HPE FlexFabric 5940 Switch Series VXLAN Reference guide

Brand: HPE

Model: FlexFabric 5940 Switch Series VXLAN

Category: Software

Type: Reference guide

HPE FlexFabric 5940 Switch Series

VXLAN Command Reference

Software version: Release 671x and later

Document version: 6W100-20230822

The information contained herein is subject to change without notice. The only warranties for Hewlett Packard

Enterprise products and services are set forth in the express warranty statements accompanying such

products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett

Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.

Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or

copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software

Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s

standard commercial license.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard

Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise

website.

Acknowledgments

Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the

United States and other countries.

Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the

United States and/or other countries.

Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.

Java and Oracle are registered trademarks of Oracle and/or its affiliates.

UNIX® is a registered trademark of The Open Group.

Contents

VXLAN commands ························································································ 1

Basic VXLAN commands ··································································································································· 1

ac statistics enable ····································································································································· 1

arp suppression enable ······························································································································ 1

arp suppression mode ································································································································ 2

bandwidth (Ethernet service instance view) ······························································································· 3

bandwidth (VSI view) ································································································································· 4

description ·················································································································································· 5

display arp suppression vsi ························································································································ 5

display hardware-resource vxlan ··············································································································· 6

display igmp host group ····························································································································· 8

display ipv6 nd suppression vsi·················································································································· 9

display l2vpn drni arp ······························································································································· 10

display l2vpn drni arp suppression ··········································································································· 12

display l2vpn drni mac-address ················································································································ 13

display l2vpn drni nd ································································································································ 14

display l2vpn drni nd suppression ············································································································ 15

display l2vpn mac-address ······················································································································· 17

display l2vpn mac-address mac-move ································································································· 19

display l2vpn service-instance ················································································································· 20

display l2vpn vsi ······································································································································· 22

display vxlan tunnel ·································································································································· 26

display vxlan tunnel-interface ··················································································································· 27

emulate-ping vxlan ··································································································································· 28

emulate-ping vxlan enable ······················································································································· 30

encapsulation ··········································································································································· 31

flooding disable ········································································································································ 33

group ························································································································································ 34

hardware-resource vxlan ·························································································································· 35

igmp host enable ······································································································································ 36

ipv6 nd suppression enable ····················································································································· 37

ipv6 nd suppression mode ······················································································································· 38

l2vpn enable ············································································································································· 39

l2vpn mac-address software-learning enable ·························································································· 39

l2vpn statistics interval ····························································································································· 40

learning mode disable ······························································································································ 40

mac-address mac-learning priority ··········································································································· 41

mac-address static vsi ······························································································································ 42

mac-based ac ··········································································································································· 43

private-vsi ················································································································································· 44

private-vsi secondary ······························································································································· 45

reserved vxlan ·········································································································································· 46

reset arp suppression vsi ························································································································· 46

reset ipv6 nd suppression vsi ··················································································································· 47

reset l2vpn mac-address ·························································································································· 47

reset l2vpn mac-address mac-move ········································································································ 48

reset l2vpn statistics ac ···························································································································· 48

reset l2vpn statistics vsi ··························································································································· 49

restrain ····················································································································································· 49

rewrite inbound tag ··································································································································· 50

rewrite outbound tag ································································································································ 51

selective-flooding mac-address ················································································································ 52

service-instance ······································································································································· 53

shutdown ·················································································································································· 53

statistics enable (Ethernet service instance view)···················································································· 54

statistics enable (tunnel interface view) ··································································································· 55

statistics enable (VSI view) ······················································································································ 55

tunnel ······················································································································································· 56

tunnel bfd enable······································································································································ 57

tunnel global source-address ··················································································································· 58

tunnel statistics vxlan auto ······················································································································· 59

vsi ····························································································································································· 60

vxlan ························································································································································· 60

vxlan default-decapsulation······················································································································ 61

vxlan invalid-udp-checksum discard ········································································································ 62

vxlan invalid-vlan-tag discard ··················································································································· 62

vxlan local-mac report ······························································································································ 63

vxlan tunnel mac-learning disable ············································································································ 64

vxlan udp-port ·········································································································································· 64

vxlan vlan-based ······································································································································ 65

vxlan vni ··················································································································································· 66

vxlan-over-vxlan enable ··························································································································· 66

xconnect vsi ············································································································································· 67

VXLAN IP gateway commands ························································································································ 69

arp distributed-gateway dynamic-entry synchronize ················································································ 69

arp send-rate ············································································································································ 69

bandwidth ················································································································································· 70

default ······················································································································································ 71

display interface vsi-interface ··················································································································· 72

display reserve-vlan-interface global ········································································································ 75

distributed-gateway local ·························································································································· 76

gateway subnet ········································································································································ 76

gateway vsi-interface ······························································································································· 77

interface vsi-interface ······························································································································· 78

ipv6 nd distributed-gateway dynamic-entry synchronize·········································································· 78

mac-address ············································································································································ 79

mtu ··························································································································································· 80

reserve-vlan-interface global ···················································································································· 80

reset counters interface vsi-interface ······································································································· 81

vtep group member local ·························································································································· 82

vtep group member remote ······················································································································ 83

vxlan tunnel arp-learning disable ············································································································· 83

vxlan tunnel nd-learning disable··············································································································· 84

OVSDB commands ·········································································································································· 85

ovsdb server bootstrap ca-certificate ······································································································· 85

ovsdb server enable ································································································································· 86

ovsdb server pki domain ·························································································································· 86

ovsdb server pssl ····································································································································· 87

ovsdb server ptcp ····································································································································· 88

ovsdb server ssl ······································································································································· 89

ovsdb server tcp ······································································································································· 90

vtep access port ······································································································································· 90

vtep acl disable ········································································································································ 91

vtep enable ··············································································································································· 92

vxlan tunnel flooding-proxy ······················································································································ 92

Document conventions and icons ································································ 94

Conventions ····················································································································································· 94

Network topology icons ···································································································································· 95

Support and other resources ······································································· 96

Accessing Hewlett Packard Enterprise Support······························································································· 96

Accessing updates ··········································································································································· 96

Websites ·················································································································································· 97

Customer self repair ································································································································· 97

Remote support ········································································································································ 97

Documentation feedback ························································································································· 97

iii

Index ············································································································ 99

VXLAN commands

Basic VXLAN commands

ac statistics enable

Use ac statistics enable to enable packet statistics for Ethernet service instances of a VLAN.

Use undo ac statistics enable to disable packet statistics for Ethernet service instances of

a VLAN.

Syntax

ac statistics enable

undo ac statistics enable

Default

The packet statistics feature is disabled for Ethernet service instances of a VLAN.

Views

VLAN view

Predefined user roles

network-admin

Usage guidelines

This command enables packet statistics for the Ethernet service instances automatically created for

VLAN-based VXLAN assignment.

Before you enable this feature, you must use the vxlan vlan-based command to enable

VLAN-based VXLAN assignment.

Examples

# Map VLAN 10 to VXLAN 100, and enable packet statistics for Ethernet service instances of VLAN

10.

<Sysname> system-view

[Sysname] vxlan vlan-based

[Sysname] vlan 10

[Sysname-vlan10] vxlan vni 100

[Sysname-vlan10] ac statistics enable

Related commands

display l2vpn service-instance

reset l2vpn statistics ac

vxlan vlan-based

arp suppression enable

Use arp suppression enable to enable ARP flood suppression.

Use undo arp suppression enable to disable ARP flood suppression.

Syntax

arp suppression enable [ no-broadcast ]

undo arp suppression enable

Default

ARP flood suppression is disabled.

Views

VSI view

Predefined user roles

network-admin

Parameters

no-broadcast: Disables flooding the ARP requests that do not match any ARP flood suppression

entries.

Usage guidelines

ARP flood suppression reduces ARP request broadcasts by enabling the VTEP to reply to ARP

requests on behalf of VMs.

This feature snoops ARP packets to populate the ARP flood suppression table with local and remote

MAC addresses. If an ARP request has a matching entry, the VTEP replies to the request on behalf

of the VM. If no match is found and the no-broadcast keyword is not specified, the VTEP floods

the request to both local and remote sites.

Examples

# Enable ARP flood suppression and disable flooding the ARP requests that do not match any ARP

flood suppression entries for VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] arp suppression enable no-broadcast

Related commands

arp suppression mode

display arp suppression vsi

reset arp suppression vsi

arp suppression mode

Use arp suppression mode to set the ARP flood suppression mode.

Use undo arp suppression mode to restore the default.

Syntax

arp suppression mode { proxy-reply | unicast-forward }

[ mismatch-discard ]

undo arp suppression mode

Default

If ARP flood suppression is enabled, the default ARP flood suppression mode is proxy reply. In proxy

reply mode, the device broadcasts the ARP requests that are not targeted at the device and do not

match any ARP flood suppression entries.

Views

VSI view

Predefined user roles

network-admin

Parameters

proxy-reply: Specifies proxy reply mode. If an ARP request is not targeted at the device and

matches an ARP flood suppression entry, the device replies to the ARP request on behalf of the

target IP address. The ARP reply carries the following information:

•

Sender IP address—Target IP address in the ARP request.

•

Sender MAC address—MAC address in the matching ARP flood suppression entry.

•

Source MAC address—MAC address in the matching ARP flood suppression entry.

unicast-forward: Specifies unicast forwarding mode. If an ARP request is not targeted at the

device and matches an ARP flood suppression entry, the device acts as follows:

1. Replaces the target MAC address and destination MAC address in the ARP request with the

MAC address in the entry.

2. Unicasts the ARP request.

mismatch-discard: Specifies mismatch discarding mode. In this mode, the device discards an

ARP request that is not targeted at the device and does not match any ARP flood suppression entry.

If you do not specify this keyword, the device will broadcast such an ARP request.

Usage guidelines

The device does not forward ARP requests in proxy reply mode, which decreases system resource

consumption. Unicast forwarding mode reduces the ARP entry learning errors caused by the delay in

refreshing ARP flood suppression entries at the expense of high system resource usage.

Examples

# Enable ARP flood suppression and set its mode to unicast forwarding on VSI vsi1.

<Sysname> system-view

[Sysname] vsi vsi1

[Sysname-vsi-vsi1] arp suppression enable

[Sysname-vsi-vsi1] arp suppression mode unicast-forward

Related commands

arp suppression enable

bandwidth (Ethernet service instance view)

Use bandwidth to set the bandwidth limit for an Ethernet service instance.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth

undo bandwidth

Default

No bandwidth limit is set for an Ethernet service instance.

Views

Ethernet service instance view

Predefined user roles

network-admin

Parameters

bandwidth: Specifies a bandwidth limit in kbps. The value range for this argument is 64 to

167772159.

Usage guidelines

The bandwidth limit takes effect only on incoming traffic. An Ethernet service instance drops excess

incoming traffic when its bandwidth limit is reached.

If you use the bandwidth command for both an Ethernet service instance and its mapped VSI, the

Ethernet service instance bandwidth is limited exclusively from the VSI bandwidth. For example, VSI

vsi1 has AC 1, AC 2, AC 3, and Tunnel 1. The bandwidth limit of VSI vsi1 is 500 kbps, and the

bandwidth limit of AC 1 is 120 kbps. The total bandwidth of AC 2, AC 3, and Tunnel 1 is limited to 500

kbps.

Examples

# Set the bandwidth limit to 10240 kbps for Ethernet service instance 200.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] service-instance 200

[Sysname-Ten-GigabitEthernet1/0/1-srv200] encapsulation s-vid 200

[Sysname-Ten-GigabitEthernet1/0/1-srv200] bandwidth 10240

Related commands

bandwidth (VSI view)

Use bandwidth to set the bandwidth limit for a VSI.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth

undo bandwidth

Default

No bandwidth limit is set for a VSI.

Views

VSI view

Predefined user roles

network-admin

Parameters

bandwidth: Specifies a bandwidth limit in kbps. The value range for this argument is 64 to

167772159.

Usage guidelines

This command limits the total bandwidth of the incoming traffic on all ACs and VXLAN tunnels

mapped to a VSI. A VSI drops excess incoming traffic when its bandwidth limit is reached.

If you use the bandwidth command for both an Ethernet service instance and its mapped VSI, the

Ethernet service instance bandwidth is limited exclusively from the VSI bandwidth. For example, VSI

vsi1 has AC 1, AC 2, AC 3, and Tunnel 1. The bandwidth limit of VSI vsi1 is 500 kbps, and the

bandwidth limit of AC 1 is 120 kbps. The total bandwidth of AC 2, AC 3, and Tunnel 1 is limited to 500

kbps.

If you use both the restrain and bandwidth commands on a VSI, the bandwidth command

limits only the bandwidth of the traffic not restrained by the restrain command.

Examples

# Set the bandwidth limit to 10240 kbps for VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] bandwidth 10240

Related commands

bandwidth (Ethernet service instance view)

display l2vpn vsi

description

Use description to configure a description for a VSI.

Use undo description to restore the default.

Syntax

description text

undo description

Default

A VSI does not have a description.

Views

VSI view

Predefined user roles

network-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 80 characters.

Examples

# Configure a description for VSI vpn1.

<Sysname> system-view

[Sysname] vsi vpn1

[Sysname-vsi-vpn1] description vsi for vpn1

Related commands

display l2vpn vsi

display arp suppression vsi

Use display arp suppression vsi to display ARP flood suppression entries.

Syntax

display arp suppression vsi [ name vsi-name ] [ slot slot-number ] [ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you

do not specify a VSI, this command displays entries for all VSIs.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a

member device, this command displays entries on the master device.

count: Displays the number of ARP flood suppression entries that match the command.

Examples

# Display ARP flood suppression entries.

<Sysname> display arp suppression vsi

IP address MAC address VSI name Link ID Aging(min)

1.1.1.2 000f-e201-0101 vsi1 0x70000 14

1.1.1.3 000f-e201-0202 vsi1 0x80000 18

1.1.1.4 000f-e201-0203 vsi2 0x90000 10

# Display the number of ARP flood suppression entries.

<Sysname> display arp suppression vsi count

Total entries: 3

Table 1 Command output

Field

Description

Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

Aging(min) Remaining lifetime (in minutes) of the ARP flood suppression entry. When

the timer expires, the entry is deleted.

Related commands

arp suppression enable

reset arp suppression vsi

display hardware-resource vxlan

Use display hardware-resource vxlan to display the VXLAN hardware resource mode.

Syntax

display hardware-resource [ vxlan ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vxlan: Specifies the VXLAN hardware resource mode. If you do not specify this keyword, the

command displays all hardware resource modes.

Examples

# Display the VXLAN hardware resource mode.

<Sysname> display hardware-resource vxlan

Vxlan resource(vxlan), all supported modes:

l2gw L2 gateway--underlay/overlay 48K/0K

l3gw8k L3 gateway--underlay/overlay 40K/8K

l3gw16k L3 gateway--underlay/overlay 32K/16K

l3gw24k L3 gateway--underlay/overlay 24K/24K

l3gw32k L3 gateway--underlay/overlay 16K/32K

l3gw40k L3 gateway--underlay/overlay 8K/40K

border8k Border--underlay/overlay 40K/8K

border16k Border--underlay/overlay 32K/16K

border24k Border--underlay/overlay 24K/24K

border32k Border--underlay/overlay 16K/32K

border40k Border--underlay/overlay 8K/40K

-----------------------------------------------

Default Current Next

l2gw l3gw24k l3gw24k

Table 2 Command output

Field

Description

Vxlan resource(vxlan), all

supported modes

VXLAN hardware resource modes supported by the device.

• l2gw—Layer 2 gateway mode.

• l3gw8k—Layer 3 gateway mode that supports 8 K of overlay adjacency

table.

• l3gw16k—Layer 3 gateway mode that supports 16 K of overlay

adjacency table.

• l3gw24k—Layer 3 gateway mode that supports 24 K of overlay

adjacency table.

• l3gw32k—Layer 3 gateway mode that supports 32 K of overlay

adjacency table.

• l3gw40k—Layer 3 gateway mode that supports 40 K of overlay

adjacency table.

• border8k—Border mode that supports 8 K of overlay adjacency table.

• border16k—Border mode that supports 16 K of overlay adjacency table.

• border24k—Border mode that supports 24 K of overlay adjacency table.

• border32k—Border mode that supports 32 K of overlay adjacency table.

• border40k—Border mode that supports 40 K of overlay adjacency table.

Default The default VXLAN hardware resource mode.

Current The current VXLAN hardware resource mode.

Next The VXLAN hardware resource mode for the next startup.

Related commands

hardware-resource vxlan

display igmp host group

Use display igmp host group to display information about the multicast groups that contain

IGMP host-enabled interfaces.

Syntax

display igmp [ vpn-instance vpn-instance-name ] host group [ group-address

| interface interface-type interface-number ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a

case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command

displays information about the multicast groups that contain IGMP host-enabled interfaces for the

public network.

group-address: Specifies a multicast group address in the range of 224.0.1.0 to

239.255.255.255. If you do not specify a multicast group, this command displays information about

all multicast groups.

interface interface-type interface-number: Specifies an interface by its type and

number. If you do not specify an interface, this command displays multicast group information for all

interfaces.

verbose: Displays detailed multicast group information. If you do not specify this keyword, the

command displays brief multicast group information.

Usage guidelines

For the VXLAN multicast source interface of a multicast-mode VXLAN to join its VXLAN multicast

group, enable the IGMP host feature on the interface. The VXLAN multicast source interface

provides the source IP address for multicast VXLAN packets.

Use this command to verify the following information:

•

Multicast group information for VXLANs.

•

Group membership status of VXLAN multicast source interfaces.

Examples

# Display brief information about all multicast groups that contain IGMP host-enabled interfaces.

<Sysname> display igmp host group

IGMP host groups in total: 2

Vlan-interface10(1.1.1.20):

IGMP host groups in total: 2

Group address Member state Expires

225.1.1.1 Idle Off

225.1.1.2 Idle Off

# Display detailed information about all multicast groups that contain IGMP host-enabled interfaces.

<Sysname> display igmp host group verbose

Vlan-interface10(1.1.1.20):

IGMP host groups in total: 2

Group: 225.1.1.1

Group mode: Exclude

Member state: Idle

Expires: Off

Source list (sources in total: 0):

Group: 225.1.1.2

Group mode: Exclude

Member state: Idle

Expires: Off

Source list (sources in total: 0):

Table 3 Command output

Field

Description

IGMP host groups in total Total number of multicast groups that contain IGMP host-enabled interfaces.

Vlan-interface10(1.1.1.20) Name and IP address of the IGMP host-enabled interface.

IGMP host groups in total Total number of multicast groups on the interface.

Group address/Group Address of the multicast group.

Member state

Member state:

• Delay—The interface has joined the multicast group, and it has started

the delay timer for sending IGMP reports.

• Idle—The interface has joined the multicast group, but it has not started

the delay timer for sending IGMP reports.

The delay timer is not user configurable.

Expires Remaining delay time for the interface to send an IGMP report.

This field displays Off if the delay timer is disabled.

Group mode Multicast source filtering mode:

• Include.

• Exclude.

Source list Multicast sources of the multicast group.

sources in total Total number of multicast sources.

NOTE:

For more information about the command output, see IGMP in IP Multicast Configuration Guide.

Related commands

igmp host enable

display ipv6 nd suppression vsi

Use display ipv6 nd suppression vsi to display ND flood suppression entries.

Syntax

display ipv6 nd suppression vsi [ name vsi-name ] [ slot slot-number ]

[ count ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name vsi-name: Specifies a VSI by its name, a case-sensitive string of 1 to 31 characters. If you

do not specify a VSI, this command displays entries for all VSIs.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a

member device, this command displays entries on the master device.

count: Displays the number of ND flood suppression entries that match the command.

Examples

# Display ND flood suppression entries.

<Sysname> display ipv6 nd suppression vsi

IPv6 address MAC address VSI name Link ID Aging (min)

1000::2 000f-e201-0101 vsi1 0x70000 5

1000::3 000f-e201-0202 vsi1 0x80000 5

1000::4 000f-e201-0203 vsi2 0x90000 5

# Display the number of ND flood suppression entries.

<Sysname> display ipv6 nd suppression vsi count

Total entries: 3

Table 4 Command output

Field

Description

Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

Aging (min) Remaining lifetime (in minutes) of the ND flood suppression entry. When the

timer expires, the entry is deleted.

Related commands

ipv6 nd suppression enable

reset ipv6 nd suppression vsi

display l2vpn drni arp

Use display l2vpn drni arp to display L2VPN ARP entries on a DR member device.

Syntax

display l2vpn drni arp [ local | remote ] [ count | { public-instance |

vpn-instance vpn-instance-name } [ count | ip-address ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies locally learned L2VPN ARP entries.

remote: Specifies DRNI-synchronized L2VPN ARP entries.

count: Displays the number of L2VPN ARP entries. If you do not specify this keyword, the

command displays detailed information about L2VPN ARP entries.

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a

case-sensitive string of 1 to 31 characters.

ip-address: Specifies an IPv4 address. If you do not specify an IPv4 address, this command

displays all L2VPN ARP entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned

and DRNI-synchronized L2VPN ARP entries.

If you do not specify the public-instance keyword or the vpn-instance

vpn-instance-name option, this command displays L2VPN ARP entries for the public instance

and all VPN instances.

Examples

# Display all L2VPN ARP entries on the local DR member device.

<Sysname> display l2vpn drni arp

Flags: D – Dynamic L - Local R – Remote S – Static I - Invalid

G - Gateway V - DRNI Virtual

VPN instance: vpn1 Interface: Vsi-interface1

IP address MAC address VSI index Link ID Flags

10.1.1.1 0003-0003-0003 0 0x1 DL

10.1.1.11 0001-0001-0001 0 0x1 DL

10.1.1.12 0001-0001-0011 0 0x2 DR

10.1.1.13 0001-0001-0021 0 0x2 DR

10.1.1.101 0001-0011-0101 0 0x1 SL

10.1.1.102 0001-0011-0102 0 0x1 SL

Public instance Interface: Vsi-interface2

IP address MAC address VSI index Link ID Flags

11.1.1.1 0033-0033-0033 0 0x1 DL

11.1.1.11 0011-0011-0011 0 0x1 DL

# Display the total number of L2VPN ARP entries on the local DR member device.

<Sysname> display l2vpn drni arp count

Total number of entries: 8

Table 5 Command output

Field

Description

Interface VSI interface.

Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

Field

Description

Flags

ARP entry type:

• D—The entry is a valid dynamically learned entry.

• L—The entry is a valid local entry.

• R—The entry is a valid DRNI-synchronized entry.

• S—The entry is a valid static entry.

• I—The entry is invalid. Possible reasons:

 The VSI has been administratively shut down by using the

shutdown command.

 The outgoing tunnel interface does not exist.

• G—The entry is for a gateway.

• V—The entry is for the DRNI virtual IPv4 address of a gateway

interface.

display l2vpn drni arp suppression

Use display l2vpn drni arp suppression to display L2VPN ARP flood suppression entries

on a DR member device.

Syntax

display l2vpn drni arp suppression [ local | remote ] [ count | vsi vsi-name

[ count | ip-address ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies L2VPN ARP flood suppression entries that are learned locally.

remote: Specifies L2VPN ARP flood suppression entries that are synchronized by DRNI.

count: Displays the number of L2VPN ARP flood suppression entries. If you do not specify this

keyword, the command displays detailed information about L2VPN ARP flood suppression entries.

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not

specify a VSI, this command displays L2VPN ARP flood suppression entries for all VSIs.

ip-address: Specifies an IPv4 address. If you do not specify an IPv4 address, this command

displays all L2VPN ARP flood suppression entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned

and DRNI-synchronized L2VPN ARP flood suppression entries.

Examples

# Display all L2VPN ARP flood suppression entries on the local DR member device.

<Sysname> display l2vpn drni arp suppression

Flags: D - Dynamic L – Local R – Remote S - Static I – Invalid

VSI name: vpna

IP address MAC address Link ID Flags

10.1.1.12 0002-0002-0002 0x1 DL

10.1.1.13 0002-0002-0002 0x2 RI

10.1.1.101 0001-0011-0101 0x2 SR

# Display the total number of L2VPN ARP flood suppression entries on the local DR member device.

<Sysname> display l2vpn drni arp suppression count

Total number of entries: 3

Table 6 Command output

Field

Description

Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

Flags

ARP flood suppression entry type:

• D—The entry is a valid dynamically learned entry.

• L—The entry is a valid local entry.

• R—The entry is a valid DRNI-synchronized entry.

• S—The entry is a valid static entry.

• I—The entry is invalid. Possible reasons:

 The VSI has been administratively shut down by using the

shutdown command.

 The outgoing tunnel interface does not exist.

display l2vpn drni mac-address

Use display l2vpn drni mac-address to display L2VPN MAC address entries on a DR

member device.

Syntax

display l2vpn drni mac-address [ local | remote ] [ count | vsi vsi-name

[ count | mac-address ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies L2VPN MAC address entries that are learned locally.

remote: Specifies L2VPN MAC address entries that are synchronized by DRNI.

count: Displays the number of L2VPN MAC address entries. If you do not specify this keyword, the

command displays detailed information about L2VPN MAC address entries.

vsi vsi-name: Specifies a VSI name, a case-sensitive string of 1 to 31 characters. If you do not

specify a VSI, this command displays L2VPN MAC address entries for all VSIs.

mac-address: Specifies a MAC address. The MAC address is in the format of H-H-H. You can omit

the consecutive zeros at the beginning of each segment. For example, you can enter f-e2-1 for

000f-00e2-0001. If you do not specify a MAC address, this command displays all L2VPN MAC

address entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned

and DRNI-synchronized L2VPN MAC address entries.

Examples

# Display all L2VPN MAC address entries on the local DR member device.

<Sysname> display l2vpn drni mac-address

Flags: D – Dynamic L - Local R – Remote S – Static A - MAC-authentication

VSI name: bbb

MAC address Link ID Interface Flags

0000-0000-000a 0x1 BAGG10 DL

0000-0000-0009 0x1 Tunnel1 DL

# Display the total number of L2VPN MAC address entries on the local DR member device.

<Sysname> display l2vpn drni mac-address count

Total number of entries: 2

Table 7 Command output

Field

Description

Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

Interface Outgoing interface.

Flags

MAC address entry type:

• D—The entry is a valid dynamically learned entry.

• L—The entry is a valid local entry.

• R—The entry is a valid DRNI-synchronized entry.

• S—The entry is a valid static entry.

•

—The entry is learned by MAC authentication.

display l2vpn drni nd

Use display l2vpn drni nd to display L2VPN ND entries on a DR member device.

Syntax

display l2vpn drni nd [ local | remote ] [ count | { public-instance |

vpn-instance vpn-instance-name } [ ipv6-address | count ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

local: Specifies locally learned L2VPN ND entries.

remote: Specifies DRNI-synchronized L2VPN ND entries.

count: Displays the number of L2VPN ND entries. If you do not specify this keyword, the command

displays detailed information about L2VPN ND entries.

public-instance: Specifies the public instance.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a

case-sensitive string of 1 to 31 characters.

ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command

displays all L2VPN ND entries that match the specified criteria.

Usage guidelines

If you do not specify the local or remote keyword, this command displays both locally learned

and DRNI-synchronized L2VPN ND entries.

If you do not specify the public-instance keyword or the vpn-instance

vpn-instance-name option, this command displays L2VPN ND entries for the public instance

and all VPN instances.

Examples

# Display all L2VPN ND entries on the local DR member device.

<Sysname> display l2vpn drni nd

Flags: D - Dynamic L – Local R – Remote S - Static I - Invalid

G - Gateway V - DRNI Virtual

VPN instance: vpna Interface: Vsi-interface1

IPv6 address : 20::2

MAC address : 0001-0001-0001 Flags : DL

VSI index : 0 Link ID : 0x1

# Display the total number of L2VPN ND entries on the local DR member device.

<Sysname> display l2vpn drni nd count

Total number of entries: 1

Table 8 Command output

Field

Description

Interface VSI interface.

Flags

ND entry type:

• D—The entry is a valid dynamically learned entry.

• L—The entry is a valid local entry.

• R—The entry is a valid DRNI-synchronized entry.

• S—The entry is a valid static entry.

• I—The entry is invalid. Possible reasons:

 The VSI has been administratively shut down by using the

shutdown command.

 The outgoing tunnel interface does not exist.

• G—The entry is for a gateway.

• V—The entry is for the DRNI virtual IPv6 address of a gateway

interface.

Link ID Link ID that uniquely identifies an AC or a VXLAN tunnel on a VSI.

display l2vpn drni nd suppression

Use display l2vpn drni nd suppression to display L2VPN ND flood suppression entries on

a DR member device.

Page is loading ...

HPE FlexFabric 5940 Switch Series VXLAN Reference guide

Brand: HPE

Model: FlexFabric 5940 Switch Series VXLAN

Category: Software

Type: Reference guide

Download PDF

report

HPE FlexFabric 5940 Switch Series VXLAN Reference guide

HPE FlexFabric 5940 Switch Series VXLAN Reference guide

Related papers

Other documents