed information about L2VPN MAC address entries.
vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not
specify a VSI, this command displays L2VPN MAC address entries for all VSIs.
mac-address: Specifies a MAC address. The MAC address is in the format of H-H-H. You can omit
the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for
000f-00e2-0001. If you do not specify a MAC address, this command displays all L2VPN MAC
address entries that match the specified criteria.
14
Usage guidelines
If you do not specify the local or remote keyword, this command displays both locally learned
and DRNI-synchronized L2VPN MAC address entries.
Examples
# Display all L2VPN MAC address entries on the local DR member device.
<Sysname> display l2vpn drni mac-address
Flags: D – Dynamic L - Local R – Remote S – Static A - MAC-authentication
VSI name: bbb
MAC address Link ID Interface Flags
0000-0000-000a 0x1 BAGG10 DL
0000-0000-0009 0x1 Tunnel1 DL
# Display the total number of L2VPN MAC address entries on the local DR member device.
<Sysname> display l2vpn drni mac-address count
Total number of entries: 2
Table 7 Command output
Field
Description
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
Interface Outgoing interface.
Flags
MAC address entry type:
• D—The entry is a valid dynamically learned entry.
• L—The entry is a valid local entry.
• R—The entry is a valid DRNI-synchronized entry.
• S—The entry is a valid static entry.
•
A
—The entry is learned by MAC authentication.
display l2vpn drni nd
Use display l2vpn drni nd to display L2VPN ND entries on a DR member device.
Syntax
display l2vpn drni nd [ local | remote ] [ count | { public-instance |
vpn-instance vpn-instance-name } [ ipv6-address | count ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
local: Specifies locally learned L2VPN ND entries.
remote: Specifies DRNI-synchronized L2VPN ND entries.
count: Displays the number of L2VPN ND entries. If you do not specify this keyword, the command
displays detailed information about L2VPN ND entries.
15
public-instance: Specifies the public instance.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a
case-sensitive string of 1 to 31 characters.
ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command
displays all L2VPN ND entries that match the specified criteria.
Usage guidelines
If you do not specify the local or remote keyword, this command displays both locally learned
and DRNI-synchronized L2VPN ND entries.
If you do not specify the public-instance keyword or the vpn-instance
vpn-instance-name option, this command displays L2VPN ND entries for the public instance
and all VPN instances.
Examples
# Display all L2VPN ND entries on the local DR member device.
<Sysname> display l2vpn drni nd
Flags: D - Dynamic L – Local R – Remote S - Static I - Invalid
G - Gateway V - DRNI Virtual
VPN instance: vpna Interface: Vsi-interface1
IPv6 address : 20::2
MAC address : 0001-0001-0001 Flags : DL
VSI index : 0 Link ID : 0x1
# Display the total number of L2VPN ND entries on the local DR member device.
<Sysname> display l2vpn drni nd count
Total number of entries: 1
Table 8 Command output
Description
Interface VSI interface.
Flags
ND entry type:
• D—The entry is a valid dynamically learned entry.
• L—The entry is a valid local entry.
• R—The entry is a valid DRNI-synchronized entry.
• S—The entry is a valid static entry.
• I—The entry is invalid. Possible reasons:
ï‚¡ The VSI has been administratively shut down by using the
shutdown command.
ï‚¡ The outgoing tunnel interface does not exist.
• G—The entry is for a gateway.
• V—The entry is for the DRNI virtual IPv6 address of a gateway
interface.
Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.
display l2vpn drni nd suppression
Use display l2vpn drni nd suppression to display L2VPN ND flood suppression entries on
a DR member device.
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105

Aruba JH691A Reference guide

Category
Software
Type
Reference guide

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI