08-MPLS Command Reference

HomeSupportRoutersH3C SR8800 Router SeriesReference GuidesCommand ReferencesH3C SR8800 Command Reference-Release3347-6W10308-MPLS Command Reference
05-MPLS L3VPN Commands
Title Size Download
05-MPLS L3VPN Commands 458.97 KB

Contents

MPLS L3VPN configuration commands 1

default local-preference (BGP-VPNv4/BGP-VPNv6 subaddress family view) 1

default med (BGP-VPNv4/BGP-VPNv6 subaddress family view) 2

description (VPN instance view) 2

display bgp vpnv4 all routing-table· 3

display bgp vpnv4 group· 7

display bgp vpnv4 network· 9

display bgp vpnv4 paths 10

display bgp vpnv4 peer 11

display bgp vpnv4 peer received ip-prefix· 18

display bgp vpnv4 route-distinguisher routing-table· 19

display bgp vpnv4 routing-table label 23

display bgp vpnv4 vpn-instance routing-table· 24

display bgp vpnv6 all peer 26

display bgp vpnv6 all routing-table· 30

display bgp vpnv6 route-distinguisher routing-table· 32

display bgp vpnv6 vpn-instance peer 33

display bgp vpnv6 vpn-instance routing-table· 36

display fib vpn-instance· 37

display fib vpn-instance ip-address 39

display ip vpn-instance· 40

display ipv6 fib vpn-instance· 42

display ipv6 fib vpn-instance ipv6-address 44

display mpls ldp vpn-instance· 45

display ospf sham-link· 46

display tunnel-policy· 48

display vpn label operation· 49

domain-id· 50

export route-policy· 50

ext-community-type· 52

filter-policy export (BGP-VPNv4 subaddress family view) 52

filter-policy export (BGP-VPNv6 subaddress family view) 53

filter-policy import (BGP-VPNv4 subaddress family view) 54

filter-policy import (BGP-VPNv6 subaddress family view) 55

import route-policy· 55

ip binding vpn-instance· 56

ip vpn-instance· 57

ipv4-family (BGP view) 58

ipv4-family (VPN instance view) 58

ipv6-family (BGP view) 59

ipv6-family (VPN instance view) 60

mpls ldp vpn-instance· 60

nesting-vpn· 61

peer advertise-community (BGP-VPNv4 subaddress family view) 62

peer allow-as-loop· 62

peer as-path-acl (BGP-VPNv4 subaddress family view) 63

peer capability-advertise orf ip-prefix (BGP-VPNv4 subaddress family view) 64

peer default-route-advertise vpn-instance· 65

peer enable· 66

peer filter-policy (BGP-VPNv4/BGP-VPNv6 subaddress family view) 67

peer group· 68

peer ip-prefix (BGP-VPNv4 subaddress family view) 69

peer ipv6-prefix (BGP-VPNv6 subaddress family view) 69

peer label-route-capability (BGP view, BGP VPN instance view) 70

peer next-hop-invariable (BGP-VPNv4 subaddress family view) 71

peer next-hop-local 72

peer preferred-value (BGP-VPNv4/BGP-VPNv6 subaddress family view) 72

peer public-as-only (BGP-VPNv4/BGP-VPNv6 subaddress family view) 73

peer reflect-client 74

peer route-policy (BGP-VPNv4/BGP-VPNv6 subaddress family view) 76

peer upe· 77

peer upe route-policy· 77

peer vpn-instance enable· 78

peer vpn-instance group· 79

peer vpn-instance route-policy import 80

policy vpn-target 80

reflect between-clients 82

reflector cluster-id· 83

refresh bgp ipv6 vpn-instance· 84

refresh bgp vpn-instance· 84

refresh bgp vpnv4· 85

refresh bgp vpnv6· 85

reset bgp ipv6 vpn-instance· 86

reset bgp vpn-instance· 86

reset bgp vpn-instance dampening· 87

reset bgp vpn-instance flap-info· 88

reset bgp vpnv4· 88

reset bgp vpnv6· 89

route-distinguisher (VPN instance view) 89

route-tag· 90

routing-table limit 91

rr-filter 92

sham-link· 93

tnl-policy (VPN instance view/IPv4 VPN view/IPv6 VPN view) 95

tunnel select-seq· 96

tunnel-policy· 97

vpn popgo· 97

vpn-instance-capability simple· 98

vpn-target (VPN instance view/IPv4 VPN view/IPv6 VPN view) 98

 


 

 

NOTE:

For information about BGP L2VPN address family and VPLS address family, see MPLS Configuration Guide.

 

default local-preference (BGP-VPNv4/BGP-VPNv6 subaddress family view)

Syntax

default local-preference value

undo default local-preference

View

BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

value: Default value for the local preference, in the range of 0 to 4294967295. A greater value represents a higher priority.

Description

Use the default local-preference command to set the default value of the local preference.

Use the undo default local-preference command to restore the default.

By default, the default value of the local preference is 100.

Examples

# Devices A and B are connected to the outside AS. In BGP-VPNv4 subaddress family view of Device B, set the default local preference of Device B to 180, so that when a destination in the outside AS can be reached through both A and B, the BGP VPN-IPv4 route going through B to the destination is preferred.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] default local-preference 180

# Devices A and B are connected to the outside AS. In BGP-VPNv6 subaddress family of Device B, set the default local preference of device B to 180, so that when a destination in the outside AS can be reached through both A and B, the BGP VPN-IPv6 route going through B to the destination is preferred.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] default local-preference 180

default med (BGP-VPNv4/BGP-VPNv6 subaddress family view)

Syntax

default med med-value

undo default med

View

BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

med-value: Default value of the Multi-Exit-Discriminator (MED), in the range of 0 to 4294967295.

Description

Use the default med command to set the default value of the system MED.

Use the undo default med command to restore the default.

By default, the default system MED value is 0.

With other criteria the same, the system selects the route with a smaller MED value as the AS external route.

Examples

# Set the default MED to 10 in BGP-VPNv4 subaddress family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] default med 10

# Set the default MED to 10 in BGP-VPNv6 subaddress family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] default med 10

description (VPN instance view)

Syntax

description text

undo description

View

VPN instance view

Default level

2: System level

Parameters

text: Description for the VPN instance, a string of 1 to 80 characters.

Description

Use the description command to configure a description for a VPN instance.

Use the undo description command to delete the description.

Examples

# Configure the description of VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] description This is vpn1

display bgp vpnv4 all routing-table

Syntax

display bgp vpnv4 all routing-table [ [ network-address [ { mask | mask-length } [ longer-prefixes ] ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13> [ no-advertise | no-export | no-export-subconfed ] * [ whole-match ] | community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number }&<1-16> | different-origin-as | peer ip-address { advertised-routes | received-routes } [ statistic ] | statistic ] [ | { begin | exclude | include } regular-expression ] | regular-expression as-regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

network-address: IP address of the destination segment.

mask: Network mask, in dotted decimal notation.

mask-length: Length of the network mask, in the range of 0 to 32.

longer-prefixes: Displays each routing entry that meets the following conditions:

1.      Its destination IP address ANDed with the specified prefix equals the specified destination IP address ANDed with the specified prefix.

2.      Its prefix length is shorter than or equal to the specified prefix length.

3.      Its prefix length is the longest among the entries meeting the above two conditions.

as-path-acl as-path-acl-number: Filters routing information using the specified AS_PATH list. The as-path-acl-number argument ranges from 1 to 256.

cidr: Displays Classless Inter-Domain Routing (CIDR) information.

community: Displays routing information of the specified BGP community in the routing table.

aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.

no-advertise: A route with this attribute is not advertised to any other BGP peer.

no-export: A route with this attribute is not advertised out of the local AS or, if existing, the confederation. However, it is advertised to the other sub-ASs in the confederation.

no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation.

whole-match: Performs exact match.

community-list: Displays routing information of the specified BGP community list in the routing table.

basic-community-list-number: Basic community list number, in the range of 1 to 99.

comm-list-name: Name of a community attribute list, a string of 1 to 31 characters that contains at least one non-digit character.

adv-community-list-number: Advanced community list number, in the range of 100 to 199.

&<1-16>: Specifies that the argument before it can be entered up to 16 times.

different-origin-as: Displays information about routes with different AS origins.

peer ip-address: Specifies a peer by its IP address.

advertised-routes: Specifies the routing information sent to the specified peer.

received-routes: Specifies the routing information received from the specified peer.

statistic: Displays BGP VPNv4 route statistics.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

regular-expression as-regular-expression: Displays routing information matching the specified AS_PATH regular expression.

Description

Use the display bgp vpnv4 all routing-table command to display all BGP VPNv4 routing information.

Examples

# Display all BGP VPNv4 routing information.

<Sysname> display bgp vpnv4 all routing-table

 

 BGP Local router ID is 2.2.2.2

 Status codes: * - valid, ^ - VPN best, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 

 Total number of routes from all PE: 2

 Route Distinguisher: 100:1

 

    Network            NextHop        In/Out Label      MED        LocPrf

 

*  i 10.0.0.0           1.1.1.1         1025 /NULL       0          100

*^ i 123.1.1.1/32       1.1.1.1         1024 /NULL       0          100

 

 Total routes of vpn-instance vpn1: 5

     Network            NextHop        In/Out Label      MED        LocPrf

 

*^>i 10.0.0.0           1.1.1.1                          0          100

* >  10.1.1.0/24        0.0.0.0         NULL /1025       0

* >  20.0.0.0           10.1.1.1        NULL /1026       0

* >i 123.1.1.1/32       1.1.1.1                          0          100

* >  124.1.1.1/32       0.0.0.0         NULL /1024       0

# Display the detailed information of the BGP VPNv4 routes with prefix 1.1.1.2 /32.

<Sysname> display bgp vpnv4 all routing-table 1.1.1.2 32

 

 BGP local router ID : 3.3.3.9

 Local AS number : 100

 

 

 Route Distinguisher: 100:1

 Paths:   1 available, 0 best, 1 VPN best

 

 BGP routing table entry information of 1.1.1.2/32:

 Label information (Received/Applied): 1034/NULL

 From            : 1.1.1.9 (1.1.1.9)

 Original nexthop: 1.1.1.9

 Ext-Community   : <RT: 111:1>

 AS-path         : 65410

 Origin          : incomplete

 Attribute value : MED 0, localpref 100, pref-val 0, pre 255

 State           : valid, internal, VPN best,

 Not advertised to any peers yet

 

 

 Total Number of Routes: 1(vpna)

 Paths:   1 available, 1 best, 0 VPN best

 

 BGP routing table entry information of 1.1.1.2/32:

 From            : 1.1.1.9 (1.1.1.9)

 Relay Nexthop   : 0.0.0.0

 Original nexthop: 1.1.1.9

 Ext-Community   : <RT: 111:1>

 AS-path         : 65410

 Origin          : incomplete

 Attribute value : MED 0, localpref 100, pref-val 0, pre 255

 State           : valid, internal, best,

 Not advertised to any peers yet

 

 Not advertised to any VPN peers yet

Table 1 Output description

Field

Description

BGP Local router ID

Router ID of the local BGP router

Status codes

Route status codes. Valid values include:

·       * - valid—Valid route

·       ^ - VPN best—VPN best route

·       > - best—Common best route

·       d - damped—Route damped for route flap

·       h - history—History route

·       i - internal—Internal route

·       s - suppressed—Suppressed route

·       S - Stale—Stale route

Origin

Route origin codes. Valid values include:

·       i - IGP (learned from within the AS)

·       e - EGP (learned through EGP)

·       ? - incomplete (learned in any other way)

Total number of routes from all PE

Total number of VPNv4 routes from all PEs

Network

Network address

NextHop

Address of the next hop

In/Out Label

Incoming and outgoing labels

MED

Metric associated with the destination network

LocPrf

Local preference value

Paths

Counts of routes, including:

·       available—Number of available routes.

·       best—Number of best routes

Label information

Route label information

·       Received—Received label information

·       Applied—Locally generated label information

Ext-Community

Extended community attribute

AS-path

The route’s AS path attribute (AS_PATH), which records all ASs the route has passed, and can avoid route loops.

Attribute value

BGP routing attribute information

localpref

Local precedence

pref-val

Preference value

pre

Protocol priority

State

Route status:

·       valid—Valid route

·       internal—Internal route

·       external—External route

·       local—Locally generated route

·       synchronize—Synchronized route

·       best—Best route

 

display bgp vpnv4 group

Syntax

display bgp vpnv4 { all | vpn-instance vpn-instance-name } group [ group-name ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Specifies all VPNv4 peers.

vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv4 group command to display information about a specific BGP VPNv4 peer group or all BGP VPNv4 peer groups.

Examples

# Display information about BGP VPNv4 peer group a for VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 group a

 

 BGP peer-group is a

 remote AS number not specified

 Type : external

 Maximum allowed prefix number: 150000

 Threshold: 75%

 Configured hold timer value: 180

 Keepalive timer value: 60

 Minimum time between advertisement runs is 30 seconds

 Optional capabilities:

  ORF advertise capability based on Prefix(type 64):

    Local : both

 Peer Preferred Value: 99

 No routing policy is configured

  Members:

  Peer          AS  MsgRcvd  MsgSent  OutQ PrefRcv Up/Down  State

  10.1.1.1      200   18       21     0     1      00:12:58 Established

Table 2 Output description

Field

Description

BGP peer-group

Name of the BGP peer group.

remote AS number

Number of the remote AS.

Type

Type of the BGP peer group.

Maximum allowed prefix number

Maximum number of routes that the VPN instance supports.

Threshold

Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the device generates a prompt.

Configured hold timer value

Setting of the hold timer.

Keepalive timer value

Keepalive interval.

Optional capabilities

Optional extended capabilities enabled for the peer group.

ORF advertise capability

Outbound Route Filtering (ORF) capability supported by the peer group.

Local

Indicates whether the local device supports sending and receiving Route-refresh packets with ORF information. The value can be:

·       both—Supports sending and receiving Route-refresh messages with ORF information.

·       Send—Supports sending Route-refresh messages with ORF information.

·       Receive—Supports receiving Route-refresh messages with ORF information.

Peer Preferred Value

Preference value configured for routes received from the peer.

Peer

IP address of the peer.

AS

AS number of the peer group.

MsgRcvd

Number of messages received.

MsgSent

Number of messages sent.

OutQ

Number of messages waiting to be sent to the peer.

PrefRcv

Number of prefixes received.

Up/Down

Duration of the BGP session in the current state.

State

Status of the peer.

 

display bgp vpnv4 network

Syntax

display bgp vpnv4 { all | vpn-instance vpn-instance-name } network [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Specifies all VPNv4 peers.

vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv4 network command to display information about BGP VPNv4 routes injected into a specific VPN instance or all VPN instances.

Examples

# Display information about BGP VPNv4 routes injected into VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 network

  BGP Local Router ID is 1.1.1.1.

  Local AS Number is 100.

  Network          Mask            Route-policy        Short-cut

  10.0.0.0         255.0.0.0

Table 3 Output description

Field

Description

BGP Local Router ID

Router ID of the local BGP router

Network

Advertised network route

Mask

Mask of the advertised network route

Route-policy

Routing policy configured

Short-cut

Whether this route is a short-cut route

 

display bgp vpnv4 paths

Syntax

display bgp vpnv4 { all | vpn-instance vpn-instance-name } paths [ as-regular-expression | { | { begin | exclude | include } regular-expression } ]

View

Any view

Default level

1: Monitor level

Parameters

all: Specifies all VPNv4 peers.

vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.

as-regular-expression: Regular expression for filtering the AS path information to be displayed.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv4 paths command to display the BGP VPNv4 AS path information.

Examples

# Display the BGP VPNv4 AS path information of VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 paths

 

    Address       Hash    Refcount  MED         Path/Origin

    0x6E72D18     0       1           0           200?

    0x6E72E50     0       1           0           i

    0x6E72B78     1       1           0           ?

    0x6E72BE0     1       2           0           ?

# Display all BGP VPNv4 AS path information.

<Sysname> display bgp vpnv4 all paths

 

    Address       Hash    Refcount  MED         Path/Origin

    0x6E72D80     4       1         0           200?

    0x6E72CB0     15      2         0           ?

Table 4 Output description

Field

Description

Address

Routing address in the local database

Hash

Hash bucket for storing routes

Refcount

Number of times that the path is referenced

MED

Metric for routes

Path/Origin

AS_PATH and origin attributes of the route. See Table 1.

 

display bgp vpnv4 peer

Syntax

display bgp vpnv4 all peer [ ip-address verbose | verbose ] [ | { begin | exclude | include } regular-expression ]

display bgp vpnv4 vpn-instance vpn-instance-name peer [ group-name log-info | ip-address { log-info | verbose } | verbose ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Specifies all VPNv4 peers.

vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

log-info: Displays log information.

ip-address: IP address of the peer.

verbose: Displays detailed information.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv4 peer command to display information about BGP VPNv4 peers.

Examples

# Display information about BGP VPNv4 peers of VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 peer

 BGP local router ID : 2.2.2.2

 Local AS number : 100

 Total number of peers : 1                 Peers in established state : 1

 

 Peer          AS  MsgRcvd  MsgSent  OutQ PrefRcv  Up/Down  State

 10.1.1.1      200    24       29       0       1      00:18:47 Established

Table 5 Output description

Field

Description

BGP Local router ID

Router ID of the local BGP router

Peers in established state

Number of peers in the state of established

Peer

IP address of the peer

AS

AS number of the peer group

MsgRcvd

Number of messages received

MsgSent

Number of messages sent

OutQ

Number of messages waiting to be sent to the peer

PrefRcv

Number of received prefixes

Up/Down

Duration of the BGP session in the current state

State

Status of the peer

 

# Display detailed information about BGP VPNv4 peers of VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 peer verbose

 

         Peer: 10.1.1.1  Local: 2.2.2.2

         Type: EBGP link

         BGP version 4, remote router ID 10.1.1.1

         BGP current state: Established, Up for 00h19m26s

         BGP current event: KATimerExpired

         BGP last state: OpenConfirm

         Port:  Local - 179      Remote - 1025

         Configured: Active Hold Time: 180 sec   Keepalive Time:60 sec

         Received  : Active Hold Time: 180 sec

         Negotiated: Active Hold Time: 180 sec

         Peer optional capabilities:

         Peer support bgp multi-protocol extended

         Peer support bgp route refresh capability

         Address family IPv4 Unicast: advertised and received

 

 Received: Total 25 messages, Update messages 1

 Sent: Total 30 messages, Update messages 4

 Maximum allowed prefix number: 150000

 Threshold: 75%

 Minimum time between advertisement runs is 30 seconds

 Optional capabilities:

  ORF advertise capability based on Prefix(type 64):

    Local: both

    Negotiated: send

 Peer Preferred Value: 99

  BFD: Enabled

 

 Routing policy configured:

 No routing policy is configured

Table 6 Output description

Field

Description

Peer

IP address of the peer.

Local

IP address of the local router.

Type

BGP type.

BGP version

Version of BGP that the peer runs.

remote router ID

Router ID of the remote router.

BGP current state

Current state of the BGP session.

Up for

Duration since the peer is established.

BGP current event

Current event of the BGP session.

BGP last state

State that the BGP session was in before transitioning to the current state.

Port

Local and remote ports of the BGP session.

Configured

Settings of the local timers, including the active hold interval and keepalive interval.

Received

Received active hold interval.

Negotiated

Negotiated active hold interval.

Peer optional capabilities

Optional capabilities of the peer.

Peer support bgp multi-protocol extended

The peer supports multiprotocol extension.

Peer support bgp route refresh capability

The peer supports route refresh capability.

Address family IPv4 Unicast

IPv4 unicast family capability.

Received

Total number of received messages and the number of received update messages.

Sent

Total number of sent messages and the number of sent update messages.

Maximum allowed prefix number

Maximum number of routes that the VPN instance supports.

Threshold

Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the device generates a prompt.

Optional capabilities

Local optional capabilities.

ORF advertise capability based on prefix (type 64):

Supports the ORF address prefix capability. The capability value is 64.

Local

Indicates whether the local device supports sending and receiving Route-refresh packets with ORF information. The value can be:

·       both—Supports sending and receiving Route-refresh messages with ORF information.

·       send—Supports sending Route-refresh messages with ORF information.

·       receive—Supports receiving Route-refresh messages with ORF information.

Negotiated

ORF capability negotiated by the local and remote peers. The value can be:

·       send—The local peer can send Route-refresh messages with ORF information and the remote peer can receive Route-refresh messages with ORF information.

·       receive—The local peer can receive Route-refresh messages with ORF information and the remote peer can send Route-refresh messages with ORF information.

This field is displayed only when the ORF capability negotiation is successful.

Peer Preferred Value

Preference value configured for the routes from the peer.

BFD

Whether BFD is enabled for the peer.

 

# Display all BGP VPNv4 peer information.

<Sysname> display bgp vpnv4 all peer

 

 BGP local router ID : 2.2.2.2

 Local AS number : 100

 Total number of peers : 1                 Peers in established state : 1

 

  Peer        AS  MsgRcvd  MsgSent  OutQ  PrefRcv  Up/Down   State

  1.1.1.1    100   51       64        0     2      00:45:16  Established

Table 7 Output description

Field

Description

Peer

IP address of the peer

AS

AS number

MsgRcvd

Number of messages received

MsgSent

Number of messages sent

OutQ

Number of messages waiting to be sent to the peer

Up/Down

Duration of the BGP session in the current state

State

Status of the peer

 

# Display detailed information about BGP VPNv4 peer 1.1.1.1.

<Sysname> display bgp vpnv4 all peer 1.1.1.1 verbose

         Peer: 1.1.1.1   Local: 2.2.2.2

         Type: IBGP link

         BGP version 4, remote router ID 1.1.1.1

         BGP current state: Established, Up for 00h46m01s

         BGP current event: RecvKeepalive

         BGP last state: OpenConfirm

         Port:  Local - 1039     Remote - 179

         Configured: Active Hold Time: 180 sec   Keepalive Time:60 sec

         Received  : Active Hold Time: 180 sec

         Negotiated: Active Hold Time: 180 sec

         Peer optional capabilities:

         Peer support bgp multi-protocol extended

         Peer support bgp route refresh capability

         Address family IPv4 Unicast: advertised and received

         Address family VPNv4: advertised and received

 Received: Total 52 messages, Update messages 2

 Sent: Total 65 messages, Update messages 5

 Maximum allowed prefix number: 150000

 Threshold: 75%

 Minimum time between advertisement runs is 15 seconds

 Optional capabilities:

  ORF advertise capability based on Prefix(type 64):

    Local: both

    Negotiated: send

 Connect-interface has been configured

 Peer Preferred Value: 0

  BFD: Enabled

 Routing policy configured:

 No routing policy is configured            

Table 8 Output description

Field

Description

Peer

IP address of the peer.

Local

IP address of the local router.

Type

BGP type.

BGP version

Version of BGP that the peer runs.

remote router ID

Router ID of the remote router.

BGP current state

Current status of BGP.

Up for

Duration since the peer is established.

BGP current event

Current event of the peer.

BGP last state

State that BGP was in before transitioning to the current status.

Port

Local and remote BGP port numbers.

Configured

Settings of the local timers, including the active hold interval and keepalive interval.

Received

Received active hold interval.

Negotiated

Negotiated active hold interval.

Peer optional capabilities

Optional capabilities of the peer.

Peer support bgp multi-protocol extended

The peer supports multiprotocol extension.

Peer support bgp route refresh capability

The peer supports route refresh capability.

Address family IPv4 Unicast

IPv4 unicast family capability.

Address family VPNv4

IPv4 address group VPNv4 capability.

Received

Total number of received messages and the number of received update messages.

Sent

Total number of sent messages and the number of sent update messages.

Maximum allowed prefix number

Maximum number of routes that the VPN instance supports.

Threshold

Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the device generates a prompt.

Optional capabilities

Local optional capabilities.

ORF advertise capability based on prefix (type 64):

Supports the ORF address prefix capability and the capability value is 64.

Local

Indicates whether the local device supports sending and receiving Route-refresh packets with ORF information. The value can be:

·       both—Supports sending and receiving Route-refresh messages with ORF information.

·       send—Supports sending Route-refresh messages with ORF information.

·       receive—Supports receiving Route-refresh messages with ORF information.

Negotiated

ORF capability negotiated by the local and remote peers. The value can be:

·       send—The local peer can send Route-refresh messages with ORF information and the remote peer can receive Route-refresh messages with ORF information.

·       receive—The local peer can receive Route-refresh messages with ORF information and the remote peer can send Route-refresh messages with ORF information.

This field is displayed only when the ORF capability negotiation is successful.

Connect-interface

Whether a source interface is configured for TCP connection establishment

Peer Preferred Value

Preference value configured for routes from the peer

BFD

Whether BFD is enabled for the peer

 

# Display the log information of a BGP VPNv4 peer whose address is 1.1.1.1.

<sysname> display bgp vpnv4 vpn-instance vpn1 peer 1.1.1.1 log-info

 

 Peer : 1.1.1.1

 

     Date      Time    State Notification

                             Error/SubError

 

  10-Jul-2008 15:46:17 Down  Send Notification with Error 1/1

                             Message Header Error/Connection Not Synchronized

  10-Jul-2008 09:23:00 Up   

  10-Jul-2008 07:46:17 Down  Receive Notification with Error 3/2

                             UPDATE Message Error/Unsupported optional Parameter

  10-Jul-2008 06:23:00 Up

  10-Jul-2008 05:46:17 Down  Send Notification with Error 6/4

                             Administrative Reset

Table 9 Output description

Field

Description

Peer

IPv4 address of the peer.

Date

Date when the notification message is sent or received.

Time

Time when the notification message is sent or received.

State

Connection state of the peer, which can be:

·       Up—The BGP session is in Established state.

·       Down—The BGP session has been cut down.

Notification

Notification message

Error/SubError

Error: Notification message error code, which specifies the error type.

SubError: Notification message’s error subcode, which specifies the detailed information of the error.

 

display bgp vpnv4 peer received ip-prefix

Syntax

display bgp vpnv4 { all | vpn-instance vpn-instance-name } peer ip-address received ip-prefix [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Specifies all VPNv4 peers.

vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.

ip-address: IP address of the BGP peer.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv4 peer received ip-prefix command to display the IP prefix information of the ORF packets received from the specified BGP peer.

Example

# Display the ORF IP prefix information received from BGP peer 10.110.25.20.

<Sysname> display bgp vpnv4 all peer 10.110.25.20 received ip-prefix

ORF ip-prefix entries: 2

ge: greater-equal   le: less-equal

  index  rule   prefix                 ge    le

  10     permit 111.111.111.0/24       26    32

  20     deny   2.1.1.0/24             26    32

Table 10 Output description

Field

Description

ORF ip-prefix entries

Number of ORF IP prefix entries

index

Index of the IP prefix

rule

Matching rule of the IP prefix

ge

greater-equal, which means the mask length is greater than or equal to the displayed value

le

less-equal, which means the mask length is less than or equal to the displayed value

 

display bgp vpnv4 route-distinguisher routing-table

Syntax

display bgp vpnv4 route-distinguisher route-distinguisher routing-table [ [ network-address [ mask | mask-length ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13> [ no-advertise | no-export | no-export-subconfed ] * [ whole-match ] | community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number }&<1-16> | different-origin-as ] [ | { begin | exclude | include } regular-expression ] | regular-expression as-regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

route-distinguisher: Route distinguisher (RD).

network-address: IP address of the destination segment.

mask: Network mask, in the format of X.X.X.X.

mask-length: Length of the network mask, in the range of 0 to 32.

as-path-acl as-path-acl-number: Filters routing information using the specified AS_PATH list. The as-path-acl-number argument ranges from 1 to 256.

cidr: Displays Classless Interdomain Routing (CIDR) information.

community: Displays routing information of the specified BGP community in the routing table.

aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.

no-advertise: A route with this attribute is not advertised to any other BGP peer.

no-export: A route with this attribute is not advertised out of the local AS or, if existing, the confederation. However, it is advertised to the other sub-ASs in the confederation.

no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation.

whole-match: Performs exact matching.

community-list: Displays routing information of the specified BGP community list.

basic-community-list-number: Basic community list number, in the range of 1 to 99.

comm-list-name: Name of a community attribute list, a string of 1 to 31 characters that contains at least one non-digit character.

adv-community-list-number: Advanced community list number, in the range of 100 to 199.

&<1-16>: Specifies that the argument before it can be entered up to 16 times.

different-origin-as: Displays information about routes with different AS origins.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

regular-expression as-regular-expression: Displays routing information matching the specified AS regular expression.

Description

Use the display bgp vpnv4 route-distinguisher routing-table command to display the BGP VPNv4 routes with a specific RD.

Related commands: route-distinguisher.

Examples

# Display the BGP VPNv4 routes with the RD 100:1.

<Sysname> display bgp vpnv4 route-distinguisher 100:1 routing-table

 

BGP Local router ID is 2.2.2.2

 Status codes: * - valid, ^ - VPN best, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 

 Route Distinguisher: 100:1

 Total number of routes: 2

 

    Network            NextHop         In/Out Label   MED        LocPrf

 

*  i 10.0.0.0           1.1.1.1         1025 /NULL      0          100

*^ i 123.1.1.1/32       1.1.1.1         1024 /NULL      0          100

 

 Total routes of vpn-instance vpn1: 5

     Network            NextHop         In/Out Label   MED        LocPrf

 

*^>i 10.0.0.0           1.1.1.1                         0          100

* >  10.1.1.0/24        0.0.0.0         NULL /1025      0

* >  20.0.0.0           10.1.1.1        NULL /1026      0

* >i 123.1.1.1/32       1.1.1.1                         0          100

* >  124.1.1.1/32       0.0.0.0         NULL /1024      0

# Display the BGP VPNv4 routing information with the RD 100:1 and IP address 1.1.1.2.

<Sysname> display bgp vpnv4 route-distinguisher 100:1 routing-table 1.1.1.2 32

 

 BGP local router ID : 3.3.3.9

 Local AS number : 100

 

 

 Route Distinguisher: 100:1

 Paths:   1 available, 0 best, 1 VPN best

 

 BGP routing table entry information of 1.1.1.2/32:

 Label information (Received/Applied): 1034/NULL

 From            : 1.1.1.9 (1.1.1.9)

 Original nexthop: 1.1.1.9

 Ext-Community   : <RT: 111:1>

 AS-path         : 65410

 Origin          : incomplete

 Attribute value : MED 0, localpref 100, pref-val 0, pre 255

 State           : valid, internal, VPN best

 Not advertised to any peers yet

 

 

 Total Number of Routes: 1(vpna)

 Paths:   1 available, 1 best, 0 VPN best

 

 BGP routing table entry information of 1.1.1.2/32:

 From            : 1.1.1.9 (1.1.1.9)

 Relay Nexthop   : 0.0.0.0

 Original nexthop: 1.1.1.9

 Ext-Community   : <RT: 111:1>

 AS-path         : 65410

 Origin          : incomplete

 Attribute value : MED 0, localpref 100, pref-val 0, pre 255

 State           : valid, internal, best,

 Not advertised to any peers yet

Table 11 Output description

Field

Description

BGP Local router ID

Router ID of the local BGP router.

Status codes

Route status codes. For valid values, see Table 1.

Origin

Route origin codes. For valid values, see Table 1.

Network

Network address.

NextHop

Address of the next hop.

In/Out Label

Incoming/outgoing label.

MED

Metric associated with the destination network.

LocPrf

Local preference value.

Paths

Counts of routes, including:

·       available—Number of available routes.

·       best—Number of best routes.

Label information

Route label information

·       Received—Received label information.

·       Applied—Locally generated label information.

Ext-Community

Extended community attribute.

AS-path

The route’s AS path attribute (AS_PATH), which records all ASs the route has passed and can avoid routing loops.

Attribute value

BGP routing attribute information.

localpref

Local preference value.

pref-val

Preference value of the route.

pre

Protocol priority.

State

Current state of the peer, which can be valid, internal, or best.

 

# Display the BGP VPNv4 routing information with RD being 100:1 and the network segment address being 10.0.0.0.

<Sysname> display bgp vpnv4 route-distinguisher 100:1 routing-table 10.0.0.0 255.0.0.0

 

BGP Local router ID is 2.2.2.2

 Status codes: * - valid, ^ - VPN best, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 

 Route Distinguisher: 100:1

 Total number of routes: 1

 

     Network            NextHop         In/Out Label   MED        LocPrf

 

*^ i 10.0.0.0           1.1.1.1         1025 /NULL      0          100

 

 Total Number of Routes: 1(vpn1)

      Network            NextHop         In/Out Label   MED        LocPrf

 

* >i 10.0.0.0           1.1.1.1                          0          100

Table 12 gives the description on the fields of the display bgp vpnv4 route-distinguisher routing-table network-address mask-address command.

Table 12 Output description

Field

Description

BGP Local router ID

Router ID of the local BGP router.

Status codes

Route status codes. For valid values, see Table 1.

Origin

Route origin codes. For valid values, see Table 1.

Network

Network address in the BGP routing table.

NextHop

Address of the next hop.

In/Out Label

Incoming/outgoing label.

MED

Metric associated with the destination network.

LocPrf

Local preference value.

Total Number of Routes

Total number of routes of the specified VPN instance.

 

display bgp vpnv4 routing-table label

Syntax

display bgp vpnv4 { all | vpn-instance vpn-instance-name } routing-table label [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Specifies all VPNv4 peers.

vpn-instance vpn-instance-name: Displays information about the specified VPN. vpn-instance-name is the instance name of an MPLS L3VPN, a case-sensitive string of 1 to 31 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv4 routing-table label command to display information about labeled routes in the BGP routing table.

Examples

# Display information about labeled routes in the BGP routing table.

<Sysname> display bgp vpnv4 all routing-table label

 

BGP Local router ID is 2.2.2.2

 Status codes: * - valid, ^ - VPN best, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 

 Total number of routes from all PE: 1

 

 Route Distinguisher: 100:1

 

        Network           NextHop           In/Out Label

*^ i   123.1.1.1         1.1.1.1           NULL/1024

 Total routes of vpn-instance vpn1: 4

        Network           NextHop           In/Out Label

 * >    10.1.1.0          0.0.0.0           1025/NULL

 * >    20.0.0.0          0.0.0.0           1026/NULL

 * >i   123.1.1.1         1.1.1.1           NULL/1024

 * >    124.1.1.1         0.0.0.0           1024/NULL

Table 13 Output description

Field

Description

BGP Local router ID

Router ID of the local BGP router.

Status

Route status codes. For valid values, see Table 1.

Origin

Route origin codes. For valid values, see Table 1.

Route Distinguisher

RD.

Network

Network address.

NextHop

Address of the next hop.

In/Out Label

Incoming/outgoing label. exp-null indicates an explicit null label.

 

display bgp vpnv4 vpn-instance routing-table

Syntax

display bgp vpnv4 vpn-instance vpn-instance-name routing-table [ [ network-address [ { mask | mask-length } [ longer-prefixes ] ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13> [ no-advertise | no-export | no-export-subconfed ] * [ whole-match ] | community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number }&<1-16> | dampened | dampening parameter | different-origin-as | flap-info [ network-address  [ { mask | mask-length } [ longer-match ] ] | as-path-acl as-path-acl-number ] | peer ip-address { advertised-routes | received-routes } | statistic ] [ | { begin | exclude | include } regular-expression ] | [ flap-info ] regular-expression as-regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.

network-address: IP address of the destination segment.

mask: Network mask, in the format of X.X.X.X.

mask-length: Length of the network mask, in the range of 0 to 32.

longer-prefixes: Displays each routing entry that meets the following conditions:

1.      Its destination IP address ANDed with the specified prefix equals the specified destination IP address ANDed with the specified prefix.

2.      Its prefix length is shorter than or equal to the specified prefix length.

3.      Its prefix length is the longest among the entries meeting the above two conditions.

as-path-acl as-path-acl-number: Filters routing information using the specified AS_PATH list. The as-path-acl-number argument ranges from 1 to 256.

cidr: Displays Classless Interdomain Routing (CIDR) information.

community: Displays routing information of the specified BGP community in the routing table.

aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times.

no-advertise: A route with this attribute is not advertised to any other BGP peer.

no-export: A route with this attribute is not advertised out of the local AS or, if existing, the confederation. However, it is advertised to the other sub-ASs in the confederation.

no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation.

whole-match: Performs exact match.

community-list: Displays routing information of the specified BGP community list.

basic-community-list-number: Basic community list number, in the range of 1 to 99.

comm-list-name: Name of a community attribute list, a string of 1 to 31 characters that contains at least one non-digit character.

adv-community-list-number: Advanced community list number, in the range of 100 to 199.

&<1-16>: Specifies that the argument before it can be entered up to 16 times.

dampened: Displays information about dampened BGP VPNv4 routes.

dampening parameter: Displays information about configured BGP VPNv4 route dampening parameters.

different-origin-as: Displays information about routes with different AS origins.

flap-info: Displays BGP VPNv4 route flap statistics.

longer-match: Displays flap statistics for routes with masks longer than that specified by the network-address { mask | mask-length } combination.

peer ip-address: Specifies a peer by its IP address.

advertised-routes: Displays routing information sent to the specified peer.

received-routes: Displays routing information received from the specified peer.

statistic: Displays BGP VPNv4 route statistics.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

regular-expression as-regular-expression: Displays routing information matching the specified AS regular expression.

Description

Use the display bgp vpnv4 vpn-instance routing-table command to display the BGP VPNv4 routing information of a specific VPN.

Examples

# Display the BGP VPNv4 routing information of VPN instance vpn1.

<Sysname> display bgp vpnv4 vpn-instance vpn1 routing-table

 

 Total Number of Routes: 5

 

 BGP Local router ID is 2.2.2.2

 Status codes: * - valid, ^ - VPN best, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

      Network            NextHop         MED        LocPrf   PrefVal Path/Ogn

 *^>i 10.0.0.0           1.1.1.1         0          100        0       i

 * >  10.1.1.0/24        0.0.0.0         0                     0       ?

 * >  20.0.0.0           10.1.1.1        0                     99      200?

 * >i 123.1.1.1/32       1.1.1.1         0          100        0       ?

 * >  124.1.1.1/32       0.0.0.0         0                     0       ?

Table 14 Output description

Field

Description

BGP Local router ID

ID of the BGP-enabled local router.

Status codes

Route status codes. For valid values, see Table 1.

Origin

Route origin codes. For valid values, see Table 1.

Network

Network address in the BGP routing table.

NextHop

Address of the next hop.

MED

Metric associated with the destination network.

LocPrf

Local preference value.

PrefVal

Preference value of the route.

Path/Ogn

AS_PATH attribute/route origin of the route, see Table 1.

 

display bgp vpnv6 all peer

Syntax

display bgp vpnv6 all peer [ ipv4-address verbose | verbose ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor

Parameters

ipv4-address: Specifies a peer by its IPv4 address.

verbose: Displays the detailed information.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv6 all peer command to display information about the BGP VPNv6 peer(s) established between PEs.

If you do not specify any parameter, the command displays the brief information of all peers.

Examples

# Display the brief information of all BGP VPNv6 peers.

<Sysname> display bgp vpnv6 all peer

 

 BGP local router ID : 192.168.1.40

 Local AS number : 200

 Total number of peers : 1                 Peers in established state : 0

 

  Peer                    AS  MsgRcvd  MsgSent OutQ PrefRcv Up/Down  State

 

 192.168.1.40            100        0        0    0       0 00:02:10 Active

Table 15 Output description

Field

Description

Peer

IP address of the peer

AS

AS number of the peer

MsgRcvd

Number of messages received

MsgSent

Number of messages sent

OutQ

Number of messages to be sent to the peer

PrefRcv

Number of prefixes received

Up/Down

Duration of the BGP session in the current state

State

Current state of the peer

 

# Display the detailed information of the BGP VPNv6 peer 1.1.1.1.

<Sysname> display bgp vpnv6 all peer 1.1.1.1 verbose

         Peer: 1.1.1.1   Local: 2.2.2.2

         Type: IBGP link

         BGP version 4, remote router ID 1.1.1.1

         BGP current state: Established, Up for 00h46m01s

         BGP current event: RecvKeepalive

         BGP last state: OpenConfirm

         Port:  Local - 1039     Remote - 179

         Configured: Active Hold Time: 180 sec   Keepalive Time:60 sec

         Received  : Active Hold Time: 180 sec

         Negotiated: Active Hold Time: 180 sec

         Peer optional capabilities:

         Peer support bgp multi-protocol extended

         Peer support bgp route refresh capability

         Address family IPv4 Unicast: advertised and received

         Address family VPNv6: advertised and received

 

 Received: Total 52 messages, Update messages 2

 Sent: Total 65 messages, Update messages 5

 Maximum allowed prefix number: 150000

 Threshold: 75%

 Minimum time between advertisement runs is 15 seconds

 Optional capabilities:

   ORF advertise capability based on Prefix(type 64):

    Local: both

    Negotiated: send

Connect-interface has been configured

 Peer Preferred Value: 0

  BFD: Enabled

 

 Routing policy configured:

 No routing policy is configured

Table 16 Output description

Field

Description

Peer

IP address of the peer.

Local

IP address of the local router.

Type

BGP type.

BGP version

Version of BGP that the peer runs.

remote router ID

Router ID of the remote router.

BGP current state

Current state of the BGP session.

Up for

Duration since the peer is established.

BGP current event

Current event of the BGP session.

BGP last state

State that the BGP session was in before transitioning to the current state.

Port

Local and remote ports of the BGP session.

Configured

Settings of the local timers, including the active hold interval and keepalive interval.

Received

Received active hold interval.

Negotiated

Negotiated active hold interval.

Peer optional capabilities

Optional capabilities of the peer.

Peer support bgp multi-protocol extended

The peer supports multiprotocol extension.

Peer support bgp route refresh capability

The peer supports route refreshing.

Address family IPv4 Unicast

IPv4 unicast family capability.

Address family VPNv6

VPNv6 address family capability.

Received

Total number of received messages and the number of received update messages.

Sent

Total number of sent messages and the number of sent update messages.

Maximum allowed prefix number

Maximum number of routes that the VPN instance supports.

Threshold

Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the device generates a prompt.

Minimum time between advertisement runs

Minimum interval between route advertisements.

Optional capabilities

Local optional capabilities.

ORF advertise capability based on prefix (type 64):

Supports the ORF address prefix capability and the capability value is 64.

Local

Indicates whether the local device supports sending and receiving Route-refresh packets with ORF information. The value can be:

·       both—Supports sending and receiving Route-refresh messages with ORF information.

·       send—Supports sending Route-refresh messages with ORF information.

·       receive—Supports receiving Route-refresh messages with ORF information.

Negotiated

ORF capability negotiated by the local and remote peers. The value can be:

·       send—The local peer can send Route-refresh messages with ORF information and the remote peer can receive Route-refresh messages with ORF information.

·       receive—The local peer can receive Route-refresh messages with ORF information and the remote peer can send Route-refresh messages with ORF information.

This field is displayed only when the ORF capability negotiation is successful.

Connect-interface

Indicates whether a source interface is configured for TCP connection establishment.

Peer Preferred Value

Preference value configured for the routes from the peer.

BFD

Whether BFD is enabled for the peer.

 

display bgp vpnv6 all routing-table

Syntax

display bgp vpnv6 all routing-table [ network-address prefix-length [ longer-prefixes ] | peer ip-address { advertised-routes | received-routes } [ statistic ] | statistic ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor

Parameters

network-address: IPv6 address of the destination network segment.

prefix-length: Length of the prefix, in the range of 0 to 128.

longer-prefixes: Displays each routing entry that meets the following conditions:

1.      Its destination IPv6 address ANDed with the specified prefix equals the specified destination IPv6 address ANDed with the specified prefix.

2.      Its prefix length is shorter than or equal to the specified prefix length.

3.      Its prefix length is the longest among the entries meeting the above two conditions.

peer ip-address: Displays the routing information sent to or received from the specified peer. ip-address is the IPv4 address of the peer.

advertised-routes: Displays the routing information sent to the specified peer.

received-routes: Displays the routing information received from the specified peer.

statistic: Displays BGP VPNv6 route statistics.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv6 all routing-table command to display all BGP VPNv6 routing information.

Examples

# Display all BGP VPNv6 routing information.

<Sysname> display bgp vpnv6 all routing-table

BGP Local router ID is 30.30.30.30.1

 Status codes: * - valid, ^ - VPN best, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 Total number of routes from all PE: 1

 

 Route Distinguisher: 100:1

 

 *^ i Network : 30:30::                                   PrefixLen : 64

      NextHop : ::FFFF:101:102                            LocPrf    : 100

      PrefVal : 0                                         Label     : 1024

      MED     : 0

      Path/Ogn: ?

 

 Total routes of vpn-instance vpn1: 1

 

 

 *^>  Network : 30:30::                                   PrefixLen : 128

      NextHop : ::FFFF:101:102                            LocPrf    : 100

      PrefVal : 0                                         Label     : 1024

      MED     : 0

      Path/Ogn: ?

Table 17 Output description

Field

Description

BGP Local router ID

Router ID of the local BGP router.

Status codes

Route status codes. For more information, see Table 1.

Origin

Route origin codes. For more information, see Table 1.

Total number of routes from all PE

Total number of VPNv6 routes from all PEs.

Network

Destination network address.

PrefixLen

Prefix length of the destination network address.

NextHop

IPv6 address of the next hop.

LocPrf

Local preference value.

PrefVal

Preference value of the route.

Label

Received label.

MED

Metric associated with the destination network.

Path/Ogn

AS_PATH attribute/route origin of the route.

 

# Display all BGP VPNv6 route statistics.

<Sysname> display bgp vpnv6 all routing-table statistic

 

 Total number of routes from all PE: 1

 

 Total routes of vpn-instance vpn1: 2

Table 18 Output description

Field

Description

Total number of routes from all PE

Total number of VPNv6 routes from all PEs

 

display bgp vpnv6 route-distinguisher routing-table

Syntax

display bgp vpnv6 route-distinguisher route-distinguisher routing-table [ network-address prefix-length ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

route-distinguisher: Route distinguisher (RD).

network-address: IPv6 address of the destination segment.

prefix-length: Prefix length, in the range of 0 to 128.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv6 route-distinguisher routing-table command to display the BGP VPNv6 routing information of a specific RD.

Related commands: route-distinguisher.

Examples

# Display the BGP VPNv6 routing information of RD 100:1.

<Sysname> display bgp vpnv6 route-distinguisher 100:1 routing-table

 

 BGP Local router ID is 30.30.30.30.1

 Status codes: * - valid, ^ - VPN best, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 

 *^ i Network : 30:30::                                   PrefixLen : 64

      NextHop : ::FFFF:101:102                            LocPrf    : 100

      PrefVal : 0                                         Label     : 1025

      MED     : 0

      Path/Ogn: ?

Table 19 Output description

Field

Description

BGP Local router ID

Router ID of the local BGP router.

Status codes

Route status codes. For more information, see Table 1.

Origin

Route origin codes. For more information, see Table 1

Network

Destination network address.

PrefixLen

Prefix length of the destination network address.

NextHop

IPv6 address of the next hop.

LocPrf

Local preference value.

PrefVal

Preference value of the route.

Label

Received label.

MED

Metric associated with the destination network.

Path/Ogn

AS_PATH attribute/route origin of the route.

 

display bgp vpnv6 vpn-instance peer

Syntax

display bgp vpnv6 vpn-instance vpn-instance-name peer [ ipv6-address verbose | verbose ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor

Parameters

vpn-instance-name: Name of a VPN instance, a case-sensitive string of 1 to 31 characters.

ipv6-address: IPv6 address of a peer.

verbose: Displays the detailed information.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv6 vpn-instance peer command to display information about the IPv6 BGP peers in the specified VPN instance.

If you do not specify any optional parameters, the command displays the brief information of all IPv6 BGP peers.

Examples

# Display brief information about the IPv6 BGP peers in the VPN instance vpn1.

<Sysname> display bgp vpnv6 vpn-instance vpn1 peer

 

 BGP local router ID : 2.2.2.2

 Local AS number : 100

 Total number of peers : 1                 Peers in established state : 1

 

  Peer                    AS  MsgRcvd  MsgSent OutQ PrefRcv Up/Down  State

  2001::1                200        4        6    0       2 00:00:09 Established

Table 20 Output description

Field

Description

BGP local router ID

Router ID of the local BGP router

Peer

IPv6 address of the peer

AS

AS number of the peer

MsgRcvd

Number of messages received

MsgSent

Number of messages sent

OutQ

Number of messages to be sent to the peer

PrefRcv

Number of prefixes received

Up/Down

Duration of the BGP session in the current state

State

Current state of the peer

 

# Display detailed information about the IPv6 BGP peers in the VPN instance vpn1.

<Sysname> display bgp vpnv6 vpn-instance vpn1 peer verbose

 

         BGP Peer is 2001::1,  remote AS 200,

         Type: EBGP link

         BGP version 4, remote router ID 2.2.2.2

         BGP current state: Established, Up for 00h00m54s

         BGP current event: RecvUpdate

         BGP last state: OpenConfirm

         Port:  Local - 179      Remote - 1024

         Configured: Active Hold Time: 180 sec   Keepalive Time: 60 sec

         Received  : Active Hold Time: 180 sec

         Negotiated: Active Hold Time: 180 sec   Keepalive Time:60 sec

         Peer optional capabilities:

         Peer support bgp multi-protocol extended

         Peer support bgp route refresh capability

         Address family IPv6 Unicast: advertised and received

 

 Received: Total 4 messages, Update messages 2

 Sent: Total 6 messages, Update messages 3

 Maximum allowed prefix number: 4294967295

 Threshold: 75%

 Minimum time between advertisement runs is 30 seconds

 Optional capabilities:

  Route refresh capability has been enabled

 Peer Preferred Value: 0

 

 Routing policy configured:

 No routing policy is configured

Table 21 Output description

Field

Description

BGP Peer

IPv6 address of the BGP peer.

remote AS

AS number of the peer.

Type

BGP type.

BGP version

Version of BGP that the peer runs.

remote router ID

Router ID of the peer.

BGP current state

Current state of the BGP session.

Up for

Duration since the peer is established.

BGP current event

Current event of the BGP session.

BGP last state

State that the BGP session was in before transitioning to the current state.

Port

Local and remote ports of the BGP session.

Configured

Settings of the local timers, including the active hold interval and keepalive interval.

Received

Received active hold interval.

Negotiated

Negotiated active hold interval.

Peer optional capabilities

Optional capabilities of the peer.

Peer support bgp multi-protocol extended

The peer supports multiprotocol extension.

Peer support bgp route refresh capability

The peer supports route refreshing.

Address family IPv6 Unicast

IPv6 unicast family capability.

Received

Total number of received messages and the number of received update messages.

Sent

Total number of sent messages and the number of sent update messages.

Maximum allowed prefix number

Maximum number of routes that the VPN instance supports.

Threshold

Threshold for warning. When the percentage of the number of the received route prefixes to the maximum number of routes supported reaches this value, the router generates a prompt.

Minimum time between advertisement runs

Minimum interval between route advertisements.

Optional capabilities

Local optional capabilities.

Route refresh capability

Whether route refreshing is enabled.

Peer Preferred Value

Preference value specified for routes from the peer.

 

display bgp vpnv6 vpn-instance routing-table

Syntax

display bgp vpnv6 vpn-instance vpn-instance-name routing-table [ network-address prefix-length [ longer-prefixes ] | peer ipv6-address { advertised-routes | received-routes } ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.

network-address: IPv6 address of the destination network segment.

prefix-length: Length of the prefix, in the range of 0 to 128.

longer-prefixes: Displays each routing entry that meets the following conditions:

1.      Its destination IPv6 address ANDed with the specified prefix equals the specified destination IPv6 address ANDed with the specified prefix.

2.      Its prefix length is shorter than or equal to the specified prefix length.

3.      Its prefix length is the longest among the entries meeting the above two conditions.

peer ipv6-address: Displays the routing information sent to or received from the specified BGP VPNv6 peer. ipv6-address is the IPv6 address of the peer.

advertised-routes: Displays the routing information sent to the specified peer.

received-routes: Displays the routing information received from the specified peer.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display bgp vpnv6 vpn-instance routing-table command to display the BGP VPNv6 routing information of the specified VPN.

Examples

# Display the BGP VPNv6 routing information of VPN instance vpn1.

<Sysname> display bgp vpnv6 vpn-instance vpn1 routing-table

 BGP Local router ID is 1.1.1.1

 Status codes: * - valid, ^ - VPN best, > - best, d - damped,

               h - history,  i - internal, s - suppressed, S - Stale

               Origin : i - IGP, e - EGP, ? - incomplete

 

 Total routes of vpn-instance vpn1: 1

 

 *^>  Network : 324::                                    PrefixLen : 64

      NextHop : 100::2                                   LocPrf    : 100

      PrefVal : 0                                        Label     : NULL

      MED     : 0

      Path/Ogn: ?

Table 22 Output description

Field

Description

BGP Local router ID

Router ID of the local BGP router.

Status codes

Route status codes. For more information, see Table 1.

Origin

Route origin codes. For more information, see Table 1.

Network

Destination network address.

PrefixLen

Prefix length of the destination network address.

NextHop

IPv6 address of the next hop.

LocPrf

Local preference value.

PrefVal

Preference value of the route.

Label

Received label.

MED

Metric associated with the destination network.

Path/Ogn

AS_PATH attribute/route origin of the route. See Table 1.

 

display fib vpn-instance

Syntax

display fib vpn-instance vpn-instance-name [ acl acl-number | ip-prefix ip-prefix-name ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.

acl acl-number: Displays the FIB information of the VPN instance permitted by the specified ACL. acl-number is the number of the ACL, in the range of from 2000 to 2999. If the specified ACL does not exist, the command displays all FIB information of the VPN instance.

ip-prefix ip-prefix-name: Displays the FIB information of the VPN instance permitted by the specified IP prefix list. The ip-prefix-name argument is the name of the IP prefix list, a case-sensitive string of 1 to 19 characters. If the specified IP prefix list does not exist, the command displays all FIB information of the VPN instance.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display fib vpn-instance command to display FIB information for a VPN.

If no parameter is specified, all FIB information for the VPN will be displayed.

Examples

# Display all FIB information for the VPN instance vpn1.

<Sysname> display fib vpn-instance vpn1

FIB entry count: 4

 

Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

 

Destination/Mask  Nexthop     Flag     OutInterface  InnerLabel Token 

10.2.0.0/16       10.2.1.1    U        GE3/1/1       Null       Invalid

10.2.1.1/32       127.0.0.1   UH       InLoop0       Null       Invalid

127.0.0.0/8       127.0.0.1   U        InLoop0       Null       Invalid

127.0.0.1/32      127.0.0.1   UH       InLoop0       Null       Invalid

# Display the FIB information that begins with the line containing the string 127 for the VPN instance vpn1.

<Sysname> display fib vpn-instance vpn1 | begin 127

Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

 

Destination/Mask  Nexthop     Flag     OutInterface  InnerLabel Token 

10.2.1.1/32       127.0.0.1   UH       InLoop0       Null       Invalid

127.0.0.0/8       127.0.0.1   U        InLoop0       Null       Invalid

127.0.0.1/32      127.0.0.1   UH       InLoop0       Null       Invalid

# Display the FIB information permitted by ACL 2000 for the VPN instance vpn1.

<Sysname> system-view

[Sysname] acl number 2000

[Sysname-acl-basic-2000] rule permit source 10.2.0.0 0.0.255.255

[Sysname-acl-basic-2000] display fib vpn-instance vpn1 acl 2000

FIB entry count: 2

 

Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

 

Destination/Mask  Nexthop     Flag     OutInterface  InnerLabel Token 

10.2.0.0/16       10.2.1.1    U        GE3/1/1       Null       Invalid

10.2.1.1/32       127.0.0.1   UH       InLoop0       Null       Invalid

# Display the FIB information permitted by the IP prefix abc0 for the VPN instance vpn1.

<Sysname> system-view

[Sysname] ip ip-prefix abc0 permit 10.2.0.0 16

[Sysname] display fib vpn-instance vpn1 ip-prefix abc0

FIB entry count: 1

 

Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

 

Destination/Mask Nexthop     Flag     OutInterface  InnerLabel Token 

10.2.0.0/16      10.2.1.1    U        GE3/1/1       Null       Invalid

Table 23 Output description

Field

Description

FIB entry count

Number of entries in the FIB

Destination/Mask

Destination address/mask length

Nexthop

Address of the next hop

Flag

Flag of the route. Possible values are:

·       UUsable route

·       GGateway route

·       HHost route

·       BBlackhole route

·       DDynamic route

·       SStatic route

OutInterface

Forwarding interface

Token

LSP index number, used to associate an Next Hop Label Forwarding Entry (NHLFE) entry

 

display fib vpn-instance ip-address

Syntax

display fib vpn-instance vpn-instance-name ip-address [ mask | mask-length ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.

ip-address: Destination IP address, in dotted decimal format.

mask: Mask of the IP address, in dotted decimal format.

mask-length: Length of the IP address mask, in the range of 0 to 32.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display fib vpn-instance ip-address command to display the FIB information that matches the specified destination IP address in the specified VPN.

If neither the mask nor the mask-length argument is specified, the command displays the FIB information that matches the specified destination IP address and has the longest mask in the specified VPN. Otherwise, the command displays the FIB information that exactly matches the specified destination IP address and mask in the specified VPN.

Examples

# Display the FIB information that matches the destination IP address 10.2.1.1 in the VPN instance vpn1.

<Sysname> display fib vpn-instance vpn1 10.2.1.1

FIB entry count: 1

Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

 

Destination/Mask  Nexthop     Flag     OutInterface  InnerLabel Token 

10.2.1.1/32       127.0.0.1   UH       InLoop0       Null       Invalid

For information about the command output, see Table 23.

display ip vpn-instance

Syntax

display ip vpn-instance [ instance-name vpn-instance-name ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

instance-name vpn-instance-name: Displays information about the specified VPN instance. vpn-instance-name represents the VPN instance name, a case-sensitive string of 1 to 31 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display ip vpn-instance command to display information about a VPN instance or all VPN instances.

If you do not specify any parameter, the command displays brief information about all VPN instances.

Examples

# Display information about all VPN instances.

<Sysname> display ip vpn-instance

  Total VPN-Instances configured : 2

 

  VPN-Instance Name      RD          Create Time

  vpn1                  22:1         2007/10/13 09:32:45

  vpn2                  33:3         2007/10/13 09:42:59

Table 24 Output description

Field

Description

VPN-Instance Name

Name of the VPN instance

RD

RD of the VPN instance

Create Time

Time when the VPN instance was created

 

# Display detailed information about a VPN instance.

<Sysname> display ip vpn-instance instance-name vpn1

  VPN-Instance Name and ID : vpn1, 1

  Create time : 2002/08/16 05:27:29

  Up time : 0 days, 00 hours, 01 minutes and 39 seconds

  Route Distinguisher : 101:1

  Description : This is vpn1

  Export VPN Targets :  1:1

  Import VPN Targets :  1:1

  Import Route Policy : policy3

  Export Route Policy : policy2

  Tunnel Policy : policy1

  Maximum Routes Limit : 600

  IPv6 Export VPN Targets :  1:1

  IPv6 Import VPN Targets :  1:1

  IPv6 Import Route Policy : policy4

  IPv6 Export Route Policy : policy1

  IPv6 Tunnel Policy : policy1

  IPv6 Maximum Routes Limit : 600

  Interfaces : GigabitEthernet4/1/1

Table 25 Output description

Field

Description

VPN-Instance Name and ID

Name and ID of the VPN instance

Create time

Time when the VPN instance was created

Up time

Duration of the VPN instance

Route Distinguisher

RD of the VPN instance

Description

Description of the VPN instance

Export VPN Targets

Export target attribute of the IPv4 VPN

Import VPN Targets

Import target attribute of the IPv4 VPN

Import Route Policy

Import routing policy of the IPv4 VPN

Export Route Policy

Export routing policy of the IPv4 VPN

Tunnel Policy

Tunneling policy of the IPv4 VPN

Maximum Routes Limit

Maximum number of IPv4 VPN routes

IPv6 Export VPN Targets

Export target attribute of the IPv6 VPN

IPv6 Import VPN Targets

Import target attribute of the IPv6 VPN

IPv6 Import Route Policy

Import routing policy of the IPv6 VPN

IPv6 Export Route Policy

Export routing policy of the IPv6 VPN

IPv6 Tunnel Policy

Tunneling policy of the IPv6 VPN

IPv6 Maximum Routes Limit

Maximum number of IPv6 VPN routes

Interfaces

Interface to which the VPN instance is bound

 

display ipv6 fib vpn-instance

Syntax

display ipv6 fib vpn-instance vpn-instance-name [ acl6 acl6-number | ipv6-prefix ipv6-prefix-name ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.

acl6 acl6-number: Displays the IPv6 FIB information of the VPN instance permitted by the specified ACL. acl6-number is the number of the ACL, in the range of from 2000 to 2999. If the specified ACL does not exist, the command displays all IPv6 FIB information of the VPN instance.

ipv6-prefix ipv6-prefix-name: Displays the IPv6 FIB information of the VPN instance permitted by the specified prefix list. ipv6-prefix-name is the name of the IPv6 prefix list, a case-sensitive string of 1 to 19 characters. If the specified IPv6 prefix list does not exist, the command displays all IPv6 FIB information of the VPN instance.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display ipv6 fib vpn-instance command to display the IPv6 FIB information of the specified VPN.

If you do not specify any optional parameters, the command displays all IPv6 FIB information of the VPN.

Examples

# Display all IPv6 FIB information of VPN instance vpn1.

<Sysname> display ipv6 fib vpn-instance vpn1

FIB Table:

 Total number of Routes : 1

 

 Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

 

Destination:    ::1                                     PrefixLength : 128

NextHop    :    ::1                                     Flag         : UH

Label      :    Null                                    Token        : Invalid

Interface  :    InLoopBack0

Table 26 Output description

Field

Description

Total number of Routes

Total number of matched routes in the FIB

Flag

Flag of the route. Possible values are:

·       U—Usable route

·       G—Gateway route.

·       H—Host route.

·       B—Blackhole route.

·       D—Dynamic route.

·       S—Static route.

Label

Label value added to a packet

Token

LSP index, used to associate an NHLFE entry

Interface

Outgoing interface of packets

 

display ipv6 fib vpn-instance ipv6-address

Syntax

display ipv6 fib vpn-instance vpn-instance-name ipv6-address [ prefix-length ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

vpn-instance-name: VPN instance name, a case-sensitive string of 1 to 31 characters.

ipv6-address: Destination IPv6 address.

prefix-length: Prefix length of the destination IPv6 address, in the range of 0 to 128.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display ipv6 fib vpn-instance ipv6-address command to display a VPN’s IPv6 FIB information that matches a destination IPv6 address.

If you do not specify the prefix length, the command displays the matched IPv6 FIB information that has the longest prefix. If you specify the prefix length, the command displays the matched IPv6 FIB information that has the exact prefix length.

Examples

# Displays the IPv6 FIB information with the destination address of ::1 in the VPN instance vpn1.

<Sysname> display ipv6 fib vpn-instance vpn1 ::1

FIB Table:

 Total number of Routes : 1

 

 Flag:

  U:Useable   G:Gateway   H:Host   B:Blackhole   D:Dynamic   S:Static

 

Destination:    ::1                                     PrefixLength : 128

NextHop    :    ::1                                     Flag         : UH

Label      :    Null                                    Token        : Invalid

Interface  :    InLoopBack0

Table 27 Output description

Field

Description

Total number of Routes

Total number of matched routes in the FIB

Flag

Flag of the route. Possible values are:

·       U—Usable route

·       G—Gateway route

·       H—Host route

·       B—Blackhole route

·       D—Dynamic route

·       S—Static route

Label

Label value added to a packet

Token

LSP index, used to associate an NHLFE entry

Interface

Outgoing interface of packets

 

display mpls ldp vpn-instance

Syntax

display mpls ldp vpn-instance vpn-instance-name [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor view

Parameters

vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 80 characters.

Description

Use the display mpls ldp vpn-instance command to display information about an LDP instance.

Related commands: mpls ldp vpn-instance.

Examples

# Display information about the LDP instance named vpn1.

<Sysname> display mpls ldp vpn-instance vpn1

                           LDP Global Information

--------------------------------------------------------------------

 Protocol Version        : V1           Neighbor Liveness    : 60 Sec

 Graceful Restart        : Off          FT Reconnect Timer   : 60 Sec

 MTU Signaling           : Off          Recovery Timer       : 60 Sec

 

                          LDP Instance Information

--------------------------------------------------------------------

 Instance ID             : 1            VPN-Instance         : vpn1

 Instance Status         : Active       LSR ID               : 1.1.1.9

 Hop Count Limit         : 32           Path Vector Limit    : 32

 Loop Detection          : Off

 DU Re-advertise Timer   : 30 Sec       DU Re-advertise Flag : On

 DU Explicit Request     : Off          Request Retry Flag   : On

 Label Distribution Mode : Ordered      Label Retention Mode : Liberal

Table 28 Output description

Field

Description

Protocol Version

Version of the LDP protocol.

Neighbor Liveness

Neighbor liveness timer of LDP GR.

Graceful Restart

Whether GR is enabled for LDP.

FT Reconnect Timer

FT reconnect timer of LDP GR.

MTU Signaling

Whether MTU signaling is supported. The device does not support MTU signaling.

Recovery Timer

Recover timer of LDP GR.

VPN-Instance

Name of the LDP-enabled VPN instance.

Loop Detection

Whether loop detection is enabled.

DU Re-advertise Timer

Label re-advertisement timer for DU mode.

DU Re-advertise Flag

Whether label re-advertisement is enabled for DU mode.

DU Explicit Request

Whether explicit request transmission is enabled for DU mode.

Request Retry Flag

Whether request retransmission is enabled.

Label Distribution Mode

Label distribution control mode of the instance, Ordered or Independent.

Label Retention Mode

Label retention mode of the instance. The router supports only the Liberal mode.

 

display ospf sham-link

Syntax

display ospf [ process-id ] sham-link [ area area-id ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

process-id: OSPF process ID, in the range of 1 to 65535.

area area-id: Specifies an OSPF area by the area ID, which can be an integer in the range of 0 to 4294967295 or in the format of an IPv4 address.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display ospf sham-link command to display information about sham links.

With neither process ID nor area ID specified, the command displays information about all configured sham links.

Related commands: sham-link.

Examples

# Display information about all OSPF sham links.

<Sysname> display ospf sham-link

 

          OSPF Process 100 with Router ID 100.1.1.2

 Sham Link:

 Area            NeighborId      Source-IP       Destination-IP  State Cost

 0.0.0.1         120.1.1.2       3.3.3.3         5.5.5.5         P-2-P 10

Table 29 Output description

Field

Description

Area

OSPF area to which the sham link belongs

NeighborId

Router ID of the sham link neighbor

Source-IP

Source IP address of the sham link

Destination-IP

Destination IP address of the sham link

State

Status of the sham link interface

Cost

Cost of the sham link

 

# Display information about OSPF sham links in area 1.

<Sysname> display ospf sham-link area 1

 

          OSPF Process 100 with Router ID 100.1.1.2

 

  Sham-Link: 3.3.3.3 --> 5.5.5.5

  Neighbor ID: 120.1.1.2     State: Full

  Area: 0.0.0.1

  Cost: 10  State: P-2-P  Type: Sham

  Timers: Hello 10, Dead 40, Retransmit 5, Transmit Delay 1

Table 30 Output description

Field

Description

Sham-Link

Sham link expressed in the format of source IP address to destination IP address

Neighbor ID

Router ID of the sham link neighbor

State

Status of the sham link neighbor

Area

Destination IP address of the sham link

Cost

Cost of the sham link

State

Status of the sham link

Type

Type of the sham link

Timers

Timers of the sham link

 

display tunnel-policy

Syntax

display tunnel-policy { all | policy-name tunnel-policy-name } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Specifies all tunneling policies.

tunnel-policy-name: Name of a tunneling policy, a string of 1 to 19 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display tunnel-policy command to display information about a tunneling policy or all tunneling policies.

Related commands: tunnel-policy and tunnel select-seq.

Examples

# Display all tunneling policies.

<Sysname>display tunnel-policy all

Tunnel Policy Name   Select-Seq       Load balance No

------------------------------------------------------

t                    LSP              1

aaa                  LSP CR-LSP       1

bbb                  LSP              1

# Display tunneling policy aaa.

<Sysname> display tunnel-policy policy-name aaa

Tunnel Policy Name   Select-Seq       Load balance No

------------------------------------------------------

aaa                  LSP CR-LSP       1

Table 31 Output description

Field

Description

Tunnel Policy Name

Name of the tunneling policy

Select-Seq

preference order for tunnel selection

Load balance No

Number of tunnels for load balancing

 

display vpn label operation

Syntax

display vpn label operation [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display vpn label operation command to display the VPN label processing mode on an egress PE.

Examples

# Display the VPN label processing mode.

<Sysname> display vpn label operation

Pop VPN label and forward.

The above output indicates that the VPN label processing mode on the current egress PE is outbound interface based forwarding.

# Display the VPN label processing mode.

<Sysname> display vpn label operation

Pop VPN label and look up FIB entry.

The above output indicates that the VPN label processing mode on the current egress PE is FIB based forwarding.

domain-id

Syntax

domain-id domain-id [ secondary ]

undo domain-id [ domain-id ]

View

OSPF view

Default level

2: System level

Parameters

domain-id: OSPF domain ID, which can be in one of the following formats:

·           Integer, in the range of 0 to 4294967295. For example, 1.

·           Dotted decimal notation. For example, 0.0.0.1.

·           Dotted decimal notation:16-bit user-defined number, in the range of 0 to 65535. For example, 0.0.0.1:512.

secondary: Uses the domain ID as secondary. With this keyword not specified, the domain ID configured is primary.

Description

Use the domain-id command to configure an OSPF domain ID.

Use the undo domain-id command to restore the default.

By default, the OSPF domain ID is 0.

With no parameter specified, the undo domain-id command deletes all domain IDs.

Usually, routes injected from PEs are advertised as External-LSAs. However, routes to different destinations in the same OSPF domain must be advertised as Type-3 LSAs. Therefore, you must use the same domain ID for an OSPF domain.

Examples

# Configure the OSPF domain ID.

<Sysname> system-view

[Sysname] ospf 100

[Sysname-ospf-100] domain-id 234

export route-policy

Syntax

export route-policy route-policy

undo export route-policy

View

VPN instance view, IPv4 VPN view, IPv6 VPN view

Default level

2: System level

Parameters

route-policy: Name of an export routing policy, a case-sensitive string of 1 to 63 characters.

Description

Use the export route-policy command to apply an export routing policy to a VPN instance, an IPv4 VPN, or an IPv6 VPN.

Use the undo export route-policy command to remove the application.

By default, no policy is applied to filter the routes to be advertised.

You can specify an export routing policy when the VPN route advertisement control provided by the extended community attributes is not enough.

An export routing policy specified in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.

An export routing policy specified in IPv4 VPN view is applicable to only the IPv4 VPN.

An export routing policy specified in IPv6 VPN view is applicable to only the IPv6 VPN.

An export routing policy specified in IPv4 VPN view or IPv6 VPN view takes precedence over that specified in VPN instance view. If you specify an export routing policy in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, the policy specified in IPv4 VPN view (or IPv6 VPN view) is applied to the IPv4 VPN (or IPv6 VPN).

Examples

# Apply export routing policy poly-1 to VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] export route-policy poly-1

[Sysname-vpn-instance-vpn1] quit

# Apply export routing policy poly-2 to the IPv4 VPN of VPN instance vpn2.

<Sysname> system-view

[Sysname] ip vpn-instance vpn2

[Sysname-vpn-instance-vpn2] ipv4-family

[Sysname-vpn-ipv4-vpn2] export route-policy poly-2

[Sysname-vpn-ipv4-vpn2] quit

[Sysname-vpn-instance-vpn2] quit

# Apply export routing policy poly-3 to the IPv6 VPN of VPN instance vpn3.

<Sysname> system-view

[Sysname] ip vpn-instance vpn3

[Sysname-vpn-instance-vpn3] ipv6-family

[Sysname-vpn-ipv6-vpn3] export route-policy poly-3

ext-community-type

Syntax

ext-community-type { domain-id type-code1 | router-id type-code2 | route-type type-code3 }

undo ext-community-type { domain-id | router-id | route-type }

View

OSPF view

Default level

2: System level

Parameters

domain-id type-code1: Specifies the type code for the OSPF extended community attribute of Domain ID. Valid values are 0x0005, 0x0105, 0x0205, and 0x8005.

router-id type-code2: Specifies the type code for the OSPF extended community attribute of Router ID. Valid values are 0x0107 and 0x8001.

router-type type-code3: Specifies the type code for the OSPF extended community attribute of Route Type. Valid values are 0x0306 and 0x8000.

Description

Use the ext-community-type command to configure the type code of an OSPF extended community attribute.

Use the undo ext-community-type command to restore the default.

By default, the type codes for the OSPF extended community attributes of Domain ID, Router ID, and Route Type are 0x0005, 0x0107, and 0x0306 respectively.

Examples

# Configure the type codes of OSPF extended community attributes Domain ID, Router ID, and Route Type as 0x8005, 0x8001, and 0x8000 respectively for OSPF process 100.

<Sysname> system-view

[Sysname] ospf 100

[Sysname-ospf-100] ext-community-type domain-id 8005

[Sysname-ospf-100] ext-community-type router-id 8001

[Sysname-ospf-100] ext-community-type route-type 8000

filter-policy export (BGP-VPNv4 subaddress family view)

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ direct | isis process-id | ospf process-id | rip process-id | static ]

undo filter-policy export [ direct | isis process-id | ospf process-id | rip process-id | static ]

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

acl-number: IP ACL number, in the range of 2000 to 3999.

ip-prefix ip-prefix-name: Specifies an IP address prefix list by its name, a string of 1 to 19 characters.

direct: Filters direct routes to be advertised.

isis process-id: Filters ISIS routes to be advertised that are from a specific ISIS process. The process-id argument is in the range of 1 to 65535.

ospf process-id: Filters OSPF routes to be advertised that are from a specific OSPF process. The process-id argument is in the range of 1 to 65535.

rip process-id: Filters RIP routes to be advertised that are from a specific RIP process. The process-id argument is in the range of 1 to 65535.

static: Filters static routes to be advertised.

Description

Use the filter-policy export command to filter all types or certain types of routes to be advertised.

Use the undo filter-policy export command to remove the configuration.

If you specify no routing protocol parameters for the filter-policy export command, all routes to be advertised will be filtered.

By default, MP-BGP does not filter routes to be advertised.

Only routes that survive the filtering are advertised by MP-BGP.

Examples

# In BGP-VPNv4 subaddress family view, use ACL 2555 to filter routes to be advertised by MP-BGP.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] filter-policy 2555 export

filter-policy export (BGP-VPNv6 subaddress family view)

Syntax

filter-policy { acl6-number | ipv6-prefix ipv6-prefix-name } export [ direct | isisv6 process-id | ospfv3 process-id | ripng process-id | static ]

undo filter-policy export [ direct | isisv6 process-id | ospfv3 process-id | ripng process-id | static ]

View

BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

acl6-number: IPv6 ACL number, in the range of 2000 to 3999.

ipv6-prefix ipv6-prefix-name: Specifies an IPv6 address prefix list by its name, a string of 1 to 19 characters.

direct: Filters direct routes to be advertised.

isisv6 process-id: Filters IPv6 ISIS routes to be advertised that are from a specific IPv6 ISIS process. The process-id argument is in the range of 1 to 65535.

ospfv3 process-id: Filters OSPFv3 routes to be advertised that are from a specific OSPFv3 process. The process-id argument is in the range of 1 to 65535.

ripng process-id: Filters RIPng routes to be advertised that are from a specific RIPng process. The process-id argument is in the range of 1 to 65535.

static: Filters static routes to be advertised.

Description

Use the filter-policy export command to filter all or certain types of routes to be advertised.

Use the undo filter-policy export command to remove the configuration.

By default, MP-BGP does not filter routes to be advertised.

Only routes that survive the filtering are advertised by MP-BGP.

If you specify no routing protocol parameters for the filter-policy export command, all routes to be advertised are filtered.

Examples

# In BGP-VPNv6 subaddress family view, use ACL 2555 to filter routes to be advertised by MP-BGP.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] filter-policy 2555 export

filter-policy import (BGP-VPNv4 subaddress family view)

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } import

undo filter-policy import

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

acl-number: IP ACL number, in the range of 2000 to 3999.

ip-prefix ip-prefix-name: Specifies an IP address prefix list by its name, a string of 1 to 19 characters.

Description

Use the filter-policy import command to filter received routes.

Use the undo filter-policy import command to remove the configuration.

By default, received routes are not filtered.

Only routes that survive the filtering are added into the BGP routing table.

Examples

# In BGP-VPNv4 subaddress family view, use ACL 2255 to filter received routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] filter-policy 2255 import

filter-policy import (BGP-VPNv6 subaddress family view)

Syntax

filter-policy { acl6-number | ipv6-prefix ipv6-prefix-name } import

undo filter-policy import

View

BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

acl6-number: IPv6 ACL number, in the range of 2000 to 3999.

ipv6-prefix ipv6-prefix-name: Specifies an IPv6 address prefix list by its name, a string of 1 to 19 characters.

Description

Use the filter-policy import command to filter received routes.

Use the undo filter-policy import command to remove the configuration.

By default, received routes are not filtered.

Only routes that survive the filtering are added into the BGP routing table.

Examples

# In BGP-VPNv6 subaddress family view, use ACL 2555 to filter received routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] filter-policy 2255 import

import route-policy

Syntax

import route-policy route-policy

undo import route-policy

View

VPN instance view, IPv4 VPN view, IPv6 VPN view

Default level

2: System level

Parameters

route-policy: Name of an import routing policy, a case-sensitive string of 1 to 63 characters.

Description

Use the import route-policy command to apply an import routing policy to a VPN instance, an IPv4 VPN or an IPv6 VPN.

Use the undo import route-policy command to remove the application.

By default, all routes permitted by the import target attribute are accepted.

You can specify an import routing policy when the route redistribution control provided by the extended community attributes is not enough.

An import routing policy specified in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.

An import routing policy specified in IPv4 VPN view is applicable to only the IPv4 VPN.

An import routing policy specified in IPv6 VPN view is applicable to only the IPv6 VPN.

An import routing policy specified in IPv4 VPN view or IPv6 VPN view takes precedence over that specified in VPN instance view. If you specify an import routing policy in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, the policy specified in IPv4 VPN view (or IPv6 VPN view) is applied to the IPv4 VPN (or IPv6 VPN).

Examples

# Apply import routing policy poly-1 to VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] import route-policy poly-1

[Sysname-vpn-instance-vpn1] quit

# Apply import routing policy poly-2 to the IPv4 VPN of VPN instance vpn2.

<Sysname> system-view

[Sysname] ip vpn-instance vpn2

[Sysname-vpn-instance-vpn2] ipv4-family

[Sysname-vpn-ipv4-vpn2] import route-policy poly-2

[Sysname-vpn-ipv4-vpn2] quit

[Sysname-vpn-instance-vpn2] quit

# Apply import routing policy poly-3 to the IPv6 VPN of VPN instance vpn3.

<Sysname> system-view

[Sysname] ip vpn-instance vpn3

[Sysname-vpn-instance-vpn3] ipv6-family

[Sysname-vpn-ipv6-vpn3] import route-policy poly-3

ip binding vpn-instance

Syntax

ip binding vpn-instance vpn-instance-name

undo ip binding vpn-instance vpn-instance-name

View

Interface view

Default level

2: System level

Parameters

vpn-instance-name: Name of the VPN instance to be associated, a case-sensitive string of 1 to 31 characters.

Description

Use the ip binding vpn-instance command to associate an interface with a VPN instance.

Use the undo ip binding vpn-instance command to remove the association.

By default, an interface is associated with no VPN instance; it belongs to the public network.

When configured on an interface, the ip binding vpn-instance command clears the IP address of the interface. You must re-configure the IP address of the interface after configuring the command.

 

CAUTION

CAUTION:

If you configure an IPv6 address for an interface associated with a VPN, the number of VPNs that the router can support will reduce.

 

Examples

# Associate interface GigabitEthernet 4/1/1 with VPN instance vpn1.

<Sysname> system-view

[Sysname] interface GigabitEthernet 4/1/1

[Sysname-GigabitEthernet4/1/1] ip binding vpn-instance vpn1

ip vpn-instance

Syntax

ip vpn-instance vpn-instance-name

undo ip vpn-instance vpn-instance-name

View

System view

Default level

2: System level

Parameters

vpn-instance-name: Name for the VPN instance, a case-sensitive string of 1 to 31 characters.

Description

Use the ip vpn-instance command to create a VPN instance and enter VPN instance view.

Use the undo ip vpn-instance command to delete a VPN instance.

A VPN instance takes effect only after you configure an RD for it.

Related commands: route-distinguisher.

Examples

# Create a VPN instance named vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1]

ipv4-family (BGP view)

Syntax

ipv4-family { vpn-instance vpn-instance-name | vpnv4 }

undo ipv4-family { vpn-instance vpn-instance-name | vpnv4 }

View

BGP view

Default level

2: System level

Parameters

vpn-instance vpn-instance-name: Associates a VPN instance with an IPv4 address family and enter BGP VPN instance view. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters.

vpnv4: Enters BGP-VPNv4 subaddress family view.

Description

Use the ipv4-family command in BGP view to enter BGP-VPNv4 subaddress family view or BGP VPN instance view.

Use the undo ipv4-family command to remove all configurations performed in either of the two views.

Before entering BGP VPN instance view, you must create the VPN instance.

Examples

# Enter BGP-VPNv4 subaddress family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4]

# Associate VPN instance vpn1 with an IPv4 address family and enter BGP VPN instance view.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] quit

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpn-instance vpn1

[Sysname-bgp-vpn1]

ipv4-family (VPN instance view)

Syntax

ipv4-family

undo ipv4-family

View

VPN instance view

Default level

2: System level

Parameters

None

Description

Use the ipv4-family command in VPN instance view to enter IPv4 VPN view.

Use the undo ipv4-family command to remove all configurations performed in IPv4 VPN view.

Examples

# Enter IPv4 VPN view.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] ipv4-family

[Sysname-vpn-ipv4-vpn1]

ipv6-family (BGP view)

Syntax

ipv6-family { vpn-instance vpn-instance-name | vpnv6 }

undo ipv6-family { vpn-instance vpn-instance-name | vpnv6 }

View

BGP view

Default level

2: System level

Parameters

vpn-instance vpn-instance-name: Associates a VPN instance with an IPv6 address family and enters IPv6 BGP-VPN instance view. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.

vpnv6: Enters BGP-VPNv6 subaddress family view.

Description

Use the ipv6-family command in BGP view to enter BGP-VPNv6 subaddress family view or IPv6 BGP-VPN instance view.

Use the undo ipv6-family command to remove all configurations performed in BGP-VPNv6 subaddress family view or IPv6 BGP-VPN instance view.

Before entering IPv6 BGP-VPN instance view, you must create the VPN instance.

Examples

# Enter BGP-VPNv6 subaddress family view.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6]

# Associate VPN instance vpn1 with the IPv6 address family and enter IPv6 BGP-VPN instance view.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] quit

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpn-instance vpn1

[Sysname-bgp-vpn1]

ipv6-family (VPN instance view)

Syntax

ipv6-family

undo ipv6-family

View

VPN instance view

Default level

2: System level

Parameters

None

Description

Use the ipv6-family command in VPN instance view to enter IPv6 VPN view.

Use the undo ipv6-family command to remove all configurations performed in IPv6 VPN view.

Examples

# Enter IPv6 VPN view.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] ipv6-family

[Sysname-vpn-ipv6-vpn1]

mpls ldp vpn-instance

Syntax

mpls ldp vpn-instance vpn-instance-name

undo mpls ldp vpn-instance vpn-instance-name

View

System view

Default level

2: System level

Parameters

vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.

Description

Use the mpls ldp vpn-instance command to enable LDP for a VPN instance, create an LDP instance, and enter MPLS LDP VPN instance view.

Use the undo mpls ldp vpn-instance command to disable LDP for a VPN instance and remove the LDP instance.

By default, a VPN instance is not enabled with LDP.

Before configuring the mpls ldp vpn-instance command, you need to configure the MPLS LSR ID and enable MPLS for the device.

Related commands: mpls and mpls lsr-id.

Examples

# Enable LDP for VPN instance vpn1, create the LDP instance and enter the MPLS LDP VPN instance view.

<Sysname> System-view

[Sysname] mpls ldp vpn-instance vpn1

[Sysname-mpls-ldp-vpn-instance-vpn1]

nesting-vpn

Syntax

nesting-vpn

undo nesting-vpn

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

None

Description

Use the nesting-vpn command to enable the nested VPN function.

Use the undo nesting-vpn command to disable the nested VPN function.

By default, the nested VPN function is disabled.

If a nested VPN peer connected to a PE needs to advertise VPNv4 routes, you need to enable nested VPN on the PE.

Examples

# Enable nested VPN.

<Sysname> system-view

[Sysname] bgp 10

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] nesting-vpn

peer advertise-community (BGP-VPNv4 subaddress family view)

Syntax

peer { group-name | ip-address } advertise-community

undo peer { group-name | ip-address } advertise-community

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer advertise-community command to specify to advertise community attributes to a peer or peer group.

Use the undo peer advertise-community command to remove the configuration.

By default, no community attributes are advertised to any peer or peer group.

Examples

# In BGP-VPNv4 subaddress family view, specify to advertise community attributes to peer 3.3.3.3.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 3.3.3.3 advertise-community

peer allow-as-loop

Syntax

peer { group-name | ip-address } allow-as-loop [ number ]

undo peer { group-name | ip-address } allow-as-loop

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

number: Maximum number that the local AS number can appear repeatedly in the AS-PATH attribute. It ranges from 1 to 10 and defaults to 1.

Description

Use the peer allow-as-loop command to allow the local AS number to appear in the AS-PATH attribute of a received route and to set the allowed maximum number of repetitions.

Use the undo peer allow-as-loop command to remove the configuration.

Examples

# In BGP-VPNv4 subaddress family view, allow the local AS number to appear repeatedly in the AS-PATH attribute of a route received from peer 1.1.1.1 for up to twice.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 allow-as-loop 2

# In BGP-L2VPN address family view, allow the local AS number to appear repeatedly in the AS-PATH attribute of a route received from peer 1.1.1.1 for up to twice.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] peer 1.1.1.1 allow-as-loop 2

# In VPLS address family view, allow the local AS number to appear repeatedly in the AS-PATH attribute of a route received from peer 1.1.1.1 for up to twice.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] peer 1.1.1.1 allow-as-loop 2

peer as-path-acl (BGP-VPNv4 subaddress family view)

Syntax

peer { group-name | ip-address } as-path-acl as-path-acl-number { import | export }

undo peer { group-name | ip-address } as-path-acl as-path-acl-number { import | export }

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

as-path-acl-number: AS_PATH filtering list number, in the range of 1 to 256.

import: Filters the received routes.

export: Filters the routes to be advertised.

Description

Use the peer as-path-acl command to specify to filter routes received from or to be advertised to a specific peer or peer group based on an AS_PATH list.

Use the undo peer as-path-acl command to remove the configuration.

By default, no AS filtering list is applied to a peer or peer group.

Examples

# In BGP-VPNv4 subaddress family view, apply AS filtering list 3 to routes advertised by peer group test.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer test as-path-acl 3 export

peer capability-advertise orf ip-prefix (BGP-VPNv4 subaddress family view)

Syntax

peer { group-name | ip-address } capability-advertise orf ip-prefix { both | receive | send }

undo peer { group-name | ip-address } capability-advertise orf ip-prefix { both | receive | send }

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a string of 1 to 47 characters.

ip-address: IP address of the peer.

both: Supports sending and receiving Route-refresh messages with ORF information.

receive: Supports receiving Route-refresh messages with ORF information.

send: Supports sending Route-refresh messages with ORF information.

Description

Use the peer capability-advertise orf ip-prefix command to enable the ORF capability for a BGP peer or peer group.

Use the undo peer capability-advertise orf ip-prefix command to disable the ORF capability for a BGP peer or peer group.

By default, the ORF capability is disabled for a BGP peer or peer group.

With the ORF capability enabled, the local BGP router negotiates the ORF capability with the BGP peer through Open messages. After the negotiation succeeds, the BGP router can process Route-refresh messages with the standard ORF information from the peer or send Route-refresh messages with the standard ORF information to the peer.

If you disable the ORF capability, the local BGP router does not negotiate the ORF capability with the specified peer or peer group.

Table 32 Description of the both, send, and receive parameters and the negotiation result

Local parameter

Peer parameter

Negotiation result

send

receive

The ORF sending capability is enabled locally and the ORF receiving capability is enabled on the peer.

both

receive

send

The ORF receiving capability is enabled locally and the ORF sending capability is enabled on the peer.

both

both

both

Both the ORF sending and receiving capabilities are enabled locally and on the peer, respectively.

 

Examples

# Enable both the ORF sending and receiving capabilities for the BGP peer 18.10.0.9. Then, after the negotiation succeeds, the local router can exchange VPNv4 ORF information with the peer 18.10.0.9.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] peer 18.10.0.9 as-number 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 18.10.0.9 enable

[Sysname-bgp-af-vpnv4] peer 18.10.0.9 capability-advertise orf ip-prefix both

peer default-route-advertise vpn-instance

Syntax

peer { group-name | ip-address } default-route-advertise vpn-instance vpn-instance-name

undo peer { group-name | ip-address } default-route-advertise vpn-instance vpn-instance-name

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.

Description

Use the peer default-route-advertise vpn-instance command to advertise a default VPN route to a peer or peer group.

Use the undo peer default-route-advertise vpn-instance command to remove the configuration.

By default, no default route is advertised to a peer or peer group.

Related commands: peer upe.

Examples

# In BGP-VPNv4 subaddress family view, advertise a default route for VPN instance vpn1 to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 enable

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 default-route-advertise vpn-instance vpn1

peer enable

Syntax

In BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view:

peer { group-name | ip-address } enable

undo peer { group-name | ip-address } enable

In BGP-VPNv6 subaddress family view:

peer ip-address enable

undo peer ip-address enable

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer enable command to enable a peer or peer group for an address family and enable the exchange of BGP routing information of the address family.

Use the undo peer enable command to disable the capability.

By default, only IPv4 routing information is exchanged between BGP peers/peer groups.

Examples

# Configure peer 1.1.1.1 and enable the peer for the BGP-VPNv4 subaddress family.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] peer 1.1.1.1 as-number 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 enable

# Configure peer 1.1.1.1 and enable the peer for the BGP-L2VPN address family.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] peer 1.1.1.1 as-number 100

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] peer 1.1.1.1 enable

# Configure peer 1.1.1.1 and enable the peer for the VPLS address family.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] peer 1.1.1.1 as-number 100

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] peer 1.1.1.1 enable

# Configure peer 1.1.1.1 and enable the peer for the BGP-VPNv6 subaddress family.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] peer 1.1.1.1 as-number 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] peer 1.1.1.1 enable

peer filter-policy (BGP-VPNv4/BGP-VPNv6 subaddress family view)

Syntax

In BGP-VPNv4 subaddress family view:

peer { group-name | ip-address } filter-policy acl-number { export | import }

undo peer { group-name | ip-address } filter-policy [ acl-number ] { export | import }

In BGP-VPNv6 subaddress family view:

peer ip-address filter-policy acl6-number { export | import }

undo peer ip-address filter-policy [ acl6-number ] { export | import }

View

BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

acl-number: IP ACL number, in the range of 2000 to 3999.

acl6-number: IPv6 ACL number, in the range of 2000 to 3999.

export: Filters the routes to be advertised to the specified peer or peer group.

import: Filters the routes received from the specified peer or peer group.

Description

Use the peer filter-policy command to apply a filtering policy to a peer or peer group.

Use the undo peer filter-policy command to remove the configuration.

By default, no filtering policy is applied to a peer or peer group.

Related commands: peer as-path-acl.

Examples

# In BGP-VPNv4 subaddress family view, apply a filtering policy to filter the routes received from peer group test.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer test filter-policy 2003 import

# In BGP-VPNv6 subaddress family view, apply a filtering policy to filter the routes received from peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] peer 1.1.1.1 filter-policy 2003 import

peer group

Syntax

peer ip-address group group-name

undo peer ip-address group group-name

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer group command to add a peer into an existing peer group.

Use the undo peer group command to remove a peer from a peer group.

Examples

# In BGP-VPNv4 subaddress family view, add peer 1.1.1.1 into peer group test.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] group test external

[Sysname-bgp] peer 1.1.1.1 as-number 200

[Sysname-bgp] peer 1.1.1.1 group test

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer test enable

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 group test

[Sysname-bgp-af-vpnv4] quit

# In BGP-L2VPN address family view, add peer 1.1.1.1 into peer group test.

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] peer test enable

[Sysname-bgp-af-l2vpn] peer 1.1.1.1 group test

[Sysname-bgp-af-l2vpn] quit

# In VPLS address family view, add peer 1.1.1.1 into peer group test.

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] peer test enable

[Sysname-bgp-af-vpls] peer 1.1.1.1 group test

peer ip-prefix (BGP-VPNv4 subaddress family view)

Syntax

peer { group-name | ip-address } ip-prefix prefix-name { export | import }

undo peer { group-name | ip-address } ip-prefix { export | import }

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

prefix-name: Name of the IP prefix list, a string of 1 to 19 characters.

export: Filters the routes to be advertised to the specified peer or peer group.

import: Filters the routes received from the specified peer or peer group.

Description

Use the peer ip-prefix command to apply a route filtering policy based on IP prefix list to a peer or peer group.

Use the undo peer ip-prefix command to remove the configuration.

By default, no route filtering policy based on IP prefix list is applied to a peer or peer group.

Examples

# In BGP-VPNv4 subaddress family view, filter the routes received from peer group group1 by using IP prefix list list1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer group1 ip-prefix list1 import

peer ipv6-prefix (BGP-VPNv6 subaddress family view)

Syntax

peer ip-address ipv6-prefix prefix-name { export | import }

undo peer ip-address ipv6-prefix { export | import }

View

BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

ip-address: IP address of a peer.

prefix-name: Name of an IPv6 prefix list, a string of 1 to 19 characters.

export: Filters routes to be advertised to the peer.

import: Filters routes received from the peer.

Description

Use the peer ipv6-prefix command to apply an IPv6 prefix list to filter routes for a peer.

Use the undo peer ipv6-prefix command to remove the configuration.

By default, no IPv6 prefix list is applied to filter routes for a peer.

Examples

# In BGP-VPNv6 subaddress family view, apply IPv6 prefix list list1 to filter routes received from peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] peer 1.1.1.1 ipv6-prefix list1 import

peer label-route-capability (BGP view, BGP VPN instance view)

Syntax

peer { group-name | ip-address } label-route-capability

undo peer { group-name | ip-address } label-route-capability

View

BGP view, BGP VPN instance view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer label-route-capability command to enable the exchange of labeled routes with an IPv4 peer or peer group.

Use the undo peer label-route-capability command to disable the capability.

By default, the device does not advertise labeled routes to an IPv4 peer.

According to the networking scheme, the peer label-route-capability command enables the exchange of labeled IPv4 routes with:

·           ASBR PEs in the same AS

·           PEs in the same AS

·           The peer ASBR PE

Examples

# Specify to exchange labeled IPv4 routes with peer 2.2.2.2.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] peer 2.2.2.2 label-route-capability

peer next-hop-invariable (BGP-VPNv4 subaddress family view)

Syntax

peer { group-name | ip-address } next-hop-invariable

undo peer { group-name | ip-address } next-hop-invariable

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer next-hop-invariable command to configure the device not to change the next hop of a route when advertising it to a peer.

Use the undo peer next-hop-invariable command to restore the default.

By default, a device uses its address as the next hop when advertising a route to its EBGP peer. In the inter-AS option C application, you need to configure next-hop-invariable on the RR for multi-hop EBGP neighbors and reflector clients to make sure that the next hop of a VPN route will not be changed.

Related commands: peer ebgp-max-hop (Layer 3—IP Routing Command Reference).

Examples

# In BGP-VPNv4 subaddress family view, configure the device not to change the next hop of a route when advertising it to EBGP peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 next-hop-invariable

peer next-hop-local

Syntax

peer { group-name | ip-address } next-hop-local

undo peer { group-name | ip-address } next-hop-local

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer next-hop-local command to configure the device to use the local address as the next hop of a route when advertising it to a peer or peer group.

Use the undo peer next-hop-local command to remove the configuration.

Examples

# In BGP-VPNv4 subaddress family view, configure the device to use the local address as the next hop of a route when advertising it to peer group test.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer test next-hop-local

# In BGP-L2VPN address family view, configure the device to use the local address as the next hop of a route when advertising it to peer group test.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] peer test next-hop-local

# In VPLS address family view, configure the device to use the local address as the next hop of a route when advertising it to peer group test.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] peer test next-hop-local

peer preferred-value (BGP-VPNv4/BGP-VPNv6 subaddress family view)

Syntax

In BGP-VPNv4 subaddress family view:

peer { group-name | ip-address } preferred-value value

undo peer { group-name | ip-address } preferred-value

In BGP-VPNv6 subaddress family view:

peer ip-address preferred-value value

undo peer ip-address preferred-value

View

BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

value: Preference value to be specified, in the range of 0 to 65535.

Description

Use the peer preferred-value command to specify the preference value for the routes received from the specified peer/peer group.

Use the undo peer preferred-value command to restore the default.

By default, the preference value for the routes received from a peer/peer group is 0.

Examples

# In BGP-VPNv4 subaddress family view, set the preference value for the routes received from peer 131.108.1.1 to 50.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 131.108.1.1 preferred-value 50

# In BGP-VPNv6 subaddress family view, set the preference value for the routes received from peer 131.108.1.1 to 50.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] peer 131.108.1.1 preferred-value 50

peer public-as-only (BGP-VPNv4/BGP-VPNv6 subaddress family view)

Syntax

In BGP-VPNv4 subaddress family view:

peer { group-name | ip-address } public-as-only

undo peer { group-name | ip-address } public-as-only

In BGP-VPNv6 subaddress family view:

peer ip-address public-as-only

undo peer ip-address public-as-only

View

BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer public-as-only command to make outbound BGP updates carry no private AS numbers.

Use the undo peer public-as-only command to make outbound BGP updates carry private AS numbers.

By default, a BGP update carries private AS numbers.

If a BGP update to be sent carries any public AS number, this command does not take effect. The private AS number ranges from 64512 to 65535.

Examples

# In BGP-VPNv4 subaddress family view, configure the device to exclude private AS numbers from the BGP updates to be sent to peer group test.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer test public-as-only

# In BGP-VPNv6 subaddress family view, configure the device to exclude private AS numbers from the BGP updates to be sent to peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] peer 1.1.1.1 public-as-only

peer reflect-client

Syntax

In BGP-VPNv4 subaddress family view/BGP-L2VPN address family view, VPLS address family view:

peer { group-name | ip-address } reflect-client

undo peer { group-name | ip-address } reflect-client

In BGP-VPNv6 subaddress family view:

peer ip-address reflect-client

undo peer ip-address reflect-client

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer reflect-client command to configure the local device as a route reflector (RR) and a peer or peer group as the client of the RR.

Use the undo peer reflect-client command to remove the configuration.

By default, no RR or RR client is configured.

The BGP view, BGP-VPNv4 subaddress family view, and BGP-VPNv6 subaddress family view support the peer reflect-client command. If you configure this command in BGP view, you configure the local device to reflect public network routes. If you configure this command in BGP-VPNv4 subaddress family view or BGP-VPNv6 subaddress family view, you configure the local device to reflect VPN routes. For more information about BGP view, see Layer 3—IP Routing Command Reference.

Examples

# In BGP-VPNv4 subaddress family view, configure the local device as RR and peer group test as the client of the RR.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer test reflect-client

# In BGP-L2VPN address family view, configure the local device as an RR and peer group test as the client of the RR.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] peer test reflect-client

# In VPLS address family view, configure the local device as an RR and peer group test as the client of the RR.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] peer test reflect-client

# In BGP-VPNv6 subaddress family view, configure the local device as an RR and peer 1.1.1.1 as the client of the RR.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] peer 1.1.1.1 reflect-client

peer route-policy (BGP-VPNv4/BGP-VPNv6 subaddress family view)

Syntax

In BGP-VPNv4 subaddress family view:

peer { group-name | ip-address } route-policy route-policy-name { export | import }

undo peer { group-name | ip-address } route-policy route-policy-name { export | import }

In BGP-VPNv6 subaddress family view:

peer ip-address route-policy route-policy-name { export | import }

undo peer ip-address route-policy route-policy-name { export | import }

View

BGP-VPNv4 subaddress family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

route-policy-name: Name of the routing policy, a case-sensitive string of 1 to 63 characters.

export: Filters the routes to be advertised to the peer or peer group.

import: Filters the routes received from the peer or peer group.

Description

Use the peer route-policy command to apply a routing policy to a peer or peer group.

Use the undo peer route-policy command to remove the application.

By default, no routing policy is applied to a peer or peer group.

Examples

# In BGP-VPNv4 subaddress family view, apply routing policy test-policy to filter the routes received from peer group test.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer test route-policy test-policy import

# In BGP-VPNv6 subaddress family view, apply routing policy test-policy to filter routes received from peer 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] peer 1.1.1.1 route-policy test-policy import

peer upe

Syntax

peer { group-name | ip-address } upe

undo peer { group-name | ip-address } upe

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

Description

Use the peer upe command to configure a BGP peer or peer group as an HoVPN UPE for a BGP-VPNv4 subaddress family.

Use the undo peer upe command to remove the configuration.

UPE is a kind of special VPNv4 peer. It accepts only one default route for each related VPN instance on an SPE and routes from SPEs that are permitted by the routing policy. An SPE is a common VPN peer.

Examples

# Configure peer 1.1.1.1 as a UPE.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe

peer upe route-policy

Syntax

peer { group-name | ip-address } upe route-policy route-policy-name export

undo peer { group-name | ip-address } upe route-policy route-policy-name export

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

ip-address: IP address of the peer.

route-policy-name: Name of the routing policy, a case-sensitive string of 1 to 63 characters.

export: Applies the filtering policy to routes to be advertised.

Description

Use the peer upe route-policy command to specify to advertise routes permitted by a routing policy to UPEs.

Use the undo peer upe route-policy command to restore the default.

By default, no routes are advertised to peers.

To filter routes to be advertised to a peer, configure both the peer upe route-policy command and the peer upe command.

Related commands: peer upe.

Examples

# In BGP-VPNv4 subaddress family view, configure peer 1.1.1.1 as a UPE and specify to advertise routes permitted by routing policy hope to 1.1.1.1.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] peer 1.1.1.1 as-number 200

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 enable

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe route-policy hope export

peer vpn-instance enable

Syntax

peer { group-name | peer-address } vpn-instance vpn-instance-name enable

undo peer { group-name | peer-address } vpn-instance vpn-instance-name enable

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name: Name of the peer group, a case-sensitive string of 1 to 47 characters.

peer-address: IP address of the peer.

vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.

Description

Use the peer vpn-instance enable command to activate a nested VPN peer or peer group and enable the capability of exchanging BGP-VPNv4 routes with the peer or peer group.

Use the undo peer vpn-instance enable command to disable the capability of exchanging BGP-VPNv4 routes with a nested VPN peer or peer group.

By default, nested VPN peers/peer groups can exchange only IPv4 routes; they cannot exchange BGP-VPNv4 routes.

This configuration takes effect only after the nested VPN function is enabled.

Before specifying a nested VPN peer or peer group, be sure to configure the corresponding CE peer or peer group by using the peer as-number command in BGP-VPN instance view.

Deleting the VPN instance to which a peer belongs will also delete the configuration of this command.

Examples

# Activate a nested VPN peer group named ebgp.

<Sysname> system-view

[Sysname] bgp 10

[Sysname-bgp] ipv4-family vpn-instance vpn1

[Sysname-bgp-vpn1] group ebgp external

[Sysname-bgp-vpn1] quit

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer ebgp vpn-instance vpn1 enable

peer vpn-instance group

Syntax

peer peer-address vpn-instance vpn-instance-name group group-name

undo peer peer-address vpn-instance vpn-instance-name group group-name

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

peer-address: IP address of the peer.

vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.

group-name:  Name of the peer group, a case-sensitive string of 1 to 47 characters.

Description

Use the peer vpn-instance group command to add a peer to a nested VPN peer group.

Use the undo peer vpn-instance group command to remove a peer from a nested VPN peer group.

By default, a peer is not in any nested peer group.

This configuration takes effect only after the nested VPN function is enabled.

Deleting the VPN instance to which a peer belongs will also delete the configuration of this command.

Examples

# Add peer 1.1.1.1 to the nested VPN peer group named ebgp.

<Sysname> system-view

[Sysname] bgp 10

[Sysname-bgp] ipv4-family vpn-instance vpn1

[Sysname-bgp-vpn1] group ebgp external

[Sysname-bgp-vpn1] peer 1.1.1.1 as-number 600

[Sysname-bgp-vpn1] peer 1.1.1.1 group ebgp

[Sysname-bgp-vpn1] quit

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer ebgp vpn-instance vpn1 enable

[Sysname-bgp-af-vpnv4] peer 1.1.1.1 vpn-instance vpn1 group ebgp

peer vpn-instance route-policy import

Syntax

peer { group-name | peer-address } vpn-instance vpn-instance-name route-policy route-policy-name import

undo peer { group-name | peer-address } vpn-instance vpn-instance-name route-policy route-policy-name import

View

BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

group-name:  Name of the peer group, a case-sensitive string of 1 to 47 characters.

peer-address: IP address of the peer, in dotted decimal notation.

vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.

route-policy-name: Name of the routing policy to be applied, a case-sensitive string of 1 to 63 characters.

Description

Use the peer vpn-instance route-policy import command to specify the routing policy to be applied to VPNv4 routes received from a nested VPN peer or peer group.

Use the undo peer vpn-instance route-policy import command to restore the default.

By default, no routing policy is applied.

A routing policy for a peer and a routing policy for the peer group to which the peer belongs are of the same priority; the one configured last takes effect.

This configuration takes effect only after the nested VPN function is enabled.

Deleting the VPN instance to which a peer belongs will also delete the configuration of this command.

Examples

# Specify to apply routing policy comtest to VPNv4 routes received from peer group ebgp.

<Sysname> system-view

[Sysname] bgp 10

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] peer ebgp vpn-instance vpn1 route-policy comtest import

policy vpn-target

Syntax

policy vpn-target

undo policy vpn-target

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

None

Description

Use the policy vpn-target command to enable VPN target filtering for received VPNv4 routes.

Use the undo policy vpn-target command to disable the filtering, permitting all VPNv4 routes.

Only VPNv4 routes with export route target attributes matching the local import route target attributes are added into the routing table.

By default, the VPN target filtering function is enabled for received VPNv4 routes.

 

 

NOTE:

The command applies to inter-AS VPN option B schemes.

 

Examples

# In BGP-VPNv4 subaddress family view, enable VPN target filtering for received VPNv4 routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] policy vpn-target

# In BGP-L2VPN address family view, enable VPN target filtering for received VPNv4 routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] policy vpn-target

# In VPLS address family view, enable VPN target filtering for received VPNv4 routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] policy vpn-target

# In BGP-VPNv6 subaddress family view, enable VPN target filtering for received VPNv6 routes.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] policy vpn-target

reflect between-clients

Syntax

reflect between-clients

undo reflect between-clients

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

None

Description

Use the reflect between-clients command to enable route reflection between clients.

Use the undo reflect between-clients command to disable the function.

By default, route reflection between clients is enabled.

If fully meshed interconnections exist between the clients, route reflection is not required. Otherwise, an RR is required for routes to be reflected from one client to every other client.

Examples

# In BGP-VPNv4 subaddress family view, disable route reflection between clients.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] undo reflect between-clients

# In BGP-L2VPN address family view, disable route reflection between clients.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] undo reflect between-clients

# In VPLS address family view, disable route reflection between clients.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] undo reflect between-clients

# In BGP-VPNv6 subaddress family view, disable route reflection between clients.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] undo reflect between-clients

reflector cluster-id

Syntax

reflector cluster-id { cluster-id | ip-address }

undo reflector cluster-id

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view, BGP-VPNv6 subaddress family view

Default level

2: System level

Parameters

cluster-id: Cluster ID of the route reflector (RR), in the range of 1 to 4294967295.

ip-address: IP address of the peer, which is to be used as the cluster ID of the RR.

Description

Use the reflector cluster-id command to specify a cluster ID for an RR.

Use the undo reflector cluster-id command to remove the cluster ID.

By default, the cluster ID is the router ID of an RR in the cluster.

Typically, a cluster contains only one RR, in which case the router ID of the RR is used for identifying the cluster. Setting multiple RRs can improve the network reliability. When more than one RR exists in a cluster, use the reflector cluster-id command to configure the same cluster ID for all RRs in the cluster.

Examples

# In BGP-VPNv4 subaddress family view, set the RR’s cluster ID to 50.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] reflector cluster-id 50

# In BGP-L2VPN address family view, set the RR’s cluster ID to 50.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] reflector cluster-id 50

# In VPLS address family view, set the RR’s cluster ID to 50.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] reflector cluster-id 50

# In BGP-VPNv6 subaddress family view, set the RR’s cluster ID to 50.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] reflector cluster-id 50

refresh bgp ipv6 vpn-instance

Syntax

refresh bgp ipv6 vpn-instance vpn-instance-name { ipv6-address | all | external } { export | import }

View

User view

Default level

1: Monitor level

Parameters

vpn-instance-name: Specifies a VPN instance by the VPN instance name, a case-sensitive string of 1 to 31 characters.

ipv6-address: Soft resets the BGP connection with the BGP peer identified by this IPv6 address.

all: Soft resets all IPv6 BGP connections in the specified VPN instance.

external: Soft resets EBGP sessions.

export: Performs a soft reset in the outbound direction.

import: Performs a soft reset in the inbound direction.

Description

Use the refresh bgp ipv6 vpn-instance command to soft reset IPv6 BGP connections in a VPN instance.

Examples

# Soft reset all IPv6 BGP connections in VPN instance vpn1 in the inbound direction to make new configurations take effect.

<Sysname> refresh bgp ipv6 vpn-instance vpn1 all import

refresh bgp vpn-instance

Syntax

refresh bgp vpn-instance vpn-instance-name { ip-address | all | external | group group-name } { export | import }

View

User view

Default level

1: Monitor level

Parameters

vpn-instance-name: Specifies a VPN instance by the VPN instance name, a case-sensitive string of 1 to 31 characters.

ip-address: Soft resets the BGP connection with the BGP peer identified by this IP address.

all: Soft resets all BGP connections in the specified VPN instance.

external: Soft resets EBGP sessions.

group group-name: Soft resets the connections with the BGP peer group identified by this name. The group-name argument is a string of 1 to 47 characters.

export: Performs a soft reset in the outbound direction.

import: Performs a soft reset in the inbound direction.

Description

Use the refresh bgp vpn-instance command to soft reset the BGP connections in a VPN instance.

Examples

# Soft reset all BGP connections in VPN instance vpn1 in the inbound direction to make new configurations take effect.

<Sysname> refresh bgp vpn-instance vpn1 all import

refresh bgp vpnv4

Syntax

refresh bgp vpnv4 { ip-address | all | external | group group-name | internal } { export | import }

View

User view

Default level

1: Monitor level

Parameters

ip-address: Soft resets the BGP VPNv4 connection with the BGP peer identified by this IP address.

all: Soft resets all BGP VPNv4 connections.

external: Soft resets EBGP sessions.

group group-name: Soft resets the VPNv4 connections with the BGP peer group identified by this name.

internal: Soft resets IBGP sessions.

export: Performs a soft reset in the outbound direction.

import: Performs a soft reset in the inbound direction.

Description

Use the refresh bgp vpnv4 command to soft reset BGP VPNv4 connections.

Examples

# Soft reset all BGP VPNv4 connections in the inbound direction to make new configurations take effect.

<Sysname> refresh bgp vpnv4 all import

refresh bgp vpnv6

Syntax

refresh bgp vpnv6 { ip-address | all | external | internal } { export | import }

View

User view

Default level

1: Monitor level

Parameters

ip-address: Soft resets of the BGP VPNv6 connection with the BGP peer identified by this IP address.

all: Soft resets all BGP VPNv6 connections.

external: Soft resets EBGP sessions.

internal: Soft resets IBGP sessions.

export: Performs a soft reset in the outbound direction.

import: Performs a soft reset in the inbound direction.

Description

Use the refresh bgp vpnv6 command to soft reset BGP VPNv6 connections.

Examples

# Soft reset all BGP VPNv6 connections in the inbound direction to make new configurations take effect.

<Sysname> refresh bgp vpnv6 all import

reset bgp ipv6 vpn-instance

Syntax

reset bgp ipv6 vpn-instance vpn-instance-name { as-number | ipv6-address | all | external }

View

User view

Default level

1: Monitor level

Parameters

vpn-instance-name: Resets IPv6 BGP connections with the peers in a VPN instance. The VPN instance name is a case-sensitive string of 1 to 31 characters.

as-number: Resets IPv6 BGP connections with the peers in an AS. The AS number is in the range of 1 to 4294967295.

ipv6-address: Resets the connection with the BGP peer identified by this IPv6 address.

all: Resets all IPv6 BGP connections in the specified VPN instance.

external: Resets EBGP sessions.

Description

Use the reset bgp ipv6 vpn-instance command to reset IPv6 BGP connections in a VPN instance.

Examples

# Reset all IPv6 BGP connections in VPN instance vpn1.

<Sysname> reset bgp ipv6 vpn-instance vpn1 all

reset bgp vpn-instance

Syntax

reset bgp vpn-instance vpn-instance-name { as-number | ip-address | all | external | group group-name }

View

User view

Default level

1: Monitor level

Parameters

vpn-instance-name: Resets BGP connections with the peers in a VPN instance. The VPN instance name is a case-sensitive string of 1 to 31 characters.

as-number: Resets BGP connections with the peers in an AS. The AS number is in the range of 1 to 4294967295.

ip-address: Resets the connection with the BGP peer identified by this IP address.

all: Resets all BGP connections in the specified VPN instance.

external: Resets EBGP sessions.

group group-name: Resets the connections with the BGP peer group identified by this name. The group-name argument is a string of 1 to 47 characters.

Description

Use the reset bgp vpn-instance command to reset the BGP connections in a VPN instance.

Examples

# Reset all BGP connections in VPN instance vpn1.

<Sysname> reset bgp vpn-instance vpn1 all

reset bgp vpn-instance dampening

Syntax

reset bgp vpn-instance vpn-instance-name dampening [ network-address [ mask | mask-length ] ]

View

User view

Default level

1: Monitor level

Parameters

vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.

network-address: Network address.

mask: Network mask, in the format of X.X.X.X.

mask-length: Length of the network mask, in the range of 0 to 32.

Description

Use the reset bgp vpn-instance dampening command to clear the route flap dampening information of a VPN instance.

Examples

# Clear the route flap dampening information of VPN instance vpn1.

<Sysname> reset bgp vpn-instance vpn1 dampening

reset bgp vpn-instance flap-info

Syntax

reset bgp vpn-instance vpn-instance-name ip-address flap-info

reset bgp vpn-instance vpn-instance-name flap-info [ ip-address [ mask | mask-length ] | as-path-acl as-path-acl-number | regexp as-path-regexp ]

View

User view

Default level

1: Monitor level

Parameters

vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.

ip-address: IP address of the BGP peer.

mask: Network mask, in the format of X.X.X.X.

mask-length: Length of the network mask, in the range of 0 to 32.

as-path-acl-number: Number of the AS_PATH list, in the range of 1 to 256.

as-path-regexp: AS_PATH regular expression.

Description

Use the reset bgp vpn-instance flap-info command to clear the route flap history information about BGP peers of a VPN instance.

Examples

# Clear route flap history information about BGP peer 2.2.2.2 of VPN instance vpn1.

<Sysname> reset bgp vpn-instance vpn1 2.2.2.2 flap-info

reset bgp vpnv4

Syntax

reset bgp vpnv4 { as-number | ip-address | all | external | internal | group group-name }

View

User view

Default level

1: Monitor level

Parameters

as-number: Resets VPNv4 connections with the peers in an AS identified by this number. as-number ranges from 1 to 4294967295.

ip-address: Resets the VPNv4 connection with a BGP peer identified by this IP address.

all: Resets all BGP VPNv4 connections.

external: Resets EBGP VPNv4 connections.

internal: Resets IBGP VPNv4 connections.

group group-name: Resets the VPNv4 connections with a BGP peer group identified by this name.

Description

Use the reset bgp vpnv4 command to reset BGP VPNv4 connections.

Examples

# Reset all BGP VPNv4 connections to make new configurations take effect.

<Sysname> reset bgp vpnv4 all

reset bgp vpnv6

Syntax

reset bgp vpnv6 { as-number | ip-address | all | external | internal }

View

User view

Default level

1: Monitor level

Parameters

as-number: Resets BGP VPNv6 connections with the peers in the AS identified by this number. as-number ranges from 1 to 4294967295.

ip-address: Resets the BGP VPNv6 connection with the BGP peer identified by this IP address.

all: Resets all BGP VPNv6 connections.

external: Resets EBGP VPNv6 connections.

internal: Resets IBGP VPNv6 connections.

Description

Use the reset bgp vpnv6 command to reset BGP VPNv6 connections.

Examples

# Reset all BGP VPNv6 connections to make new configurations take effect.

<Sysname> reset bgp vpnv6 all

route-distinguisher (VPN instance view)

Syntax

route-distinguisher route-distinguisher

View

VPN instance view

Default level

2: System level

Parameters

route-distinguisher: Route distinguisher (RD) for the VPN instance, a string of 3 to 21 characters in one of the following three formats:

·           16-bit AS number:32-bit user-defined number. For example, 101:3.

·           32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

·           32-bit AS number:16-bit user-defined number, where the minimum value of the AS number is 65536. For example, 65536:1.

Description

Use the route-distinguisher command to configure a route distinguisher (RD) for a VPN instance.

An RD is used to create the routing and FIB of a VPN.  By prefixing an RD to an IPv4 prefix, you get a VPN IPv4 prefix unique globally.

 

 

NOTE:

·       No RD is configured by default; you must configure an RD for each VPN instance.

·       A VPN instance takes effect only after you configure an RD for it.

·       Once you configure an RD for a VPN, you cannot remove the association.

·       You cannot change an RD directly; you can only delete the VPN instance, and then re-create the VPN instance and re-configure a new RD.

 

Examples

# Configure the RD of VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] route-distinguisher 22:1

route-tag

Syntax

route-tag tag-value

undo route-tag

View

OSPF view

Default level

2: System level

Parameters

tag-value: External route tag of the imported VPN routes, in the range of 0 to 4294967295.

Description

Use the route-tag command to configure the external route tag for imported VPN routes.

Use the undo route-tag command to restore the default.

By default, if BGP is running in the MPLS backbone and the BGP’s AS number is not greater than 65535, the first two octets of the default external route tag is always 0xD000 and the last two octets is the AS number of the local BGP. For example, if the local BGP AS number is 100, the default value of the external route tag is 3489661028, which equals the decimal value of 0xD0000000 (3489660928) + 100. If the AS number is greater than 65535, the default external route tag is 0.

If PE-CE routing protocol is OSPF, the local PE redistributes the BGP VPNv4 routes received from the peer PE into the OSPF routing table, and advertises these routes to the locally connected CE through OSPF. If the routes are advertised to the CE through Type 5 or 7 LSAs, Type 5/7 LSAs must contain the external route tag. An external route tag can be configured by different commands and has different priorities. The following lists the commands used to configure the external route tag (in the descending order of tag priority):

·           import-route

·           route-tag

·           default tag

The external route tag is used to avoid routing loops. If the external route tag carried in a Type 5 or 7 LSA received by a PE is the same as the locally configured external route tag, the PE neglects the LSA in route calculation to avoid routing loops.

Note the following issues:

·           H3C recommends configuring the same external route tag for PEs in the same AS.

·           An external route tag is not transferred in any BGP extended community attribute. It is only locally significant and takes effect only on the PEs that receive BGP routes and generate OSPF Type 5 or 7 LSAs.

·           You can configure the same external route tag for different OSPF processes.

Related commands: import-route and default (Layer 3—IP Routing Command Reference).

Examples

# Set the external route tag of the imported VPN routes to 100 for OSPF process 100.

<Sysname> system-view

[Sysname] ospf 100

[Sysname-ospf-100] route-tag 100

routing-table limit

Syntax

routing-table limit number { warn-threshold | simply-alert }

undo routing-table limit

View

VPN instance view, IPv4 VPN view, IPv6 VPN view

Default level

2: System level

Parameters

number: Specifies the maximum number of routes supported, in the range of 1 to 1048576.

warn-threshold: Specifies a threshold for warning, in the range of 1 to 100, in percentages. When the percentage of the number of existing routes to the maximum number of routes supported exceeds the specified threshold, the system gives an alarm message but still allows new routes. If the number of routes in the VPN instance reaches the maximum supported, no more routes are added.

simply-alert: Specifies that when the number of routes exceeds the maximum number of routes supported, the system still accepts routes but generates a system log (Syslog) message.

Description

Use the routing-table limit command to limit the maximum number of routes in a VPN instance, an IPv4 VPN, or an IPv6 VPN, preventing too many routes from being accepted by a PE.

Use the undo routing-table limit command to restore the default.

A limit configured in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.

A limit configured in IPv4 VPN view is applicable to only the IPv4 VPN.

A limit configured in IPv6 VPN view is applicable to only the IPv6 VPN.

A limit configured in IPv4 VPN view or IPv6 VPN view takes precedence over that configured in VPN instance view. If you configure a limit in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, the limit configured in IPv4 VPN view (or IPv6 VPN view) is applied to the IPv4 VPN (or IPv6 VPN).

Examples

# Configure VPN instance vpn1 to support up to 1000 routes, and receive new routes after the number of existing routes exceeds the limit.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] route-distinguisher 100:1

[Sysname-vpn-instance-vpn1] routing-table limit 1000 simply-alert

[Sysname-vpn-instance-vpn1] quit

# Specify that the IPv4 VPN of VPN instance vpn2 supports up to 1000 routes, and can receive new routes after the number of existing routes exceeds the limit.

<Sysname> system-view

[Sysname] ip vpn-instance vpn2

[Sysname-vpn-instance-vpn2] route-distinguisher 100:2

[Sysname-vpn-instance-vpn2] ipv4-family

[Sysname-vpn-ipv4-vpn2] routing-table limit 1000 simply-alert

[Sysname-vpn-ipv4-vpn2] quit

[Sysname-vpn-instance-vpn2] quit

# Specify that the IPv6 VPN of VPN instance vpn3 supports up to 1000 routes, and can receive new routes after the number of existing routes exceeds the limit.

<Sysname> system-view

[Sysname] ip vpn-instance vpn3

[Sysname-vpn-instance-vpn3] route-distinguisher 100:3

[Sysname-vpn-instance-vpn3] ipv6-family

[Sysname-vpn-ipv4-vpn3] routing-table limit 1000 simply-alert

rr-filter

Syntax

rr-filter extended-community-number

undo rr-filter

View

BGP-VPNv4 subaddress family view, BGP-L2VPN address family view, VPLS address family view, BGP-VPNv4 subaddress family view

Default level

2: System level

Parameters

extended-community-number: Number of the Extended Communities attribute supported by the RR, in the range of 1 to 199.

Description

Use the rr-filter command to create an RR reflection policy.

Use the undo rr-filter command to remove the configuration.

With an RR reflection policy, only IBGP routes whose Extended Communities attribute matches the specified one are reflected. This provides a way to implement load balancing between RRs.

Examples

# In BGP-VPNv4 subaddress family view, specify an Extended Communities attribute for the RR to filter the incoming VPNv4 route update packets.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv4-family vpnv4

[Sysname-bgp-af-vpnv4] rr-filter 10

# In BGP-L2VPN address family view, specify an Extended Communities attribute for the RR to filter the incoming VPNv4 route update packets.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] l2vpn-family

[Sysname-bgp-af-l2vpn] rr-filter 10

# In VPLS address family view, specify an Extended Communities attribute for the RR to filter the incoming VPNv4 route update packets.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] vpls-family

[Sysname-bgp-af-vpls] rr-filter 10

# In BGP-VPNv6 subaddress family view, specify an Extended Communities attribute for the RR to filter the incoming VPNv6 route update packets.

<Sysname> system-view

[Sysname] bgp 100

[Sysname-bgp] ipv6-family vpnv6

[Sysname-bgp-af-vpnv6] rr-filter 10

sham-link

Syntax

sham-link source-ip-address destination-ip-address [ cost cost | dead dead-interval | hello hello-interval | retransmit retrans-interval | trans-delay delay | simple [ cipher | plain ] password1 | { md5 | hmac-md5 } key-id [ cipher | plain ] password2 ] *

undo sham-link source-ip-address destination-ip-address [ cost | dead | hello | retransmit | trans-delay | simple | { md5 | hmac-md5 } key-id ] *

View

OSPF area view

Default level

2: System level

Parameters

source-ip-address: Source IP address for the sham link.

destination-ip-address: Destination IP address for the sham link.

cost: Cost for the sham link. It ranges from 1 to 65,535 and defaults to 1.

dead-interval: Dead Interval in seconds. It ranges from 1 to 32,768 and defaults to 40. It must be equal to the dead interval of the router on the other end of the virtual link and be at least four times the hello interval.

hello-interval: Interval at which the interface sends Hello packets. It ranges from 1 to 8,192 seconds and defaults to 10 seconds. It must be equal to the hello interval of the router on the other end of the virtual link.

retrans-interval: Interval at which the interface retransmits LSAs. It ranges from 1 to 8,192 seconds and defaults to 5 seconds.

delay: Delay interval before the interface sends an LSA. It ranges from 1 to 8,192 seconds and defaults to 1 second.

simple [ cipher | plain ] password1: Uses simple authentication. If you specify neither the cipher nor the plain keyword, the password1 argument is a string of 1 to 8 characters. For the plain mode, the password1 argument is a string of 1 to 8 characters. For the cipher mode, the password1 argument can be either a string of 1 to 8 characters in plain text, or a string of 24 characters in cipher text.

md5: Uses MD5 algorithm for authentication.

hmac-md5: Uses HMAC-MD5 algorithm for authentication.

key-id: Authentication key ID of the interface, in the range of 1 to 255. It must be the same as that of the peer.

cipher: Uses cipher text.

plain: Uses plain text.

password2: Password string, case-sensitive. If you specify neither the cipher nor the plain keyword, it is a string of 1 to 16 characters in plain text or a string of 24 characters in cipher text. For the plain mode, it is a string of 1 to 16 characters. For the cipher mode, it can be either a string of 1 to 16 characters in plain text, or a string of 24 characters in cipher text.

Description

Use the sham link command to configure a sham link.

Use the undo sham link command with no optional keyword to remove a sham link.

Use the undo sham link command with optional keywords to restore the defaults of the parameters for a sham link.

If two PEs belong to the same AS and a backdoor link is present, a sham link can be established between them.

For plain text authentication, the default authentication key type is plain. For authentication using MD5 algorithm or HMAC-MD5 algorithm, the default authentication key type is cipher.

Examples

# Create a sham link with the source address of 1.1.1.1 and the destination address of 2.2.2.2.

<Sysname> system-view

[Sysname] ospf

[Sysname-ospf-1] area 0

[Sysname-ospf-1-area-0.0.0.0] sham-link 1.1.1.1 2.2.2.2

tnl-policy (VPN instance view/IPv4 VPN view/IPv6 VPN view)

Syntax

tnl-policy tunnel-policy-name

undo tnl-policy

View

VPN instance view, IPv4 VPN view, IPv6 VPN view

Default level

2: System level

Parameters

tunnel-policy-name: Name of the tunneling policy for the VPN instance, a string of 1 to 19 characters.

Description

Use the tnl-policy command to associate the current VPN instance with a tunneling policy.

Use the undo tnl-policy command to remove the association.

If a VPN instance is not associated with any tunneling policy or the associated tunneling policy is not configured, the VPN instance selects tunnels according to the default tunneling policy. The default tunneling policy selects only one tunnel (no load balancing) in this order: LSP tunnel, CR-LSP tunnel.

A tunneling policy specified in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.

A tunneling policy specified in IPv4 VPN view is applicable to only the IPv4 VPN.

A tunneling policy specified in IPv6 VPN view is applicable to only the IPv6 VPN.

A tunneling policy specified in IPv4 VPN view or IPv6 VPN view takes precedence over that specified in VPN instance view. If you specify a tunneling policy in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, the tunneling policy specified in IPv4 VPN view (or IPv6 VPN view) is applied to the IPv4 VPN (or IPv6 VPN).

Related commands: tunnel select-seq.

Examples

# Associate VPN instance vpn1 with tunneling policy po1.

<Sysname> system-view

[Sysname] tunnel-policy po1

[Sysname-tunnel-policy-po1] tunnel select-seq lsp load-balance-number 1

[Sysname-tunnel-policy-po1] quit

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] route-distinguisher 22:33

[Sysname-vpn-instance-vpn1] tnl-policy po1

[Sysname-vpn-instance-vpn1] quit

# Associate the IPv4 VPN of VPN instance vpn2 with tunneling policy po1.

[Sysname] ip vpn-instance vpn2

[Sysname-vpn-instance-vpn2] route-distinguisher 11:22

[Sysname-vpn-instance-vpn2] ipv4-family

[Sysname-vpn-ipv4-vpn2] tnl-policy po1

[Sysname-vpn-ipv4-vpn2] quit

[Sysname-vpn-instance-vpn2] quit

# Associate the IPv6 VPN of VPN instance vpn3 with tunneling policy po1.

[Sysname] ip vpn-instance vpn3

[Sysname-vpn-instance-vpn3] route-distinguisher 11:33

[Sysname-vpn-instance-vpn3] ipv6-family

[Sysname-vpn-ipv6-vpn3] tnl-policy po1

tunnel select-seq

Syntax

tunnel select-seq { cr-lsp | lsp } * load-balance-number number

undo tunnel select-seq

View

Tunneling policy view

Default level

2: System level

Parameters

cr-lsp: Specifies CR-LSP tunnels.

lsp: Specifies LSP tunnels.

load-balance-number number: Specifies the number of tunnels for load balancing.

Description

Use the tunnel select-seq command to configure the preference order for tunnel selection and the number of tunnels for load balancing.

Use the undo tunnel select-seq command to restore the default.

By default, the tunnel selection preference order is: LSP tunnels, CR-LSP tunnels, and the number of tunnels for load balancing is 1—no load balancing.

Only tunnels of the types specified in the tunnel select-seq command can be used.

A tunnel type closer to the select-seq keyword has a higher priority.

The number of tunnels for load balancing refers to the number of tunnels that an application can use.

CR-LSP tunnels are preferred by the following order: CR-LSPs configured with ACLs, CR-LSPs bound with VPN, ordinary CR-LSPs. These three types of CR-LSPs are mutually exclusive. Only one type of the three is selected at a time.

Examples

# Define a tunneling policy, specifying that only CR-LSP tunnels can be used and setting the number of tunnels for load balancing to 2.

<Sysname> system-view

[Sysname] tunnel-policy po1

[Sysname-tunnel-policy-po1] tunnel select-seq cr-lsp load-balance-number 2

tunnel-policy

Syntax

tunnel-policy tunnel-policy-name

undo tunnel-policy tunnel-policy-name

View

System view

Default level

2: System level

Parameters

tunnel-policy-name: Name for the tunneling policy, a string of 1 to 19 characters.

Description

Use the tunnel-policy command to establish a tunneling policy and enter tunneling policy view.

Use the undo tunnel-policy command to delete a tunneling policy.

Related commands: tunnel select-seq.

Examples

# Establish a tunneling policy named po1 and enter tunneling policy view.

<Sysname> system-view

[Sysname] tunnel-policy po1

[Sysname-tunnel-policy-po1]

vpn popgo

Syntax

vpn popgo

undo vpn popgo

View

System view

Default level

2: System level

Parameters

None

Description

Use the vpn popgo command on an egress PE to specify the VPN label processing mode as POPGO forwarding, which will pop the label and then search for the outbound interface according to the label to forward the traffic.

Use the undo vpn popgo command to restore the default.

By default, the VPN label processing mode of an egress PE is POP forwarding, which will pop the label and then search the FIB table to find the outbound interface to forward the traffic.

 

 

NOTE:

After you execute the vpn popgo or undo vpn popgo command on the router, reboot the router to make the specified label processing mode take effect. You can use the display vpn label operation command to view the current VPN label processing mode.

 

Examples

# Specify the VPN label processing mode of an egress PE as outbound interface based forwarding.

<Sysname> system-view

[Sysname] vpn popgo

# Specify the VPN label processing mode of an egress PE as FIB based forwarding.

<Sysname> system-view

[Sysname] undo vpn popgo

vpn-instance-capability simple

Syntax

vpn-instance-capability simple

undo vpn-instance-capability

View

OSPF multi-instance view

Default level

2: System level

Parameters

None

Description

Use the vpn-instance-capability simple command to enable multi-VPN-instance CE.

Use the undo vpn-instance-capability command to disable the function.

By default, the function is disabled.

Examples

# Enable multi-VPN-instance CE.

<Sysname> system-view

[Sysname] ospf 100 vpn-instance vpna

[Sysname-ospf-100] vpn-instance-capability simple

vpn-target (VPN instance view/IPv4 VPN view/IPv6 VPN view)

Syntax

vpn-target vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ]

undo vpn-target { all | vpn-target&<1-8> [ both | export-extcommunity | import-extcommunity ] }

View

VPN instance view, IPv4 VPN view, IPv6 VPN view

Default level

2: System level

Parameters

vpn-target&<1-8>: Adds a VPN target extended community attribute to the import VPN target extended community attribute list (Import Target) or export VPN target extended community attribute list (Export Target). &<1-8> means that you can add up to eight VPN targets.

A VPN target attribute can be a string of 3 to 21 characters in one the following formats:

·           16-bit AS number:32-bit user-defined number. For example, 101:3.

·           32-bit IP address:16-bit user-defined number. For example, 192.168.122.15:1.

·           32-bit AS number:16-bit user-defined number, where the AS number must not be less than 65536. For example, 65536:1.

both: Uses the specified VPN target value as both an import target and an export target . The both keyword is also used when you do not specify any of both, export-extcommunity, and import-extcommunity.

export-extcommunity: Uses the specified VPN target as an export target.

import-extcommunity: Uses the specified VPN target as an import target.

all: Removes all VPN targets.

Description

Use the vpn-target command to configure VPN targets for a VPN instance, an IPv4 VPN, or an IPv6 VPN.

Use the undo vpn-target command to remove the specified or all VPN targets of a VPN instance, an IPv4 VPN, or an IPv6 VPN.

By default, no VPN targets are configured and you must configure VPN targets when creating a VPN instance, an IPv4 VPN, or an IPv6 VPN.

VPN targets configured in VPN instance view is applicable to both the IPv4 VPN and the IPv6 VPN.

VPN targets configured in IPv4 VPN view is applicable to only the IPv4 VPN.

VPN targets configured in IPv6 VPN view is applicable to only the IPv6 VPN.

VPN targets configured in IPv4 VPN view or IPv6 VPN view takes precedence over that configured in VPN instance view. If you configure VPN targets in both IPv4 VPN view (or IPv6 VPN view) and VPN instance view, those configured in IPv4 VPN view (or IPv6 VPN view) are applied to the IPv4 VPN (or IPv6 VPN).

Examples

# Configure VPN targets for VPN instance vpn1.

<Sysname> system-view

[Sysname] ip vpn-instance vpn1

[Sysname-vpn-instance-vpn1] vpn-target 3:3 export-extcommunity

[Sysname-vpn-instance-vpn1] vpn-target 4:4 import-extcommunity

[Sysname-vpn-instance-vpn1] vpn-target 5:5 both

[Sysname-vpn-instance-vpn1] quit

# Configure VPN targets for the IPv4 VPN of VPN instance vpn2.

<Sysname> system-view

[Sysname] ip vpn-instance vpn2

[Sysname-vpn-instance-vpn2] ipv4-family

[Sysname-vpn-ipv4-vpn2] vpn-target 3:3 export-extcommunity

[Sysname-vpn-ipv4-vpn2] vpn-target 4:4 import-extcommunity

[Sysname-vpn-ipv4-vpn2] vpn-target 5:5 both

[Sysname-vpn-ipv4-vpn2] quit

[Sysname-vpn-instance-vpn2] quit

# Configure VPN targets for the IPv6 VPN of VPN instance vpn3.

<Sysname> system-view

[Sysname] ip vpn-instance vpn3

[Sysname-vpn-instance-vpn3] ipv6-family

[Sysname-vpn-ipv6-vpn3] vpn-target 3:3 export-extcommunity

[Sysname-vpn-ipv6-vpn3] vpn-target 4:4 import-extcommunity

[Sysname-vpn-ipv6-vpn3] vpn-target 5:5 both

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网